This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ZugCfdBM7i1nX7-62wQepkPdjIY.roa File: ZugCfdBM7i1nX7-62wQepkPdjIY.roa (raw, json) Hash identifier: +ta1AnAaL/RsmBNkBLVkvgwX5C+N1LhvmajeykNTA/g= Subject key identifier: 66:E8:02:7D:D0:4C:EE:2D:67:5F:BF:BA:DB:04:1E:A6:43:DD:8C:86 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 0544 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZugCfdBM7i1nX7-62wQepkPdjIY.roa Signing time: Wed 14 May 2025 02:38:02 +0000 ROA not before: Wed 14 May 2025 02:38:02 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 1348 (0x544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 14 02:38:02 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=66E8027DD04CEE2D675FBFBADB041EA643DD8C86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:d5:e7:ee:2b:46:aa:45:98:5e:ef:c0:8a: 4e:cd:b8:2b:ef:ca:15:31:86:8c:a1:de:79:63:d5: f8:43:59:50:2b:71:cc:0c:94:b7:62:db:14:8a:46: ac:eb:75:d0:fc:42:08:14:f4:bf:5c:6f:a1:db:78: ad:66:cf:0c:84:c8:65:0a:91:61:5e:9a:31:39:fc: c9:b1:22:bd:30:3d:89:2c:09:e5:1c:01:5c:45:a0: 7a:74:93:db:46:1b:5d:e2:2e:fe:c0:d4:9a:7e:1f: 8d:e3:a9:a1:0a:15:8d:94:d6:b9:5b:f0:ef:b7:df: 31:ca:6f:04:76:8e:5c:91:79:79:3c:78:39:34:6a: f1:28:d1:3a:8f:63:d1:3c:3a:ce:0a:5b:77:57:14: 13:d9:98:39:91:c4:66:bd:07:ae:f0:43:46:c9:b8: 1e:d0:29:cc:3d:35:aa:7b:f5:64:90:15:6a:80:69: 1a:53:81:8c:a5:69:cf:ae:55:ee:7b:5b:3e:93:93: f6:ca:1e:e4:c1:6a:00:8e:2a:cb:2a:19:f7:65:08: 4b:73:2e:0d:92:b1:82:04:d4:12:28:84:b3:f1:95: 04:fe:32:ce:3a:c8:cf:67:be:fd:6b:14:e7:f9:3f: 44:89:a7:03:00:b8:f7:7f:ec:45:68:d8:4a:77:ce: 1b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E8:02:7D:D0:4C:EE:2D:67:5F:BF:BA:DB:04:1E:A6:43:DD:8C:86 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZugCfdBM7i1nX7-62wQepkPdjIY.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption ac:e6:b8:b9:e8:da:43:bd:cb:93:d6:9d:81:67:16:e5:af:6f: 90:f2:2a:3b:11:15:cb:3e:c6:21:4f:0d:45:ca:95:07:46:18: 6e:75:f3:52:64:5f:17:50:0f:19:93:8a:e1:cd:7e:f5:bf:97: 17:27:97:83:83:a8:a5:45:4b:7f:ea:54:e8:50:aa:d4:87:cc: 06:17:eb:45:ee:06:a1:7a:51:ab:d2:a5:1d:0a:14:4c:3d:d3: 2e:06:92:37:0b:80:c4:a3:16:70:7c:bf:b1:e8:a3:0e:22:ef: 4c:c8:df:9b:6a:df:19:ba:2b:42:62:fc:4d:f3:22:c9:cd:9a: 26:d2:0b:56:ed:54:50:eb:db:90:a9:0b:94:53:c2:71:84:d5: 35:c8:82:e0:2b:cf:30:b1:c6:59:f3:08:cc:3d:ad:87:4b:b0: b7:da:6c:1d:fc:1e:93:15:23:02:85:4a:1b:de:14:39:e7:15: d3:be:5d:25:03:64:0a:63:67:66:1e:ca:9b:ce:4c:c0:44:4b: e6:22:d0:4f:86:3f:3f:e6:e7:75:ef:e5:dc:5d:32:a2:61:58: 4c:38:f3:b2:25:cb:a8:bf:56:b3:46:cf:61:81:a4:53:94:11: ef:f3:00:53:28:72:4d:6a:ad:d5:ff:a1:4a:6a:c7:07:3f:ef: 0d:3a:b7:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBUQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTQw MjM4MDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDY2RTgwMjdERDA0Q0VF MkQ2NzVGQkZCQURCMDQxRUE2NDNERDhDODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAI9Xn7itGqkWYXu/Aik7NuCvvyhUxhoyh3nlj1fhDWVArccwM lLdi2xSKRqzrddD8QggU9L9cb6HbeK1mzwyEyGUKkWFemjE5/MmxIr0wPYksCeUc AVxFoHp0k9tGG13iLv7A1Jp+H43jqaEKFY2U1rlb8O+33zHKbwR2jlyReXk8eDk0 avEo0TqPY9E8Os4KW3dXFBPZmDmRxGa9B67wQ0bJuB7QKcw9Nap79WSQFWqAaRpT gYylac+uVe57Wz6Tk/bKHuTBagCOKssqGfdlCEtzLg2SsYIE1BIohLPxlQT+Ms46 yM9nvv1rFOf5P0SJpwMAuPd/7EVo2Ep3zhvtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZugCfdBM7i1nX7+62wQepkPdjIYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9adWdDZmRCTTdpMW5YNy02 MndRZXBrUGRqSVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAKzmuLno2kO9y5PWnYFnFuWvb5DyKjsRFcs+ xiFPDUXKlQdGGG5181JkXxdQDxmTiuHNfvW/lxcnl4ODqKVFS3/qVOhQqtSHzAYX 60XuBqF6UavSpR0KFEw90y4GkjcLgMSjFnB8v7Hoow4i70zI35tq3xm6K0Ji/E3z IsnNmibSC1btVFDr25CpC5RTwnGE1TXIguArzzCxxlnzCMw9rYdLsLfabB38HpMV IwKFShveFDnnFdO+XSUDZApjZ2YeypvOTMBES+Yi0E+GPz/m53Xv5dxdMqJhWEw4 87Ily6i/VrNGz2GBpFOUEe/zAFMock1qrdX/oUpqxwc/7w06t/I= -----END CERTIFICATE-----Generated at Tue Dec 23 01:30:50 2025 by rpki-client