This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/cIBoCv9n9co3wi-Wuo7fXhb4KZ0.roa File: cIBoCv9n9co3wi-Wuo7fXhb4KZ0.roa (raw, json) Hash identifier: tMHB73J32bqUOOLzG96U2lSSZ5o0jgyJB8hDJUJRzaE= Subject key identifier: 70:80:68:0A:FF:67:F5:CA:37:C2:2F:96:BA:8E:DF:5E:16:F8:29:9D Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 028C Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cIBoCv9n9co3wi-Wuo7fXhb4KZ0.roa Signing time: Sat 10 May 2025 11:37:49 +0000 ROA not before: Sat 10 May 2025 11:37:49 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 10 11:37:49 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=7080680AFF67F5CA37C22F96BA8EDF5E16F8299D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:59:64:10:21:44:50:3c:1d:62:e9:6d:ed: 6d:08:bb:db:6c:63:66:f7:26:87:9a:e7:97:4c:e3: 7c:0a:60:7b:56:5e:cf:98:bb:f7:86:83:27:43:0c: 71:0e:69:15:ec:dc:f7:2a:d5:2e:b0:4d:f7:09:85: 56:06:33:2c:ea:e3:5c:89:a3:22:4a:f5:4e:ee:a7: ce:b7:8b:fd:05:e8:24:19:2d:ea:07:a2:7f:4b:d2: a8:be:80:4f:57:5b:86:2b:03:6f:95:5e:c6:2b:16: f3:b1:dd:e2:e9:a0:c5:34:af:24:16:54:09:ee:07: e7:23:b1:b4:05:59:15:e8:91:71:b3:20:54:33:81: 59:4a:f7:6e:df:e8:72:9e:d2:aa:c0:e1:e7:73:e1: 6d:f1:a8:d2:99:ac:a6:c1:11:84:60:17:7e:f2:35: b0:35:c9:75:d0:ed:61:30:43:c3:fb:22:80:77:84: e3:55:e4:a5:90:b8:3d:da:13:d5:67:b9:89:7d:25: 9c:5f:5a:28:1e:2c:dc:3f:21:97:8e:4e:e0:cf:d1: c7:67:f3:9b:c8:93:e4:5d:ae:90:08:f5:d3:1f:6b: 9a:f8:08:34:77:cd:c0:c9:93:f4:a9:95:14:07:2a: b8:66:6b:11:f9:e9:d5:1c:b2:b5:cd:5b:9f:d6:f7: 1d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:80:68:0A:FF:67:F5:CA:37:C2:2F:96:BA:8E:DF:5E:16:F8:29:9D X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cIBoCv9n9co3wi-Wuo7fXhb4KZ0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 33:47:b2:38:d9:1d:45:3b:0d:d4:82:54:09:45:7d:42:dc:51: 5f:b5:2a:20:a3:85:62:fc:ff:0c:e6:8f:63:fe:dd:01:46:6d: ce:3b:db:e9:7a:4b:67:a9:0c:30:0d:41:59:b5:0d:88:07:d7: f0:9a:ee:78:79:34:92:05:38:0c:76:e4:f6:af:b9:8b:d3:c6: 3c:a4:ac:c8:c7:c3:30:b6:53:66:ac:f1:a4:d1:d6:d4:2a:c9: ce:d1:39:af:9d:09:25:19:be:65:97:f0:f8:58:be:a4:87:42: 01:5b:85:21:33:28:08:00:df:ad:f7:7c:84:c6:44:fb:2a:5a: 0d:35:02:ce:13:0a:66:0e:e5:d7:b1:80:2e:e6:f9:67:4b:c5: 37:99:94:a0:32:9a:5a:8d:3b:1e:03:03:ed:70:7d:a7:bd:ef: 5b:19:f5:e5:f1:7f:d4:5d:cd:ac:9e:2b:a6:48:93:eb:5f:a7: c3:28:f3:4a:4b:6d:c1:ae:3d:1c:42:31:af:af:38:86:3c:95: 40:1e:95:6b:ac:26:11:f0:68:2f:3b:78:3c:d6:8e:26:39:b3: e7:49:9b:fc:38:09:22:c7:5c:30:2d:8a:b5:af:97:66:5d:4b: b4:86:70:45:3a:a9:86:86:85:d4:78:05:bd:c8:22:0b:3d:ba: 96:6c:09:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTAx MTM3NDlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDcwODA2ODBBRkY2N0Y1 Q0EzN0MyMkY5NkJBOEVERjVFMTZGODI5OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3zFlkECFEUDwdYult7W0Iu9tsY2b3Joea55dM43wKYHtWXs+Y u/eGgydDDHEOaRXs3Pcq1S6wTfcJhVYGMyzq41yJoyJK9U7up863i/0F6CQZLeoH on9L0qi+gE9XW4YrA2+VXsYrFvOx3eLpoMU0ryQWVAnuB+cjsbQFWRXokXGzIFQz gVlK927f6HKe0qrA4edz4W3xqNKZrKbBEYRgF37yNbA1yXXQ7WEwQ8P7IoB3hONV 5KWQuD3aE9VnuYl9JZxfWigeLNw/IZeOTuDP0cdn85vIk+RdrpAI9dMfa5r4CDR3 zcDJk/SplRQHKrhmaxH56dUcsrXNW5/W9x21AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUcIBoCv9n9co3wi+Wuo7fXhb4KZ0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9jSUJvQ3Y5bjljbzN3aS1X dW83ZlhoYjRLWjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBADNHsjjZHUU7DdSCVAlFfULcUV+1KiCjhWL8 /wzmj2P+3QFGbc472+l6S2epDDANQVm1DYgH1/Ca7nh5NJIFOAx25PavuYvTxjyk rMjHwzC2U2as8aTR1tQqyc7ROa+dCSUZvmWX8PhYvqSHQgFbhSEzKAgA3633fITG RPsqWg01As4TCmYO5dexgC7m+WdLxTeZlKAymlqNOx4DA+1wfae971sZ9eXxf9Rd zayeK6ZIk+tfp8Mo80pLbcGuPRxCMa+vOIY8lUAelWusJhHwaC87eDzWjiY5s+dJ m/w4CSLHXDAtirWvl2ZdS7SGcEU6qYaGhdR4Bb3IIgs9upZsCZU= -----END CERTIFICATE-----Generated at Mon Dec 22 12:51:33 2025 by rpki-client