This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/d5ovzwTK6jMfyDTFEC_x9N8KmNs.roa File: d5ovzwTK6jMfyDTFEC_x9N8KmNs.roa (raw, json) Hash identifier: hU5sslbgTCQ23IFGFKtwZRYZ06OmwojcGqB5lGe+htc= Subject key identifier: 77:9A:2F:CF:04:CA:EA:33:1F:C8:34:C5:10:2F:F1:F4:DF:0A:98:DB Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 065E Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/d5ovzwTK6jMfyDTFEC_x9N8KmNs.roa Signing time: Thu 15 May 2025 13:38:09 +0000 ROA not before: Thu 15 May 2025 13:38:09 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 1630 (0x65e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 15 13:38:09 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=779A2FCF04CAEA331FC834C5102FF1F4DF0A98DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:2d:ba:97:78:3a:0c:19:98:c8:8d:ce:94: 58:ab:10:e1:fc:74:82:37:2c:a3:b8:ca:c5:7b:20: 73:3a:fc:9c:fa:61:5c:cf:1d:5a:29:8f:62:12:30: 5c:94:32:14:0f:6d:53:0d:a9:e2:c2:0a:0e:1e:bf: d0:82:a8:47:02:2f:22:b2:40:81:7c:f3:87:4b:df: ad:a4:3e:47:fa:8e:b0:d8:84:55:d8:f3:a8:11:d6: e5:54:a2:81:85:89:22:44:18:4c:cc:35:47:68:8f: 7b:37:d5:af:23:38:10:6f:08:94:ca:be:2a:85:4e: 72:21:2c:ed:b0:ff:a9:ad:a6:42:6d:fc:37:c8:95: 2d:80:0f:4d:d3:52:3e:6b:66:79:86:0c:29:63:1f: 69:da:f3:4b:ce:b1:72:01:cb:de:f0:e0:c5:33:89: 2c:ee:af:8a:1c:4e:11:cd:ff:08:7c:dc:ea:2f:6a: 80:e0:2a:5c:5c:96:19:d5:8d:cf:a3:4a:c1:1b:2f: e4:d5:51:a6:15:0c:7f:08:13:70:6a:fa:0e:a5:57: c0:0f:84:dc:bc:22:38:66:7f:30:72:ec:68:68:2e: 25:89:ac:ba:ce:cc:79:45:d9:d9:31:86:83:8e:c4: 3f:fb:55:8f:19:9d:6b:d4:95:ce:66:e5:9b:75:a2: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9A:2F:CF:04:CA:EA:33:1F:C8:34:C5:10:2F:F1:F4:DF:0A:98:DB X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/d5ovzwTK6jMfyDTFEC_x9N8KmNs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 07:e4:14:b6:3a:d7:39:9d:63:97:2e:f9:2d:1f:f7:a7:63:96: fa:5d:fb:3e:85:1a:a5:40:0f:35:a3:d5:ec:29:d6:76:a7:07: f9:fe:4a:17:fb:93:88:ea:e6:22:8c:15:d2:85:94:3c:45:d7: 49:f2:a7:e0:35:53:83:ef:b3:2d:3a:c8:1f:f4:4f:4c:fc:e1: e4:b0:59:58:32:86:58:e5:3f:a6:eb:d0:52:1d:ac:bd:4c:db: a4:fc:2f:15:e4:10:a6:19:8c:e8:13:f4:06:9c:85:e6:0b:54: 65:07:bd:e7:f2:da:1f:af:ea:7f:ae:f7:b7:d7:ab:c2:3e:cd: 72:fb:20:1e:51:42:eb:48:7f:95:11:bf:ae:d6:69:57:d3:9f: 85:3d:d7:0b:33:f4:36:1c:50:a9:e9:e9:9d:b4:4d:28:1e:1a: f2:45:91:7f:53:cb:5c:22:53:9f:f3:64:21:0f:a0:ff:89:a3: d8:cd:9a:7e:be:7c:e8:a5:8c:f8:cf:56:06:95:1a:81:2b:73: 30:46:f3:f0:cb:e1:82:43:57:ed:55:79:d4:97:20:b0:fd:01: 11:17:a9:41:f5:0f:8f:57:f1:8d:6f:65:3d:25:49:ca:ff:a6: bb:1d:0a:7d:33:f0:6d:58:71:b9:e9:bb:4a:94:bc:35:c1:64: a6:c1:64:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTUx MzM4MDlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDc3OUEyRkNGMDRDQUVB MzMxRkM4MzRDNTEwMkZGMUY0REYwQTk4REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHVC26l3g6DBmYyI3OlFirEOH8dII3LKO4ysV7IHM6/Jz6YVzP HVopj2ISMFyUMhQPbVMNqeLCCg4ev9CCqEcCLyKyQIF884dL362kPkf6jrDYhFXY 86gR1uVUooGFiSJEGEzMNUdoj3s31a8jOBBvCJTKviqFTnIhLO2w/6mtpkJt/DfI lS2AD03TUj5rZnmGDCljH2na80vOsXIBy97w4MUziSzur4ocThHN/wh83OovaoDg KlxclhnVjc+jSsEbL+TVUaYVDH8IE3Bq+g6lV8APhNy8IjhmfzBy7GhoLiWJrLrO zHlF2dkxhoOOxD/7VY8ZnWvUlc5m5Zt1osFRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUd5ovzwTK6jMfyDTFEC/x9N8KmNswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9kNW92endUSzZqTWZ5RFRG RUNfeDlOOEttTnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAAfkFLY61zmdY5cu+S0f96djlvpd+z6FGqVA DzWj1ewp1nanB/n+Shf7k4jq5iKMFdKFlDxF10nyp+A1U4Pvsy06yB/0T0z84eSw WVgyhljlP6br0FIdrL1M26T8LxXkEKYZjOgT9AacheYLVGUHvefy2h+v6n+u97fX q8I+zXL7IB5RQutIf5URv67WaVfTn4U91wsz9DYcUKnp6Z20TSgeGvJFkX9Ty1wi U5/zZCEPoP+Jo9jNmn6+fOiljPjPVgaVGoErczBG8/DL4YJDV+1VedSXILD9AREX qUH1D49X8Y1vZT0lScr/prsdCn0z8G1Ycbnpu0qUvDXBZKbBZDk= -----END CERTIFICATE-----Generated at Mon Dec 22 23:36:36 2025 by rpki-client