This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vlIXcWRb8kSUCgH6KnR9tWw41Kc.roa File: vlIXcWRb8kSUCgH6KnR9tWw41Kc.roa (raw, json) Hash identifier: BQcdG+QTzcVlORWaiX6u/2TMk+KAevLeOT1bVPVCf2o= Subject key identifier: BE:52:17:71:64:5B:F2:44:94:0A:01:FA:2A:74:7D:B5:6C:38:D4:A7 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 06C2 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vlIXcWRb8kSUCgH6KnR9tWw41Kc.roa Signing time: Fri 16 May 2025 02:08:02 +0000 ROA not before: Fri 16 May 2025 02:08:02 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 1730 (0x6c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 16 02:08:02 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=BE521771645BF244940A01FA2A747DB56C38D4A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1d:d3:fb:1c:eb:37:e3:08:b9:95:30:01:2c: 9a:ae:8e:69:cd:6f:15:78:c8:c6:1b:e6:b6:4b:7f: a8:65:dd:03:ae:5b:f5:0f:e4:a7:3a:31:25:9c:73: 22:58:c9:58:54:9f:3b:56:b4:7a:72:2d:74:58:ad: 3d:7b:ab:53:3d:2d:6c:cf:f2:0a:d9:77:94:e0:81: 5d:2f:3d:d1:a8:2b:14:77:08:b8:1a:fe:cd:c2:a8: 58:8e:ad:cd:35:ac:ba:e8:ad:0b:d2:1e:57:07:27: 6b:9e:9d:7a:7a:de:fb:f7:c6:96:aa:72:90:33:8b: d0:04:89:7d:3d:e8:84:b5:09:a5:fa:5f:20:be:2d: 6f:e5:38:e8:24:95:1e:73:d9:12:2d:59:f4:89:1e: b4:33:3a:2a:b2:e0:48:12:51:2d:54:80:b9:16:d4: d5:26:99:b9:12:40:15:bd:8f:79:a0:c5:5f:4d:0e: ac:88:1f:a4:a8:2f:70:78:e9:c4:e6:41:39:62:52: c2:b5:0a:87:2d:4a:46:38:a9:14:e2:3a:81:e4:a3: 19:1f:56:ac:fd:2e:3c:11:de:1b:5f:e0:c5:0b:b0: f2:2f:b9:3d:8c:86:e9:08:66:9b:cf:87:19:8d:f5: 14:cd:b8:d6:e2:09:22:b5:85:ed:17:7e:84:f6:ec: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:52:17:71:64:5B:F2:44:94:0A:01:FA:2A:74:7D:B5:6C:38:D4:A7 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vlIXcWRb8kSUCgH6KnR9tWw41Kc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 87:3e:ec:ec:13:bf:e0:24:ea:52:90:82:09:e5:39:36:15:79: 98:fe:ad:8d:13:02:a8:8f:e3:bf:78:41:2d:9c:1a:1e:0a:8c: e3:91:31:09:ee:8b:50:77:90:e9:ab:47:32:e5:1b:b4:f8:a8: c7:a6:43:32:f2:1e:f4:1a:a2:fa:4e:9b:74:cb:4e:ed:55:03: 3b:c4:90:1e:86:84:04:9b:40:84:74:c1:5b:9b:a0:95:07:1c: c3:34:c7:4d:6f:66:6f:02:dd:1b:ab:55:2a:fe:04:b6:67:cf: ef:8e:86:77:fe:ec:7f:c7:a7:93:a5:56:08:52:91:be:af:88: 7b:8a:c6:e2:d8:d4:2b:7f:ea:50:8c:20:56:ec:d8:60:7c:8f: f4:c1:7a:96:a6:56:5f:19:fc:7d:f8:66:90:eb:2f:cc:4c:61: 6e:4e:2a:5a:ab:a9:99:46:67:64:a1:12:d1:63:f5:95:e5:f6: 43:22:8e:33:f5:4a:60:51:23:3c:3f:69:ba:84:1a:b1:89:a6: bd:17:16:36:0a:10:f3:66:b0:5a:1d:12:47:1c:5f:73:92:93: 85:e7:56:66:e4:2f:bf:f1:c9:75:e8:fc:9f:a7:ef:a1:c5:23: 21:91:09:49:c4:c8:8b:00:e4:fb:8f:bd:9e:25:db:d9:9a:af: a6:72:49:8e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBsIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTYw MjA4MDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEJFNTIxNzcxNjQ1QkYy NDQ5NDBBMDFGQTJBNzQ3REI1NkMzOEQ0QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeHdP7HOs34wi5lTABLJqujmnNbxV4yMYb5rZLf6hl3QOuW/UP 5Kc6MSWccyJYyVhUnztWtHpyLXRYrT17q1M9LWzP8grZd5TggV0vPdGoKxR3CLga /s3CqFiOrc01rLrorQvSHlcHJ2uenXp63vv3xpaqcpAzi9AEiX096IS1CaX6XyC+ LW/lOOgklR5z2RItWfSJHrQzOiqy4EgSUS1UgLkW1NUmmbkSQBW9j3mgxV9NDqyI H6SoL3B46cTmQTliUsK1CoctSkY4qRTiOoHkoxkfVqz9LjwR3htf4MULsPIvuT2M hukIZpvPhxmN9RTNuNbiCSK1he0XfoT27L89AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvlIXcWRb8kSUCgH6KnR9tWw41KcwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni92bElYY1dSYjhrU1VDZ0g2 S25SOXRXdzQxS2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAIc+7OwTv+Ak6lKQggnlOTYVeZj+rY0TAqiP 4794QS2cGh4KjOORMQnui1B3kOmrRzLlG7T4qMemQzLyHvQaovpOm3TLTu1VAzvE kB6GhASbQIR0wVuboJUHHMM0x01vZm8C3RurVSr+BLZnz++Ohnf+7H/Hp5OlVghS kb6viHuKxuLY1Ct/6lCMIFbs2GB8j/TBepamVl8Z/H34ZpDrL8xMYW5OKlqrqZlG Z2ShEtFj9ZXl9kMijjP1SmBRIzw/abqEGrGJpr0XFjYKEPNmsFodEkccX3OSk4Xn VmbkL7/xyXXo/J+n76HFIyGRCUnEyIsA5PuPvZ4l29mar6ZySY4= -----END CERTIFICATE-----Generated at Mon Dec 22 00:15:36 2025 by rpki-client