This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/MsdqZ65rN_ywlqisUoFHwUU95b0.roa File: MsdqZ65rN_ywlqisUoFHwUU95b0.roa (raw, json) Hash identifier: l6SQ10fNqs4ONh/Mc8VY5ESCiXYdy9DhtTzNVH6AR+U= Subject key identifier: 32:C7:6A:67:AE:6B:37:FC:B0:96:A8:AC:52:81:47:C1:45:3D:E5:BD Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: E6 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/MsdqZ65rN_ywlqisUoFHwUU95b0.roa Signing time: Thu 08 May 2025 06:37:40 +0000 ROA not before: Thu 08 May 2025 06:37:40 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 8 06:37:40 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=32C76A67AE6B37FCB096A8AC528147C1453DE5BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:42:3e:ea:d9:76:ba:19:0b:21:f1:2b:8f:f6: b7:81:41:70:58:1f:28:0c:42:ce:67:86:4b:2d:b8: 9a:5c:d5:b9:87:d0:2b:45:86:cd:7d:fa:27:a3:e6: 67:d2:55:b9:6c:cc:99:f9:c9:e7:19:37:ae:66:f5: 7d:53:4e:41:b5:e6:eb:f2:8f:e1:73:0c:44:88:f0: 73:ad:b3:fa:d8:04:eb:b8:f1:8d:ef:00:2c:3c:13: 76:06:16:a4:02:a5:7c:c5:82:3a:11:8e:88:1f:e9: cd:99:2f:34:6f:5c:49:39:1b:a8:f6:16:78:ac:45: 1d:f5:ee:7e:fe:eb:02:50:65:c3:29:7a:96:0f:b5: 4c:ff:9f:6e:94:88:6c:0e:be:a8:d5:e8:f9:70:62: 8c:54:4f:c3:68:ef:f5:aa:17:1f:c8:9b:78:37:43: 89:6c:a2:d2:74:2b:be:dd:dd:f6:18:1c:98:7a:be: 7f:c7:3d:d5:cd:9a:e6:98:eb:08:a5:6b:c7:e0:2f: b2:c4:64:a7:46:db:19:b4:81:1b:0a:4b:ce:ad:b8: 1f:78:d4:b0:25:6c:39:47:87:dc:8e:9f:dc:ca:68: c7:46:f7:f9:86:fa:bd:70:13:5b:78:8f:9e:5f:3b: 83:9d:e7:fa:48:71:71:b7:75:f1:59:2a:e3:15:1b: 88:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C7:6A:67:AE:6B:37:FC:B0:96:A8:AC:52:81:47:C1:45:3D:E5:BD X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/MsdqZ65rN_ywlqisUoFHwUU95b0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 55:7e:d1:a8:d5:35:f5:19:82:68:3b:00:ce:c6:c2:a9:1f:ef: c3:50:d9:18:36:72:f5:cb:f1:11:40:68:4e:d8:c8:3f:fc:ba: 4b:ae:cf:86:de:45:ed:ac:00:97:b4:f8:7b:07:1c:a7:2b:b7: 8c:f3:6a:68:6f:82:bd:3c:28:b3:38:c1:6b:3b:d0:45:89:93: 10:8c:11:fe:5d:58:93:20:da:c2:58:34:6a:d6:f4:1f:52:51: 39:2c:d1:b6:e9:5a:a6:3f:56:0b:87:7c:70:e8:e3:05:c5:f4: ee:9f:64:7e:0d:f9:b9:7b:56:ea:53:d6:ab:74:5b:4f:20:59: 09:a0:8f:9a:6e:2c:6d:eb:51:f4:96:6a:d0:a0:17:73:05:34: fb:e4:d4:d1:d4:52:39:20:17:19:26:9a:f9:be:61:d7:bd:a1: 3e:61:a8:7d:40:68:b4:19:b3:25:6f:f9:78:47:42:0f:67:d6: d4:88:7f:b4:01:6e:11:30:38:17:49:cb:4f:05:b2:18:1c:a2: 3a:1d:fb:9b:83:79:34:a3:dd:1c:48:de:96:18:cc:e6:52:30: d9:3e:ac:1f:fd:c1:2c:fe:5e:44:40:48:92:f3:0e:50:c4:4c: e0:4c:42:37:08:1c:3c:3a:14:9d:37:56:13:1b:a8:a7:81:4d: 38:cc:3d:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDgw NjM3NDBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDMyQzc2QTY3QUU2QjM3 RkNCMDk2QThBQzUyODE0N0MxNDUzREU1QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Qj7q2Xa6GQsh8SuP9reBQXBYHygMQs5nhkstuJpc1bmH0CtF hs19+iej5mfSVblszJn5yecZN65m9X1TTkG15uvyj+FzDESI8HOts/rYBOu48Y3v ACw8E3YGFqQCpXzFgjoRjogf6c2ZLzRvXEk5G6j2FnisRR317n7+6wJQZcMpepYP tUz/n26UiGwOvqjV6PlwYoxUT8No7/WqFx/Im3g3Q4lsotJ0K77d3fYYHJh6vn/H PdXNmuaY6wila8fgL7LEZKdG2xm0gRsKS86tuB941LAlbDlHh9yOn9zKaMdG9/mG +r1wE1t4j55fO4Od5/pIcXG3dfFZKuMVG4jtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMsdqZ65rN/ywlqisUoFHwUU95b0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9Nc2RxWjY1ck5feXdscWlz VW9GSHdVVTk1YjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAFV+0ajVNfUZgmg7AM7Gwqkf78NQ2Rg2cvXL 8RFAaE7YyD/8ukuuz4beRe2sAJe0+HsHHKcrt4zzamhvgr08KLM4wWs70EWJkxCM Ef5dWJMg2sJYNGrW9B9SUTks0bbpWqY/VguHfHDo4wXF9O6fZH4N+bl7VupT1qt0 W08gWQmgj5puLG3rUfSWatCgF3MFNPvk1NHUUjkgFxkmmvm+Yde9oT5hqH1AaLQZ syVv+XhHQg9n1tSIf7QBbhEwOBdJy08Fshgcojod+5uDeTSj3RxI3pYYzOZSMNk+ rB/9wSz+XkRASJLzDlDETOBMQjcIHDw6FJ03VhMbqKeBTTjMPQY= -----END CERTIFICATE-----Generated at Mon Dec 22 11:10:59 2025 by rpki-client