This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/oqBvxbucFOLovMVsiMSjExp8L30.roa File: oqBvxbucFOLovMVsiMSjExp8L30.roa (raw, json) Hash identifier: s8MwDn6g7x9aA3OlpsQXoQP7bCpklp5OYfTKFTXAvlg= Subject key identifier: A2:A0:6F:C5:BB:9C:14:E2:E8:BC:C5:6C:88:C4:A3:13:1A:7C:2F:7D Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 03D6 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oqBvxbucFOLovMVsiMSjExp8L30.roa Signing time: Mon 12 May 2025 04:37:54 +0000 ROA not before: Mon 12 May 2025 04:37:54 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 982 (0x3d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 12 04:37:54 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=A2A06FC5BB9C14E2E8BCC56C88C4A3131A7C2F7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:66:d2:ae:f2:f3:67:a3:66:1c:f6:84:3b: 00:5e:fe:3b:ff:59:9c:27:0f:9f:c0:e3:ec:51:c2: 62:1e:69:86:fd:8d:9e:6d:f1:32:80:65:e0:4d:74: 8c:43:89:a7:33:4b:cf:7c:fc:5c:2a:64:39:2f:58: 92:43:9e:01:9e:fe:de:f1:7e:3a:e1:93:dc:85:f9: 32:cb:fc:62:8c:2e:af:7c:80:e1:b5:e3:46:3f:b0: 90:82:3f:46:7f:70:21:d8:7d:0a:e2:1b:44:e0:bf: 9f:6c:d9:2f:ab:01:24:7e:b7:99:d1:81:b7:e7:19: a6:eb:23:bd:ac:a5:83:3e:79:53:2b:2c:49:98:5a: 51:e9:da:ec:be:c3:70:cf:b5:e2:df:8d:1b:70:9f: 92:fc:0d:28:2d:79:06:3b:84:32:37:ab:ac:8d:f1: 45:a3:ab:be:75:89:aa:0e:52:30:03:64:8c:84:d1: fd:a4:c7:18:0b:80:d4:3b:0a:48:e8:d5:1b:0f:c0: 35:eb:41:95:14:89:4f:85:42:da:ca:f8:37:72:30: 82:e0:3f:43:fe:59:e5:e5:d5:e7:99:64:66:66:2a: 71:86:fc:8d:39:31:b6:b5:d6:e1:6b:46:9a:ed:60: 1d:62:51:3e:ae:a0:c5:43:64:32:82:ab:37:4a:92: da:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A0:6F:C5:BB:9C:14:E2:E8:BC:C5:6C:88:C4:A3:13:1A:7C:2F:7D X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oqBvxbucFOLovMVsiMSjExp8L30.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 31:6e:eb:f9:18:dd:f0:ef:1b:80:52:cd:ed:d9:7a:f7:89:f9: bd:84:a0:94:6e:cc:cf:be:88:99:c2:04:7a:7e:29:67:ec:34: ae:48:44:a3:73:c8:cb:04:2e:90:ab:89:6f:aa:b1:85:72:b8: c5:f5:bc:41:76:17:2b:d9:f9:10:d7:5a:c5:7d:1c:52:2b:1c: e6:20:fb:8d:1a:93:99:72:95:34:cc:d1:da:69:e3:05:37:09: e6:a1:d2:5f:19:09:03:64:06:33:b0:6f:6d:f0:81:4c:e7:2d: 50:78:14:93:97:48:7a:d4:00:af:62:da:51:ee:56:6f:48:98: 78:c1:6e:66:71:3e:83:1d:df:04:c4:83:fd:d7:98:8c:06:bc: 2c:bc:52:e7:66:40:a3:42:a1:92:70:ab:50:dd:a7:22:f9:99: 67:b5:7c:56:ff:0f:d1:b8:79:3f:c2:36:f1:fe:b0:50:d2:8c: f7:b5:85:26:a4:d9:a5:66:f5:51:24:6b:e3:29:dc:f2:91:48: d0:e0:4c:82:69:18:65:ce:e7:2a:ea:b3:40:f8:e2:06:55:39: ed:b3:63:44:da:11:16:e5:19:55:ba:b9:26:62:e6:43:db:04: bf:87:66:35:f1:80:02:07:aa:9e:3b:2a:da:3d:95:cd:4a:d1: ee:14:28:0a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICA9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTIw NDM3NTRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEEyQTA2RkM1QkI5QzE0 RTJFOEJDQzU2Qzg4QzRBMzEzMUE3QzJGN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCg4GbSrvLzZ6NmHPaEOwBe/jv/WZwnD5/A4+xRwmIeaYb9jZ5t 8TKAZeBNdIxDiaczS898/FwqZDkvWJJDngGe/t7xfjrhk9yF+TLL/GKMLq98gOG1 40Y/sJCCP0Z/cCHYfQriG0Tgv59s2S+rASR+t5nRgbfnGabrI72spYM+eVMrLEmY WlHp2uy+w3DPteLfjRtwn5L8DSgteQY7hDI3q6yN8UWjq751iaoOUjADZIyE0f2k xxgLgNQ7Ckjo1RsPwDXrQZUUiU+FQtrK+DdyMILgP0P+WeXl1eeZZGZmKnGG/I05 Mba11uFrRprtYB1iUT6uoMVDZDKCqzdKktrrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUoqBvxbucFOLovMVsiMSjExp8L30wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9vcUJ2eGJ1Y0ZPTG92TVZz aU1TakV4cDhMMzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBADFu6/kY3fDvG4BSze3ZeveJ+b2EoJRuzM++ iJnCBHp+KWfsNK5IRKNzyMsELpCriW+qsYVyuMX1vEF2FyvZ+RDXWsV9HFIrHOYg +40ak5lylTTM0dpp4wU3Ceah0l8ZCQNkBjOwb23wgUznLVB4FJOXSHrUAK9i2lHu Vm9ImHjBbmZxPoMd3wTEg/3XmIwGvCy8UudmQKNCoZJwq1DdpyL5mWe1fFb/D9G4 eT/CNvH+sFDSjPe1hSak2aVm9VEka+Mp3PKRSNDgTIJpGGXO5yrqs0D44gZVOe2z Y0TaERblGVW6uSZi5kPbBL+HZjXxgAIHqp47Kto9lc1K0e4UKAo= -----END CERTIFICATE-----Generated at Mon Dec 22 02:57:12 2025 by rpki-client