This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/xM1QH2nGnhUMrXBY0u1f7dZ1q8A.roa File: xM1QH2nGnhUMrXBY0u1f7dZ1q8A.roa (raw, json) Hash identifier: G5baeU5Nr7wTsmBbbXzwoCxsRO6JGTCVYAZh+FWUAuU= Subject key identifier: C4:CD:50:1F:69:C6:9E:15:0C:AD:70:58:D2:ED:5F:ED:D6:75:AB:C0 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 013E Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xM1QH2nGnhUMrXBY0u1f7dZ1q8A.roa Signing time: Thu 08 May 2025 17:37:42 +0000 ROA not before: Thu 08 May 2025 17:37:42 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 119.16.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 8 17:37:42 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=C4CD501F69C69E150CAD7058D2ED5FEDD675ABC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:00:e3:45:53:81:70:56:46:89:72:1e:d4:4d: cc:eb:81:58:ed:4b:c0:83:7a:58:fb:96:dc:5a:94: 3a:09:06:8a:1e:06:00:2a:c9:ea:79:b5:e0:55:57: f4:8b:de:62:ac:99:f0:dd:7f:d3:98:5f:a8:b2:0d: 44:0f:b9:c2:42:0d:48:ff:99:5d:11:17:43:8f:60: 9d:f7:41:9e:d7:e2:67:9f:31:0e:10:40:8b:72:b4: 6f:0a:5f:64:68:47:9a:27:22:5d:ca:27:8a:66:ac: d2:8e:cf:fa:90:dc:8d:b9:b3:63:b8:c2:c3:7a:61: e7:2f:4d:db:68:3f:ec:07:aa:bb:c2:30:bd:e9:d1: 88:91:08:ac:6c:68:da:42:2a:c7:27:f9:3f:60:c8: 88:c6:d0:08:8e:bb:dc:d4:f6:7e:1b:17:3a:66:f8: 23:71:cb:c5:dd:66:c6:8b:99:a7:ed:43:dd:8d:d8: 99:2a:88:c4:d7:df:b3:ed:7e:2d:8a:a1:99:47:0f: ca:38:22:8f:64:c9:65:2b:49:0f:5f:c6:27:39:65: b1:e6:9d:cc:4b:07:13:1d:9c:72:b5:22:02:8c:3f: 84:2e:1b:3e:2a:49:99:6c:b8:13:01:77:66:49:69: 9b:40:e8:52:65:8e:1c:4c:4d:c5:02:1c:84:f4:ba: 0b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CD:50:1F:69:C6:9E:15:0C:AD:70:58:D2:ED:5F:ED:D6:75:AB:C0 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xM1QH2nGnhUMrXBY0u1f7dZ1q8A.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6b:b4:99:7b:10:f1:ae:ad:c1:d4:6b:3b:e8:b1:af:3d:dd:61: 3e:f8:53:bc:2d:92:91:3b:24:b7:76:79:eb:fa:18:cf:14:10: 38:49:26:66:eb:a5:5a:96:a3:90:ad:be:c7:77:8c:0c:a2:ae: b6:dc:d8:71:65:11:9e:cd:61:d9:d5:9a:09:92:38:09:f0:0e: 79:58:6b:f2:a1:9b:55:10:04:28:93:fc:ed:cb:95:d7:a8:fa: 7c:d9:02:6d:2e:73:d9:9d:f6:81:e4:12:67:0a:1e:c1:3f:b0: 32:d0:bf:3e:98:12:bb:44:06:67:33:a3:49:34:b4:9a:8e:f5: 5f:35:ea:94:52:d6:70:09:67:7a:2d:ba:af:de:5b:0d:37:a1: 17:43:ae:20:c4:25:c1:13:1f:7f:c7:2b:c0:ba:f1:0a:2b:3e: 84:8b:16:e1:d9:00:62:5e:ab:24:4f:40:58:60:ba:f6:c6:ac: 5b:37:fa:2c:3c:47:5b:ec:be:c4:cb:8e:0f:cf:b3:0e:d7:ad: 9a:47:6b:c4:37:43:a7:45:c6:19:d7:70:23:25:9b:ac:98:13: ce:74:e7:f7:30:88:65:7e:df:09:71:f9:07:75:d9:f6:e3:2c: e4:45:25:cb:41:cf:4c:4d:01:d8:b5:64:46:a9:0d:57:f5:24: 55:d1:45:95 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDgx NzM3NDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEM0Q0Q1MDFGNjlDNjlF MTUwQ0FENzA1OEQyRUQ1RkVERDY3NUFCQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxAONFU4FwVkaJch7UTczrgVjtS8CDelj7ltxalDoJBooeBgAq yep5teBVV/SL3mKsmfDdf9OYX6iyDUQPucJCDUj/mV0RF0OPYJ33QZ7X4mefMQ4Q QItytG8KX2RoR5onIl3KJ4pmrNKOz/qQ3I25s2O4wsN6YecvTdtoP+wHqrvCML3p 0YiRCKxsaNpCKscn+T9gyIjG0AiOu9zU9n4bFzpm+CNxy8XdZsaLmaftQ92N2Jkq iMTX37Ptfi2KoZlHD8o4Io9kyWUrSQ9fxic5ZbHmncxLBxMdnHK1IgKMP4QuGz4q SZlsuBMBd2ZJaZtA6FJljhxMTcUCHIT0ugvHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxM1QH2nGnhUMrXBY0u1f7dZ1q8AwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni94TTFRSDJuR25oVU1yWEJZ MHUxZjdkWjFxOEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA dxAwDQYJKoZIhvcNAQELBQADggEBAGu0mXsQ8a6twdRrO+ixrz3dYT74U7wtkpE7 JLd2eev6GM8UEDhJJmbrpVqWo5Ctvsd3jAyirrbc2HFlEZ7NYdnVmgmSOAnwDnlY a/Khm1UQBCiT/O3Lldeo+nzZAm0uc9md9oHkEmcKHsE/sDLQvz6YErtEBmczo0k0 tJqO9V816pRS1nAJZ3otuq/eWw03oRdDriDEJcETH3/HK8C68QorPoSLFuHZAGJe qyRPQFhguvbGrFs3+iw8R1vsvsTLjg/Psw7XrZpHa8Q3Q6dFxhnXcCMlm6yYE850 5/cwiGV+3wlx+Qd12fbjLORFJctBz0xNAdi1ZEapDVf1JFXRRZU= -----END CERTIFICATE-----Generated at Mon Dec 22 13:03:55 2025 by rpki-client