This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jUGJ9zk9fbDOdWKVBEGjT4SJgMw.roa File: jUGJ9zk9fbDOdWKVBEGjT4SJgMw.roa (raw, json) Hash identifier: sv3V620q6WnrPjPsyOjfa57h5eqKP1NVBM/Y6UosFzo= Subject key identifier: 8D:41:89:F7:39:3D:7D:B0:CE:75:62:95:04:41:A3:4F:84:89:80:CC Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 41B6 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jUGJ9zk9fbDOdWKVBEGjT4SJgMw.roa Signing time: Sun 07 Dec 2025 20:16:40 +0000 ROA not before: Sun 07 Dec 2025 20:16:40 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9391 IP address blocks: 124.29.0.0/17 maxlen: 17 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 16822 (0x41b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Dec 7 20:16:40 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=8D4189F7393D7DB0CE7562950441A34F848980CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d4:69:dc:4a:85:92:74:50:2e:9c:f5:0c:4c: 57:74:84:b6:b1:88:8a:f5:e0:e0:1f:ae:82:a1:b7: 7e:9c:57:ed:ca:a8:2d:de:2a:5e:c9:ba:3f:16:27: 22:27:2a:fe:66:20:02:00:46:1e:40:c8:c6:a5:09: cb:e7:d2:64:be:2c:7f:e6:07:75:69:b7:f0:19:c2: 3c:d3:c5:c1:21:46:44:2c:1e:3e:14:3e:19:50:7a: be:8e:ca:15:6a:9d:4c:09:20:a9:b8:5f:00:43:74: fe:6d:1e:0b:62:4e:51:6d:6f:b3:24:25:f8:43:15: 4b:16:37:f2:34:63:34:a4:fe:94:2c:fb:90:08:23: 10:78:00:74:9d:fc:0e:02:8a:41:b8:54:b4:50:4e: 1c:ec:9d:c6:2f:95:7b:56:73:f3:b7:f8:fe:a0:ad: dc:e5:da:a9:6b:fd:95:d4:20:96:3c:f1:69:66:0c: 97:a7:82:7c:23:1b:26:4b:f0:a4:ea:ab:26:fe:55: 9e:e1:70:0a:91:71:4a:5a:fb:47:2b:60:8b:25:c6: da:0d:01:b8:1f:90:bb:5e:7f:3d:1a:d9:55:f8:7b: cb:dc:94:76:21:90:bf:28:27:ab:0d:eb:ad:b9:b4: df:a5:81:2a:db:68:b9:b7:c5:d9:c1:79:c3:ab:99: 11:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:41:89:F7:39:3D:7D:B0:CE:75:62:95:04:41:A3:4F:84:89:80:CC X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jUGJ9zk9fbDOdWKVBEGjT4SJgMw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.29.0.0/17 Signature Algorithm: sha256WithRSAEncryption 4e:a5:9d:f6:94:77:a3:35:f4:11:5b:86:00:f0:7a:9c:09:4e: 50:c1:65:8b:ef:4e:5e:91:44:10:01:d7:5f:21:ff:e6:6f:f4: ae:dc:70:0b:c7:00:ae:73:2b:4a:c2:a9:1e:9c:0f:69:9b:8c: f7:52:e3:fd:a1:4b:ba:3d:11:6f:a9:be:8d:e6:f9:87:01:5c: 25:16:6b:7c:ea:4d:6f:72:c3:ac:65:77:16:1a:6d:c6:f2:b0: a8:d0:ef:95:9c:a2:9f:72:20:2a:20:d7:18:5b:05:c8:b9:de: 88:46:6d:ab:7c:e3:4d:65:b6:06:35:11:5e:a0:bc:2b:ca:77: 8d:5e:6e:f5:91:7e:99:54:d9:eb:72:d5:6c:87:44:32:7a:bd: 77:cc:e9:b5:f7:8b:55:fa:fd:8d:a7:39:c5:06:23:22:97:9b: a4:05:31:ef:0c:4c:01:b7:d3:ed:e9:b8:4a:a2:00:7f:e4:dc: 48:f2:d1:98:da:94:ec:cb:3d:c3:c3:c9:07:38:d8:0b:53:0d: ae:17:d5:58:b4:ee:a0:15:d8:31:11:c8:c3:15:13:0f:bc:06: 97:e6:de:f9:3c:84:0a:8d:e2:98:22:95:cc:1a:b0:5d:dd:e8: 33:24:52:63:96:3c:b1:5e:1b:2c:a9:6f:6e:83:99:03:58:a4: 25:7d:0a:53 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICQbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTEyMDcy MDE2NDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDhENDE4OUY3MzkzRDdE QjBDRTc1NjI5NTA0NDFBMzRGODQ4OTgwQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI1GncSoWSdFAunPUMTFd0hLaxiIr14OAfroKht36cV+3KqC3e Kl7Juj8WJyInKv5mIAIARh5AyMalCcvn0mS+LH/mB3Vpt/AZwjzTxcEhRkQsHj4U PhlQer6OyhVqnUwJIKm4XwBDdP5tHgtiTlFtb7MkJfhDFUsWN/I0YzSk/pQs+5AI IxB4AHSd/A4CikG4VLRQThzsncYvlXtWc/O3+P6grdzl2qlr/ZXUIJY88WlmDJen gnwjGyZL8KTqqyb+VZ7hcAqRcUpa+0crYIslxtoNAbgfkLtefz0a2VX4e8vclHYh kL8oJ6sN6625tN+lgSrbaLm3xdnBecOrmRGhAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUjUGJ9zk9fbDOdWKVBEGjT4SJgMwwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9qVUdKOXprOWZiRE9kV0tW QkVHalQ0U0pnTXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH fB0AMA0GCSqGSIb3DQEBCwUAA4IBAQBOpZ32lHejNfQRW4YA8HqcCU5QwWWL705e kUQQAddfIf/mb/Su3HALxwCucytKwqkenA9pm4z3UuP9oUu6PRFvqb6N5vmHAVwl Fmt86k1vcsOsZXcWGm3G8rCo0O+VnKKfciAqINcYWwXIud6IRm2rfONNZbYGNRFe oLwryneNXm71kX6ZVNnrctVsh0Qyer13zOm194tV+v2NpznFBiMil5ukBTHvDEwB t9Pt6bhKogB/5NxI8tGY2pTsyz3Dw8kHONgLUw2uF9VYtO6gFdgxEcjDFRMPvAaX 5t75PIQKjeKYIpXMGrBd3egzJFJjljyxXhssqW9ug5kDWKQlfQpT -----END CERTIFICATE-----Generated at Mon Dec 8 08:22:54 2025 by rpki-client