This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/4WR600b89bPoITZz4zIQXqM1JEw.roa File: 4WR600b89bPoITZz4zIQXqM1JEw.roa (raw, json) Hash identifier: jmRNuM4/pPtQuf3vf8T8Bn7Om20iHPVmLyWHevIAQtc= Subject key identifier: E1:64:7A:D3:46:FC:F5:B3:E8:21:36:73:E3:32:10:5E:A3:35:24:4C Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: EDBA Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/4WR600b89bPoITZz4zIQXqM1JEw.roa Signing time: Mon 19 Jan 2026 17:57:39 +0000 ROA not before: Mon 19 Jan 2026 17:57:39 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.226.72.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 60858 (0xedba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 19 17:57:39 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=E1647AD346FCF5B3E8213673E332105EA335244C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:48:7a:cb:b3:e3:28:ee:0a:21:99:82:94: 48:0d:37:94:92:97:43:18:47:ae:ce:02:64:52:c4: 08:b1:9a:4d:a4:79:2a:1c:3e:71:6a:a9:ec:1f:02: 67:58:d3:88:6a:49:b0:4a:cf:6d:95:99:8e:c2:56: 6a:73:06:d0:6c:c2:d3:7c:4d:97:22:09:e1:88:28: e7:ad:76:cb:73:af:2d:d1:0e:73:99:78:a6:03:ac: 29:d3:c3:96:3c:33:76:7b:a4:ca:22:70:88:f2:26: d9:55:e6:7a:7c:b5:7b:ca:ba:b7:60:2a:4e:53:2d: 8d:b7:7f:a9:c6:11:fd:e3:50:22:af:b1:78:a0:79: e2:79:be:4a:65:0c:35:95:ab:62:51:62:b9:b6:fc: fb:db:5f:20:64:93:79:e4:51:86:11:8f:a2:e3:72: b7:72:77:fa:24:48:05:9f:7d:1c:dc:96:5c:d6:75: 60:d7:da:e1:74:4e:46:e5:84:d3:11:80:7c:87:ec: ba:43:1a:ee:cf:c1:d3:08:86:a1:97:9f:68:94:5b: ef:47:b3:08:8e:ad:c5:6d:45:6a:17:3a:90:f2:2b: 31:74:41:3a:28:7f:e5:71:e0:51:34:73:9f:30:ad: 5a:fd:7e:3f:9f:60:42:c3:94:1b:39:bb:46:e0:4b: 0f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:64:7A:D3:46:FC:F5:B3:E8:21:36:73:E3:32:10:5E:A3:35:24:4C X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/4WR600b89bPoITZz4zIQXqM1JEw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.72.0/22 Signature Algorithm: sha256WithRSAEncryption 24:6f:1f:0e:7a:c7:fd:70:62:4c:d8:17:15:1f:94:fc:57:e8: d7:a5:ae:30:f9:c5:61:42:4c:5c:a5:c4:9e:13:a4:bc:bc:b1: 06:d5:aa:f4:13:44:c1:b7:fe:b0:94:c6:83:33:2c:1c:2b:3b: 5d:4d:fe:6d:17:76:c7:d0:aa:da:65:13:a4:89:9d:8e:1f:aa: 97:d9:f8:7a:d1:f6:8e:57:e0:92:67:3f:7e:bb:49:ed:2b:ef: 7f:79:46:94:ee:04:d0:5f:16:9a:d5:cb:81:cc:53:58:22:26: af:ed:71:2e:17:40:71:1d:ac:98:d6:91:fb:11:6e:18:f6:3c: 34:d6:d4:b9:82:6b:c7:68:a4:29:4c:7a:54:96:ab:7e:67:26: 30:8f:6e:74:c2:28:80:f3:de:57:c9:0c:6e:a4:8c:4e:6a:8c: d4:7d:a5:ac:bd:33:f1:08:e7:64:4e:03:a2:ed:f6:2f:c3:85: 93:2a:ff:f8:b6:1d:bf:87:49:ae:51:83:5f:69:76:50:da:d4: 87:7c:e4:ea:99:da:d0:20:45:e6:7c:59:c9:41:8c:72:f9:07: d0:aa:06:e9:1d:56:26:c2:41:d2:fa:29:e8:35:a3:40:d6:f2: 42:83:8b:9c:4c:b5:04:c4:06:78:ee:cd:6c:77:4d:69:72:b0: 38:c4:d6:2a -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAO26MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTE5 MTc1NzM5WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyhFMTY0N0FEMzQ2RkNG NUIzRTgyMTM2NzNFMzMyMTA1RUEzMzUyNDRDMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEArbpIesuz4yjuCiGZgpRIDTeUkpdDGEeuzgJkUsQIsZpNpHkq HD5xaqnsHwJnWNOIakmwSs9tlZmOwlZqcwbQbMLTfE2XIgnhiCjnrXbLc68t0Q5z mXimA6wp08OWPDN2e6TKInCI8ibZVeZ6fLV7yrq3YCpOUy2Nt3+pxhH941Air7F4 oHnieb5KZQw1latiUWK5tvz7218gZJN55FGGEY+i43K3cnf6JEgFn30c3JZc1nVg 19rhdE5G5YTTEYB8h+y6Qxruz8HTCIahl59olFvvR7MIjq3FbUVqFzqQ8isxdEE6 KH/lceBRNHOfMK1a/X4/n2BCw5QbObtG4EsPDQIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFOFketNG/PWz6CE2c+MyEF6jNSRMMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzLzRXUjYwMGI4OWJQ b0lUWno0eklRWHFNMUpFdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIr4kgwDQYJKoZIhvcNAQELBQADggEBACRvHw56x/1wYkzYFxUflPxX6Nel rjD5xWFCTFylxJ4TpLy8sQbVqvQTRMG3/rCUxoMzLBwrO11N/m0XdsfQqtplE6SJ nY4fqpfZ+HrR9o5X4JJnP367Se0r7395RpTuBNBfFprVy4HMU1giJq/tcS4XQHEd rJjWkfsRbhj2PDTW1LmCa8dopClMelSWq35nJjCPbnTCKIDz3lfJDG6kjE5qjNR9 pay9M/EI52ROA6Lt9i/DhZMq//i2Hb+HSa5Rg19pdlDa1Id85OqZ2tAgReZ8WclB jHL5B9CqBukdVibCQdL6Keg1o0DW8kKDi5xMtQTEBnjuzWx3TWlysDjE1io= -----END CERTIFICATE-----Generated at Mon Jan 19 21:55:53 2026 by rpki-client