This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/iKuQoQyCdnt_DAJh0REROR3ADxc.roa File: iKuQoQyCdnt_DAJh0REROR3ADxc.roa (raw, json) Hash identifier: QTqWtWPWL8kAVSo2pO+BuijZLp3eHseVkxf8LDMgBEI= Subject key identifier: 88:AB:90:A1:0C:82:76:7B:7F:0C:02:61:D1:11:11:39:1D:C0:0F:17 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 01C2 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iKuQoQyCdnt_DAJh0REROR3ADxc.roa Signing time: Fri 09 May 2025 10:07:48 +0000 ROA not before: Fri 09 May 2025 10:07:48 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 9 10:07:48 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=88AB90A10C82767B7F0C0261D11111391DC00F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:43:b6:5e:5a:29:54:83:3e:3c:dd:da:22: 92:f4:da:f8:53:12:ce:89:30:21:2e:56:01:6c:ea: 93:d9:7b:69:64:a3:8e:b9:b6:cb:6d:81:16:50:7f: 3f:95:f0:f8:79:3e:e1:1e:91:c6:1a:33:9c:f1:ab: b2:7a:c1:b8:e2:61:c8:bd:cf:e7:d2:3d:0a:b8:74: 8e:ff:a5:44:71:c2:43:46:c4:d0:c0:60:51:26:f7: e6:61:35:5f:f1:75:69:6c:b0:fa:bb:2d:eb:d5:fe: a1:ba:aa:ba:b7:21:3a:a4:97:8f:a4:fb:75:5b:92: 0f:8b:6e:4f:a0:68:35:8a:1b:16:f3:a5:b2:a1:f3: 05:b5:b4:f0:d9:35:3d:5e:c8:a2:d9:bf:81:cd:f7: 22:62:bd:3d:b9:82:58:36:ae:c8:5b:d5:66:f2:b2: 13:57:78:14:81:fb:c0:a7:cc:63:94:60:61:ba:06: 20:d3:e4:11:ea:de:ab:68:44:3e:f6:99:f2:ca:32: d3:25:5e:39:fd:2a:03:e3:2a:db:9a:bb:ec:8b:72: b4:04:f3:67:5b:8d:14:33:1e:68:1e:bc:b4:09:b9: ba:75:07:6a:e6:8f:c7:bb:b1:dd:b5:62:38:cc:a8: c8:e1:74:8b:fb:38:8c:d5:8e:b2:57:50:14:41:bb: 83:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AB:90:A1:0C:82:76:7B:7F:0C:02:61:D1:11:11:39:1D:C0:0F:17 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iKuQoQyCdnt_DAJh0REROR3ADxc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 94:e4:b9:14:c3:44:72:04:85:50:0a:d4:b4:19:4d:86:4f:81: 8e:1e:26:ce:71:9a:84:6b:f5:4d:d9:85:8e:33:f5:79:61:f3: a2:27:a0:62:32:66:a2:80:42:af:c2:d3:c3:5c:0c:34:66:a2: 15:bd:39:57:95:e2:a8:ad:ee:79:5e:4c:da:e3:81:bd:db:ed: 42:5d:8d:23:0b:42:28:92:32:cf:77:c9:f1:ce:36:e6:51:52: c8:76:8d:ff:69:b2:b3:ae:a9:ad:d9:e4:10:4b:ac:10:0c:48: 4e:3f:08:85:79:78:80:a3:b5:6f:12:e2:f7:c2:1a:c7:57:fa: d8:4c:28:c1:dd:13:c5:41:93:66:73:4a:10:14:1c:a1:2f:2a: 3a:b7:fb:2a:76:8a:38:15:67:00:2d:60:55:bd:cf:27:7e:53: 26:d0:b6:c8:79:49:cb:bf:68:a2:be:13:6e:2f:75:d5:e1:47: 11:f0:d8:ef:b6:ec:3a:62:9d:44:8f:5d:a0:e4:cb:c8:46:b7: eb:37:48:62:0b:5b:52:72:68:58:c7:27:e4:b0:28:c1:df:25: bd:f3:cc:bc:cb:e3:9e:3f:a2:5d:08:84:a5:5b:d5:b6:15:45: df:14:ba:30:29:e3:f0:4a:8c:e0:bc:9b:93:52:44:7b:86:3d: 67:cd:4f:c5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDkx MDA3NDhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDg4QUI5MEExMEM4Mjc2 N0I3RjBDMDI2MUQxMTExMTM5MURDMDBGMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDExkO2XlopVIM+PN3aIpL02vhTEs6JMCEuVgFs6pPZe2lko465 tsttgRZQfz+V8Ph5PuEekcYaM5zxq7J6wbjiYci9z+fSPQq4dI7/pURxwkNGxNDA YFEm9+ZhNV/xdWlssPq7LevV/qG6qrq3ITqkl4+k+3Vbkg+Lbk+gaDWKGxbzpbKh 8wW1tPDZNT1eyKLZv4HN9yJivT25glg2rshb1WbyshNXeBSB+8CnzGOUYGG6BiDT 5BHq3qtoRD72mfLKMtMlXjn9KgPjKtuau+yLcrQE82dbjRQzHmgevLQJubp1B2rm j8e7sd21YjjMqMjhdIv7OIzVjrJXUBRBu4N9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiKuQoQyCdnt/DAJh0REROR3ADxcwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9pS3VRb1F5Q2RudF9EQUpo MFJFUk9SM0FEeGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAJTkuRTDRHIEhVAK1LQZTYZPgY4eJs5xmoRr 9U3ZhY4z9Xlh86InoGIyZqKAQq/C08NcDDRmohW9OVeV4qit7nleTNrjgb3b7UJd jSMLQiiSMs93yfHONuZRUsh2jf9psrOuqa3Z5BBLrBAMSE4/CIV5eICjtW8S4vfC GsdX+thMKMHdE8VBk2ZzShAUHKEvKjq3+yp2ijgVZwAtYFW9zyd+UybQtsh5Scu/ aKK+E24vddXhRxHw2O+27DpinUSPXaDky8hGt+s3SGILW1JyaFjHJ+SwKMHfJb3z zLzL454/ol0IhKVb1bYVRd8UujAp4/BKjOC8m5NSRHuGPWfNT8U= -----END CERTIFICATE-----Generated at Mon Dec 22 13:05:28 2025 by rpki-client