This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/p0ONIzAV5fLicbdeL3_gXSdoNg4.roa File: p0ONIzAV5fLicbdeL3_gXSdoNg4.roa (raw, json) Hash identifier: eiNMxQDrtzMaDPdbpP06bUU2lq5GT27sxB/W3PS2kQU= Subject key identifier: A7:43:8D:23:30:15:E5:F2:E2:71:B7:5E:2F:7F:E0:5D:27:68:36:0E Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 53F4 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/p0ONIzAV5fLicbdeL3_gXSdoNg4.roa Signing time: Sun 25 Jan 2026 12:27:25 +0000 ROA not before: Sun 25 Jan 2026 12:27:25 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9391 IP address blocks: 124.29.0.0/17 maxlen: 17 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 21492 (0x53f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Jan 25 12:27:25 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=A7438D233015E5F2E271B75E2F7FE05D2768360E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9a:5d:71:ed:b5:c1:41:d3:63:35:88:82:09: 9b:4c:57:1f:31:7b:09:0c:04:56:e0:5a:72:81:f4: 2e:15:99:95:2b:35:af:4a:99:1d:9f:23:0d:50:bb: 5f:63:a0:fe:7b:e0:08:3f:09:e4:02:99:70:6d:be: b8:c0:a6:67:a3:fb:ca:4f:d5:76:e1:04:d3:d3:7e: 34:44:48:2c:fd:0b:b0:b5:c8:5e:3e:25:f1:0f:a1: 0c:be:6e:ab:62:1c:78:b9:ec:31:b5:52:79:ec:01: 8b:79:2d:01:5d:8f:93:c1:d4:7d:60:8c:18:cc:25: 66:70:c8:54:23:7f:a4:7e:b0:91:fd:39:3e:55:ca: 06:f4:65:55:6d:fc:f3:bf:14:97:f7:b0:2c:1a:ad: 60:b0:71:2e:3c:d4:de:3e:44:dd:41:0e:07:3c:80: 99:8f:24:c6:49:3c:72:5a:45:47:14:cc:eb:18:96: 10:a2:c7:cd:2a:2f:d1:c2:e9:f3:43:6c:8f:2d:cc: 93:56:48:e0:3e:4a:65:a1:fe:2e:bc:7b:08:1a:88: 0f:4d:3d:5e:c5:f9:14:e3:b9:b5:1c:49:85:66:92: bd:34:70:2d:96:f5:08:92:16:d6:7b:d3:49:45:95: b6:2f:c5:ef:46:60:e3:d2:31:8b:22:f0:58:a5:8f: 42:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:43:8D:23:30:15:E5:F2:E2:71:B7:5E:2F:7F:E0:5D:27:68:36:0E X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/p0ONIzAV5fLicbdeL3_gXSdoNg4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.29.0.0/17 Signature Algorithm: sha256WithRSAEncryption 44:f5:0d:9e:05:80:2e:3f:3a:25:4d:1c:e3:f5:16:5d:6c:c1: 5c:ee:1d:4b:58:30:1a:80:26:e1:73:b6:28:81:29:1f:67:5d: 48:fc:87:4e:12:27:c1:26:0c:38:2b:bf:d0:3a:b2:c4:d0:0f: 25:99:0e:cf:37:b3:a7:f3:46:a9:03:0a:85:d9:bd:0d:21:1a: 21:e1:02:07:3e:5c:2e:7d:e8:42:a2:42:bf:5a:3e:28:fb:bf: 59:30:c1:92:db:47:f8:07:3e:d4:51:19:12:fd:21:5d:ec:91: c0:15:50:b5:36:3d:16:25:90:a2:3f:7a:75:e8:4f:f8:e0:f2: d8:b8:ba:e4:7e:b0:86:31:da:7a:ac:57:69:2e:a5:87:b1:ed: 76:9c:31:6d:5a:ed:b9:e9:5c:74:c3:0e:7d:58:03:9b:fd:0f: 00:f2:ce:ea:a4:7b:48:f3:e2:cc:bd:ab:52:46:5f:1b:c6:95: 76:45:1d:3d:47:ba:37:c1:0b:9e:2d:64:0b:55:3d:42:66:ec: 85:2d:cb:72:ac:a0:8d:75:5c:89:52:52:b5:6a:4f:3e:8d:34: 0c:a6:c2:8c:ee:19:d1:a6:15:b9:44:28:14:a8:12:9a:f5:d1: 8a:bf:60:20:24:64:41:4a:0c:1d:e0:00:ef:f2:ac:77:c6:16: 8d:48:02:c1 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICU/QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNjAxMjUx MjI3MjVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEE3NDM4RDIzMzAxNUU1 RjJFMjcxQjc1RTJGN0ZFMDVEMjc2ODM2MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQml1x7bXBQdNjNYiCCZtMVx8xewkMBFbgWnKB9C4VmZUrNa9K mR2fIw1Qu19joP574Ag/CeQCmXBtvrjApmej+8pP1XbhBNPTfjRESCz9C7C1yF4+ JfEPoQy+bqtiHHi57DG1UnnsAYt5LQFdj5PB1H1gjBjMJWZwyFQjf6R+sJH9OT5V ygb0ZVVt/PO/FJf3sCwarWCwcS481N4+RN1BDgc8gJmPJMZJPHJaRUcUzOsYlhCi x80qL9HC6fNDbI8tzJNWSOA+SmWh/i68ewgaiA9NPV7F+RTjubUcSYVmkr00cC2W 9QiSFtZ700lFlbYvxe9GYOPSMYsi8Filj0IzAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUp0ONIzAV5fLicbdeL3/gXSdoNg4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9wME9OSXpBVjVmTGljYmRl TDNfZ1hTZG9OZzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH fB0AMA0GCSqGSIb3DQEBCwUAA4IBAQBE9Q2eBYAuPzolTRzj9RZdbMFc7h1LWDAa gCbhc7YogSkfZ11I/IdOEifBJgw4K7/QOrLE0A8lmQ7PN7On80apAwqF2b0NIRoh 4QIHPlwufehCokK/Wj4o+79ZMMGS20f4Bz7UURkS/SFd7JHAFVC1Nj0WJZCiP3p1 6E/44PLYuLrkfrCGMdp6rFdpLqWHse12nDFtWu256Vx0ww59WAOb/Q8A8s7qpHtI 8+LMvatSRl8bxpV2RR09R7o3wQueLWQLVT1CZuyFLctyrKCNdVyJUlK1ak8+jTQM psKM7hnRphW5RCgUqBKa9dGKv2AgJGRBSgwd4ADv8qx3xhaNSALB -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:47 2026 by rpki-client