This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/R9mOLy5iwACb0vwl0mDarc1gJMc.roa File: R9mOLy5iwACb0vwl0mDarc1gJMc.roa (raw, json) Hash identifier: t7PXoq6zzjxAhkifY/uV+tfqfyBBqSL/MIF3WhKL9Ow= Subject key identifier: 47:D9:8E:2F:2E:62:C0:00:9B:D2:FC:25:D2:60:DA:AD:CD:60:24:C7 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 04C5 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/R9mOLy5iwACb0vwl0mDarc1gJMc.roa Signing time: Tue 13 May 2025 10:37:57 +0000 ROA not before: Tue 13 May 2025 10:37:57 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 27.103.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 1221 (0x4c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 13 10:37:57 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=47D98E2F2E62C0009BD2FC25D260DAADCD6024C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:56:71:b7:9d:84:f1:81:6b:c2:ba:8e:a9:d8: 8e:0a:ab:bb:57:e8:22:f1:ce:cc:bd:86:05:71:32: e6:e9:22:0d:a2:ed:aa:8d:68:6e:ab:7f:4d:35:05: 2a:72:5b:f6:1a:32:0c:8f:34:0c:a1:bb:5f:ad:0b: dc:cf:8a:cf:d5:6b:63:e9:e4:d4:f9:a0:3b:95:49: 56:cb:30:9b:36:63:95:4e:bc:97:6f:ce:2b:bc:68: 32:80:ed:b2:02:69:e7:68:bd:5e:ec:15:9c:fe:79: 69:cd:99:11:02:eb:c7:f5:ce:fb:c4:38:49:fb:a0: 5f:21:c2:d0:cf:0d:24:1c:5c:80:ad:b6:05:be:e7: bb:44:1f:d3:f1:1c:30:13:b1:69:ff:d9:5e:c8:f4: a5:89:2e:42:8f:67:53:39:d2:62:2b:66:b5:bc:e8: d2:ae:43:67:79:35:a8:87:5a:74:3b:c8:d8:b6:a7: bf:80:e8:75:0f:a2:13:01:cc:27:a5:a6:e5:3c:09: e6:db:09:0c:1b:3f:a5:32:ec:1f:ad:65:a6:64:94: 76:ad:5d:ff:95:18:0d:ba:75:3c:13:7f:ba:b3:a2: f6:38:6f:05:2a:86:17:66:2d:ac:ee:33:fe:e4:4f: 81:a2:4f:a3:7d:93:f5:ec:be:f5:04:7f:ec:d1:ac: 0e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D9:8E:2F:2E:62:C0:00:9B:D2:FC:25:D2:60:DA:AD:CD:60:24:C7 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/R9mOLy5iwACb0vwl0mDarc1gJMc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption 95:03:b4:2d:a6:86:50:7f:86:d0:d4:1f:ca:3e:de:b7:27:cb: c8:f7:54:2b:51:ff:fd:fe:6c:e0:08:b6:d6:e2:ed:e8:91:72: 53:c7:98:b6:66:cc:e3:05:cc:a9:73:b6:d6:5b:fa:a9:b3:e6: ee:da:44:c8:39:65:cb:19:e2:7d:74:86:27:5c:40:b2:53:5f: 8e:b6:be:26:de:da:04:b3:52:17:5d:8a:c5:d4:e3:03:ab:b0: 90:cc:1a:fc:a1:2c:bd:bf:ca:29:4b:92:3e:4f:22:fd:e6:35: d9:41:c5:ec:5a:67:19:e5:4b:f3:ff:33:1e:4e:13:60:3f:7c: 01:95:81:ef:fb:3b:d9:b0:40:de:ad:f6:be:73:49:3f:7f:5a: 79:50:13:af:b7:fc:e5:40:2d:a2:94:bc:08:2b:5c:e4:9f:e3: 46:03:60:0e:de:a6:1d:e4:13:bd:b5:e0:8f:64:43:88:c5:ec: de:11:fa:cb:e6:b4:c2:8c:4f:8f:cd:ed:44:63:d6:a5:33:f3: 20:72:eb:f1:f4:2b:ff:c6:e7:d5:47:fa:d0:0d:c7:0a:c2:0e: 3b:8d:90:89:54:93:31:a5:49:73:6a:ca:d7:ae:43:94:46:a2: 31:d9:46:02:fb:bb:b1:ec:50:9f:b9:d9:27:f9:47:6b:6b:dc: d4:bf:70:1b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMx MDM3NTdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDQ3RDk4RTJGMkU2MkMw MDA5QkQyRkMyNUQyNjBEQUFEQ0Q2MDI0QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmVnG3nYTxgWvCuo6p2I4Kq7tX6CLxzsy9hgVxMubpIg2i7aqN aG6rf001BSpyW/YaMgyPNAyhu1+tC9zPis/Va2Pp5NT5oDuVSVbLMJs2Y5VOvJdv ziu8aDKA7bICaedovV7sFZz+eWnNmREC68f1zvvEOEn7oF8hwtDPDSQcXICttgW+ 57tEH9PxHDATsWn/2V7I9KWJLkKPZ1M50mIrZrW86NKuQ2d5NaiHWnQ7yNi2p7+A 6HUPohMBzCelpuU8CebbCQwbP6Uy7B+tZaZklHatXf+VGA26dTwTf7qzovY4bwUq hhdmLazuM/7kT4GiT6N9k/XsvvUEf+zRrA5bAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUR9mOLy5iwACb0vwl0mDarc1gJMcwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9SOW1PTHk1aXdBQ2Iwdnds MG1EYXJjMWdKTWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA G2cwDQYJKoZIhvcNAQELBQADggEBAJUDtC2mhlB/htDUH8o+3rcny8j3VCtR//3+ bOAIttbi7eiRclPHmLZmzOMFzKlzttZb+qmz5u7aRMg5ZcsZ4n10hidcQLJTX462 vibe2gSzUhddisXU4wOrsJDMGvyhLL2/yilLkj5PIv3mNdlBxexaZxnlS/P/Mx5O E2A/fAGVge/7O9mwQN6t9r5zST9/WnlQE6+3/OVALaKUvAgrXOSf40YDYA7eph3k E7214I9kQ4jF7N4R+svmtMKMT4/N7URj1qUz8yBy6/H0K//G59VH+tANxwrCDjuN kIlUkzGlSXNqyteuQ5RGojHZRgL7u7HsUJ+52Sf5R2tr3NS/cBs= -----END CERTIFICATE-----Generated at Mon Dec 22 13:05:50 2025 by rpki-client