This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/l4iDPLDFiEis-AbKvc487cqXVBg.roa File: l4iDPLDFiEis-AbKvc487cqXVBg.roa (raw, json) Hash identifier: TVFRdtBgGW4r72aePS3rr6MuUOy7WHNBjG14p52bijo= Subject key identifier: 97:88:83:3C:B0:C5:88:48:AC:F8:06:CA:BD:CE:3C:ED:CA:97:54:18 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 04C4 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/l4iDPLDFiEis-AbKvc487cqXVBg.roa Signing time: Tue 13 May 2025 10:37:56 +0000 ROA not before: Tue 13 May 2025 10:37:56 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 13 10:37:56 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=9788833CB0C58848ACF806CABDCE3CEDCA975418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:78:c9:31:82:63:27:0e:97:8f:5d:eb:2c:72: 41:62:b8:d9:fe:38:bc:86:48:ec:7e:4c:87:74:8f: 56:52:bb:f4:14:91:b6:48:5e:2e:dd:e6:d2:8c:bd: a0:06:15:87:8f:33:48:db:53:ed:c3:11:f1:bb:76: 5c:0b:af:53:58:32:6c:68:e5:8a:f6:55:c3:19:24: d0:3c:fc:66:e2:4c:b2:52:9d:45:6c:83:11:28:a1: 40:d7:f0:9e:5a:72:6a:9d:f8:a6:73:30:ec:62:a3: 78:73:d8:9c:dc:37:9e:d0:d1:9a:f8:32:2c:2f:7c: cf:3d:ff:1e:f2:01:d0:66:a9:bf:bf:08:90:36:23: a6:ec:b9:8f:19:db:e7:f4:c4:04:66:56:42:d2:f4: 3b:a0:17:ac:8e:71:37:97:13:e8:d5:18:ae:3b:b5: 6d:70:62:46:9f:a2:67:f1:bb:4f:6e:b0:b4:64:50: 27:58:63:86:12:bc:c6:2b:42:fa:69:d9:19:82:3f: 54:0e:da:b4:c6:90:09:18:bc:87:96:7f:de:e8:85: 2f:5a:68:d2:70:40:7c:19:86:72:87:b2:34:d1:92: d6:cb:40:64:5d:a2:2d:55:be:c1:08:92:fd:38:f2: 79:c9:11:51:2e:07:13:7a:12:4c:c7:26:5d:7e:6f: 92:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:88:83:3C:B0:C5:88:48:AC:F8:06:CA:BD:CE:3C:ED:CA:97:54:18 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/l4iDPLDFiEis-AbKvc487cqXVBg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 08:0d:fb:c7:5c:42:97:57:fb:d4:de:8a:4d:9c:30:b3:81:2b: 26:75:af:7f:19:ed:39:7c:7d:80:08:f5:13:28:41:22:87:8d: d6:98:46:73:bf:b1:df:28:65:d8:bf:b6:da:b5:e3:11:d0:0b: 18:b5:06:0c:ce:0c:10:8f:c0:6c:4a:00:87:c7:08:7a:f7:e5: bb:b5:2c:47:d6:b2:d1:01:1e:d0:98:0e:48:1b:87:67:c8:86: 3b:27:31:3b:73:1f:52:40:4b:c7:c2:08:3e:c6:db:b3:0a:04: da:c6:55:ef:a0:87:d6:4f:2d:a4:37:f8:b3:0f:b8:d3:16:6e: 95:34:9f:3a:49:1c:2c:e0:cd:0c:c8:60:3d:6c:99:14:3c:fb: 34:e6:22:0b:57:d2:56:87:9d:94:7c:68:bc:39:25:4e:8c:dc: b8:aa:cd:77:0c:e9:58:a7:37:6b:0e:bc:67:14:df:27:3c:55: 70:61:7e:7c:99:1e:d1:0d:c5:34:6a:bd:ea:bd:7c:82:7f:dc: e6:29:ed:3a:f4:f0:36:ae:46:c4:e4:ea:89:99:6d:e9:79:aa: 96:42:23:76:d9:af:55:54:8c:3c:93:af:1b:f4:12:87:f1:2a: c8:7b:80:77:ee:af:ef:4c:de:84:a0:5c:d8:01:08:fe:9f:7c: 14:d5:a0:f2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMx MDM3NTZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDk3ODg4MzNDQjBDNTg4 NDhBQ0Y4MDZDQUJEQ0UzQ0VEQ0E5NzU0MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEeMkxgmMnDpePXessckFiuNn+OLyGSOx+TId0j1ZSu/QUkbZI Xi7d5tKMvaAGFYePM0jbU+3DEfG7dlwLr1NYMmxo5Yr2VcMZJNA8/GbiTLJSnUVs gxEooUDX8J5acmqd+KZzMOxio3hz2JzcN57Q0Zr4MiwvfM89/x7yAdBmqb+/CJA2 I6bsuY8Z2+f0xARmVkLS9DugF6yOcTeXE+jVGK47tW1wYkafomfxu09usLRkUCdY Y4YSvMYrQvpp2RmCP1QO2rTGkAkYvIeWf97ohS9aaNJwQHwZhnKHsjTRktbLQGRd oi1VvsEIkv048nnJEVEuBxN6EkzHJl1+b5IjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUl4iDPLDFiEis+AbKvc487cqXVBgwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9sNGlEUExERmlFaXMtQWJL dmM0ODdjcVhWQmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAAgN+8dcQpdX+9Teik2cMLOBKyZ1r38Z7Tl8 fYAI9RMoQSKHjdaYRnO/sd8oZdi/ttq14xHQCxi1BgzODBCPwGxKAIfHCHr35bu1 LEfWstEBHtCYDkgbh2fIhjsnMTtzH1JAS8fCCD7G27MKBNrGVe+gh9ZPLaQ3+LMP uNMWbpU0nzpJHCzgzQzIYD1smRQ8+zTmIgtX0laHnZR8aLw5JU6M3LiqzXcM6Vin N2sOvGcU3yc8VXBhfnyZHtENxTRqveq9fIJ/3OYp7Tr08DauRsTk6omZbel5qpZC I3bZr1VUjDyTrxv0EofxKsh7gHfur+9M3oSgXNgBCP6ffBTVoPI= -----END CERTIFICATE-----Generated at Mon Dec 22 03:27:44 2025 by rpki-client