This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/1xCm_mIU49h89521BrdStAaCfBM.roa File: 1xCm_mIU49h89521BrdStAaCfBM.roa (raw, json) Hash identifier: 3r6yLAlAjfqSByBzR8OIGxlzQtWqZeB5sOkH1h3c7vM= Subject key identifier: D7:10:A6:FE:62:14:E3:D8:7C:F7:9D:B5:06:B7:52:B4:06:82:7C:13 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: EDB9 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/1xCm_mIU49h89521BrdStAaCfBM.roa Signing time: Mon 19 Jan 2026 17:57:39 +0000 ROA not before: Mon 19 Jan 2026 17:57:39 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63612 IP address blocks: 103.45.128.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 60857 (0xedb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 19 17:57:39 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=D710A6FE6214E3D87CF79DB506B752B406827C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1a:b7:79:0d:67:68:d4:01:32:5b:f4:8e:f1: 2e:8d:b9:c8:92:b0:79:2e:3c:85:e3:e3:4b:c2:c3: 6c:f4:f3:ce:fe:69:3d:1a:fa:81:9b:3a:a4:04:bc: e1:e8:81:88:4d:99:4d:f2:53:8d:6d:2b:85:ee:d5: 93:ed:21:f3:ca:6d:77:a4:ec:f8:ea:f4:89:57:66: e4:b5:43:1b:d6:3b:25:11:72:b5:52:5f:bc:2d:0a: 42:de:3f:47:dc:2e:5b:e8:03:c0:69:66:11:f9:8b: 86:25:fc:17:90:1d:3c:70:04:1f:ef:55:0e:fc:c9: 4f:fd:5b:df:e3:a3:3b:04:c8:1c:db:41:34:0d:cb: 1b:ca:9e:b2:ab:a9:75:1f:7c:a8:15:37:3c:2e:2e: 24:c6:e5:7a:8a:f0:8f:6e:95:88:79:9d:d4:6d:24: e7:3e:ce:f5:d4:f7:cc:a6:42:e1:3a:5f:a2:16:c4: 05:e6:ba:80:6b:f9:ae:64:31:92:72:d9:fb:d3:91: ed:3d:fd:d0:c1:aa:76:d6:20:e3:99:86:30:e7:51: 06:d2:a5:b2:10:44:86:60:83:2f:0f:9e:93:a7:2e: 99:62:9e:a2:a0:2b:1b:8a:4c:c2:94:9b:06:25:14: c7:3d:87:1a:85:c0:f1:77:7d:85:c5:62:b4:1f:98: 43:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:10:A6:FE:62:14:E3:D8:7C:F7:9D:B5:06:B7:52:B4:06:82:7C:13 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/1xCm_mIU49h89521BrdStAaCfBM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.45.128.0/19 Signature Algorithm: sha256WithRSAEncryption 18:78:90:58:f3:86:59:35:4e:a5:31:35:da:52:0e:2b:9f:44: e7:89:3d:7b:a9:d7:5b:01:14:4d:ed:67:00:e6:b1:3f:c5:3c: 67:99:5e:bd:66:62:a4:d9:a6:fd:2f:37:49:db:69:07:ca:a6: f5:8a:3d:86:7a:09:5f:ed:a9:fa:ff:b5:6a:dd:d7:d4:08:7c: e3:ae:61:52:f0:bc:54:c3:94:38:32:09:04:ec:78:34:9d:d0: 92:24:52:2d:ba:db:26:52:99:4d:53:89:9f:66:7c:3c:21:57: ab:51:56:3f:25:a2:4c:03:67:de:eb:0d:38:9d:7e:be:76:d0: 79:fd:4b:1f:4f:7b:d8:c5:8e:19:f0:c0:79:e1:25:03:14:b7: 24:90:9f:f5:7b:e1:fb:5c:c7:42:7d:aa:2e:21:d1:36:d4:85: 85:a4:7a:8f:a8:29:c4:d4:36:2e:f2:92:0f:5c:bc:93:ca:1a: 38:99:69:73:8b:5d:b4:b8:9b:37:a0:e2:fd:9d:ed:17:0d:7f: ab:dc:42:c8:b4:85:88:4a:f3:6b:8e:5a:ca:98:47:dd:09:ef: 98:1e:ad:ec:bb:83:ff:95:df:ea:ae:2d:bc:65:c5:16:bf:39: ba:f2:09:9c:c3:45:c1:dc:a5:e9:a2:7d:30:7e:42:4c:b7:7c: 47:f9:7c:dd -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAO25MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTE5 MTc1NzM5WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyhENzEwQTZGRTYyMTRF M0Q4N0NGNzlEQjUwNkI3NTJCNDA2ODI3QzEzMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA2xq3eQ1naNQBMlv0jvEujbnIkrB5LjyF4+NLwsNs9PPO/mk9 GvqBmzqkBLzh6IGITZlN8lONbSuF7tWT7SHzym13pOz46vSJV2bktUMb1jslEXK1 Ul+8LQpC3j9H3C5b6APAaWYR+YuGJfwXkB08cAQf71UO/MlP/Vvf46M7BMgc20E0 Dcsbyp6yq6l1H3yoFTc8Li4kxuV6ivCPbpWIeZ3UbSTnPs711PfMpkLhOl+iFsQF 5rqAa/muZDGSctn705HtPf3Qwap21iDjmYYw51EG0qWyEESGYIMvD56Tpy6ZYp6i oCsbikzClJsGJRTHPYcahcDxd32FxWK0H5hDXQIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFNcQpv5iFOPYfPedtQa3UrQGgnwTMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzLzF4Q21fbUlVNDlo ODk1MjFCcmRTdEFhQ2ZCTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVnLYAwDQYJKoZIhvcNAQELBQADggEBABh4kFjzhlk1TqUxNdpSDiufROeJ PXup11sBFE3tZwDmsT/FPGeZXr1mYqTZpv0vN0nbaQfKpvWKPYZ6CV/tqfr/tWrd 19QIfOOuYVLwvFTDlDgyCQTseDSd0JIkUi262yZSmU1TiZ9mfDwhV6tRVj8lokwD Z97rDTidfr520Hn9Sx9Pe9jFjhnwwHnhJQMUtySQn/V74ftcx0J9qi4h0TbUhYWk eo+oKcTUNi7ykg9cvJPKGjiZaXOLXbS4mzeg4v2d7RcNf6vcQsi0hYhK82uOWsqY R90J75gerey7g/+V3+quLbxlxRa/ObryCZzDRcHcpemifTB+Qky3fEf5fN0= -----END CERTIFICATE-----Generated at Mon Jan 19 21:55:53 2026 by rpki-client