This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/iGvJ8Gc1-mLDiL_S7QddUQQeN9A.roa
File: iGvJ8Gc1-mLDiL_S7QddUQQeN9A.roa (raw, json)
Hash identifier: 5qQ/Zo+16E7cInqyHwYOJsunqiz4Vngx9NTiCeAsgG4=
Subject key identifier: 88:6B:C9:F0:67:35:FA:62:C3:88:BF:D2:ED:07:5D:51:04:1E:37:D0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 078D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iGvJ8Gc1-mLDiL_S7QddUQQeN9A.roa
Signing time: Sat 17 May 2025 03:38:08 +0000
ROA not before: Sat 17 May 2025 03:38:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1933 (0x78d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 03:38:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=886BC9F06735FA62C388BFD2ED075D51041E37D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:bf:e3:fe:88:da:f6:5e:ba:0f:84:41:f4:
7e:92:cf:f6:e6:62:a3:ae:32:7d:4c:8b:9b:86:5f:
fe:e1:e2:7c:b3:b5:24:5a:15:16:31:0b:24:4f:60:
9b:95:d0:09:b4:a3:6b:23:db:32:3c:d7:17:0e:ee:
8f:0a:17:80:fa:59:9a:31:cf:ef:c9:03:a6:01:3a:
b5:c0:5c:e5:7a:3f:9a:e0:bf:e3:09:1f:c5:c5:29:
16:6a:1f:32:03:28:c0:2b:4a:f0:67:5e:14:1b:9c:
c6:f6:14:39:fc:a7:d1:e8:6a:9b:08:6d:5c:3f:03:
8f:08:7f:32:02:4a:6b:94:51:33:50:fa:0f:c7:f0:
42:5b:79:4a:d6:10:3e:05:3b:7f:65:47:a2:15:11:
5b:5b:91:f4:cf:57:c4:5e:d0:83:a4:36:b2:c9:97:
c6:f1:ba:47:9b:62:f7:15:c7:37:76:28:4a:08:06:
cb:da:b5:eb:a4:74:2d:b1:3f:84:e0:42:58:77:cd:
8b:e3:ca:57:d7:e8:52:dc:2b:de:da:bd:3a:75:15:
ed:2a:94:0c:94:b7:1e:b8:3c:3f:9b:2e:7a:65:94:
df:6b:47:b5:64:16:3f:94:6e:24:e9:16:da:6f:ba:
c6:6a:b4:ca:f7:d3:a2:e5:df:dd:c1:cb:24:f7:eb:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6B:C9:F0:67:35:FA:62:C3:88:BF:D2:ED:07:5D:51:04:1E:37:D0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iGvJ8Gc1-mLDiL_S7QddUQQeN9A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:7a:c2:b5:c5:cd:e1:8d:8e:90:78:a9:4a:8c:70:d7:e7:b2:
0c:21:66:dc:b9:80:7d:47:06:95:c7:2c:3c:2e:04:c3:2d:e6:
16:36:28:66:52:c7:b9:49:8e:98:f3:83:b4:d8:d1:52:32:af:
30:25:e9:ec:f3:6d:f1:1c:35:5a:41:ef:b2:14:55:ef:78:f9:
cd:27:e6:1b:b0:d0:d9:32:55:51:1f:43:52:38:2f:98:e9:d9:
65:92:8f:37:c3:ce:e2:92:f1:a5:80:c5:ac:60:30:d9:b7:11:
84:42:af:e0:4a:89:3a:2c:31:b4:e9:ac:6d:1f:23:6a:5b:4e:
0c:4e:f0:ab:86:cd:da:cc:e9:27:28:fa:31:3e:92:e1:89:7a:
ce:d7:ca:7d:0a:20:c5:8d:14:55:b0:82:03:7a:a1:70:04:6a:
84:2e:e5:e2:9a:25:52:e5:ce:af:11:91:51:18:f4:76:32:b6:
d4:49:50:c4:d8:7e:91:9b:8b:28:1e:fb:bf:c5:4f:9b:66:cc:
9e:23:97:09:b7:31:bb:58:9e:23:03:74:75:d7:b1:d5:79:06:
1b:4f:14:90:0d:b1:ef:2c:14:20:b8:45:cc:57:f2:95:59:5e:
a4:68:a9:63:21:81:51:91:94:87:9c:94:9e:83:ab:ef:07:8b:
5e:7e:eb:ae
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcw
MzM4MDhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDg4NkJDOUYwNjczNUZB
NjJDMzg4QkZEMkVEMDc1RDUxMDQxRTM3RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9e7/j/oja9l66D4RB9H6Sz/bmYqOuMn1Mi5uGX/7h4nyztSRa
FRYxCyRPYJuV0Am0o2sj2zI81xcO7o8KF4D6WZoxz+/JA6YBOrXAXOV6P5rgv+MJ
H8XFKRZqHzIDKMArSvBnXhQbnMb2FDn8p9HoapsIbVw/A48IfzICSmuUUTNQ+g/H
8EJbeUrWED4FO39lR6IVEVtbkfTPV8Re0IOkNrLJl8bxukebYvcVxzd2KEoIBsva
teukdC2xP4TgQlh3zYvjylfX6FLcK97avTp1Fe0qlAyUtx64PD+bLnpllN9rR7Vk
Fj+UbiTpFtpvusZqtMr306Ll393ByyT365QBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUiGvJ8Gc1+mLDiL/S7QddUQQeN9AwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9pR3ZKOEdjMS1tTERpTF9T
N1FkZFVRUWVOOUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBABJ6wrXFzeGNjpB4qUqMcNfnsgwhZty5gH1H
BpXHLDwuBMMt5hY2KGZSx7lJjpjzg7TY0VIyrzAl6ezzbfEcNVpB77IUVe94+c0n
5huw0NkyVVEfQ1I4L5jp2WWSjzfDzuKS8aWAxaxgMNm3EYRCr+BKiTosMbTprG0f
I2pbTgxO8KuGzdrM6Sco+jE+kuGJes7Xyn0KIMWNFFWwggN6oXAEaoQu5eKaJVLl
zq8RkVEY9HYyttRJUMTYfpGbiyge+7/FT5tmzJ4jlwm3MbtYniMDdHXXsdV5BhtP
FJANse8sFCC4RcxX8pVZXqRoqWMhgVGRlIeclJ6Dq+8Hi15+664=
-----END CERTIFICATE-----
Generated at Mon Dec 22 12:32:08 2025 by rpki-client