This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PQp1hyaxYdcRq8uMdPxdI7c28a0.roa File: PQp1hyaxYdcRq8uMdPxdI7c28a0.roa (raw, json) Hash identifier: 5zMpibpyoPBU8wv5a++ZXE1kSovbofhrxjFTDkAjUjM= Subject key identifier: 3D:0A:75:87:26:B1:61:D7:11:AB:CB:8C:74:FC:5D:23:B7:36:F1:AD Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0664 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PQp1hyaxYdcRq8uMdPxdI7c28a0.roa Signing time: Thu 15 May 2025 14:38:09 +0000 ROA not before: Thu 15 May 2025 14:38:09 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 15 14:38:09 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=3D0A758726B161D711ABCB8C74FC5D23B736F1AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:61:43:3a:5f:b8:62:10:b9:8c:11:2d:cc: 77:ba:e7:07:79:bc:95:58:60:d1:76:13:ff:cc:b7: 55:90:55:75:e9:90:27:c6:92:1b:4f:1e:88:dd:5a: 2b:09:15:c2:e4:e1:46:ca:6a:d0:a8:ad:0e:43:04: 32:36:2f:b7:f9:dc:37:e0:5b:fe:1b:0a:61:be:ad: 35:fd:81:8a:47:bc:a2:4c:a4:00:6f:6b:73:10:06: 5a:35:82:42:e3:d9:6f:88:cb:bf:5f:c9:8d:6f:04: eb:2c:da:b6:81:7d:c5:ee:d2:4c:23:66:0c:53:9f: 66:58:a8:92:14:a0:df:59:0f:5e:30:62:67:35:c2: 3a:02:c7:72:40:fe:c3:e9:c5:6b:ec:3f:b5:8e:71: 12:fc:a4:70:26:52:3f:5e:ca:5f:ff:7a:10:62:f2: 28:52:3e:62:34:9a:ff:e1:a8:b8:20:67:aa:b5:83: 21:8f:63:2b:00:8b:f8:df:ee:93:07:f6:9f:de:a2: 2d:1d:58:75:c7:7f:6b:e5:ca:34:9a:dd:96:c9:c8: ae:56:eb:59:7e:c4:52:b4:bf:82:11:2f:c5:2b:1c: 5d:1f:63:8d:c0:7d:4c:16:00:c4:9c:1e:d2:64:e9: fd:05:4a:dd:b9:95:a6:14:e7:d7:3b:5d:fd:12:de: 04:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0A:75:87:26:B1:61:D7:11:AB:CB:8C:74:FC:5D:23:B7:36:F1:AD X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PQp1hyaxYdcRq8uMdPxdI7c28a0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption ab:db:11:97:fb:b0:5f:00:96:40:e5:8d:72:df:ab:a9:86:60: f4:7d:0f:a4:66:1c:96:bc:0c:01:42:43:10:15:d5:71:91:b1: b9:78:2c:5b:df:41:c5:8f:82:d9:e7:67:82:bb:8c:94:10:7e: a7:71:c3:b3:c2:8a:37:ce:4c:13:ee:4a:96:29:39:8b:de:82: a2:60:4b:13:e3:79:75:1b:7b:44:80:c8:a8:50:77:01:7d:29: 22:ea:7a:f1:63:19:fd:d8:fa:ad:fe:dc:8f:b6:ce:7a:7c:2c: 42:d0:19:63:a4:f0:6d:70:be:b7:b0:d7:51:ad:18:7d:c4:48: 82:ad:98:1d:5d:85:d1:a6:7b:54:f1:af:89:79:e2:db:a8:0a: 7f:ce:a9:f7:8d:71:f5:3d:a4:99:04:3b:0f:2a:85:b7:5f:77: ed:1f:2b:d8:d6:e2:67:9b:8b:2d:6e:5c:97:20:d3:b9:f5:0c: 28:8a:95:53:2d:90:7f:be:c5:cd:df:a8:92:bb:01:eb:93:29: 6a:32:0d:4b:a6:25:e9:c7:33:0e:2f:c2:b7:a1:e7:88:cb:38: 63:74:3a:3b:05:7a:99:f7:67:c2:bf:50:d2:d0:68:d5:ec:be: 6f:19:54:68:33:62:c7:02:e0:5c:b1:83:ac:19:92:75:75:91: 25:c2:91:78 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTUx NDM4MDlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDNEMEE3NTg3MjZCMTYx RDcxMUFCQ0I4Qzc0RkM1RDIzQjczNkYxQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1BWFDOl+4YhC5jBEtzHe65wd5vJVYYNF2E//Mt1WQVXXpkCfG khtPHojdWisJFcLk4UbKatCorQ5DBDI2L7f53DfgW/4bCmG+rTX9gYpHvKJMpABv a3MQBlo1gkLj2W+Iy79fyY1vBOss2raBfcXu0kwjZgxTn2ZYqJIUoN9ZD14wYmc1 wjoCx3JA/sPpxWvsP7WOcRL8pHAmUj9eyl//ehBi8ihSPmI0mv/hqLggZ6q1gyGP YysAi/jf7pMH9p/eoi0dWHXHf2vlyjSa3ZbJyK5W61l+xFK0v4IRL8UrHF0fY43A fUwWAMScHtJk6f0FSt25laYU59c7Xf0S3gQPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUPQp1hyaxYdcRq8uMdPxdI7c28a0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9QUXAxaHlheFlkY1JxOHVN ZFB4ZEk3YzI4YTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAKvbEZf7sF8AlkDljXLfq6mGYPR9D6RmHJa8 DAFCQxAV1XGRsbl4LFvfQcWPgtnnZ4K7jJQQfqdxw7PCijfOTBPuSpYpOYvegqJg SxPjeXUbe0SAyKhQdwF9KSLqevFjGf3Y+q3+3I+2znp8LELQGWOk8G1wvrew11Gt GH3ESIKtmB1dhdGme1Txr4l54tuoCn/OqfeNcfU9pJkEOw8qhbdfd+0fK9jW4meb iy1uXJcg07n1DCiKlVMtkH++xc3fqJK7AeuTKWoyDUumJenHMw4vwreh54jLOGN0 OjsFepn3Z8K/UNLQaNXsvm8ZVGgzYscC4Fyxg6wZknV1kSXCkXg= -----END CERTIFICATE-----Generated at Mon Dec 22 11:11:33 2025 by rpki-client