This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/AW_C5qxrZXFIBotToTTLjEbjo6I.roa
File: AW_C5qxrZXFIBotToTTLjEbjo6I.roa (raw, json)
Hash identifier: 9nLgilteBwqsCB9ASQuzqJsDjUt/MAE+4rKfwm5H5uk=
Subject key identifier: 01:6F:C2:E6:AC:6B:65:71:48:06:8B:53:A1:34:CB:8C:46:E3:A3:A2
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: EDB6
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AW_C5qxrZXFIBotToTTLjEbjo6I.roa
Signing time: Mon 19 Jan 2026 17:57:38 +0000
ROA not before: Mon 19 Jan 2026 17:57:38 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 63612
IP address blocks: 43.227.80.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60854 (0xedb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Jan 19 17:57:38 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=016FC2E6AC6B657148068B53A134CB8C46E3A3A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:22:5a:cd:2f:7e:17:09:b2:53:6f:c7:5b:
72:1a:83:41:cf:29:4d:17:d2:68:03:0b:9e:7b:75:
23:89:a4:6c:56:81:2e:44:27:f2:67:93:30:6d:88:
76:23:31:3d:03:c0:41:2f:65:fa:e8:12:c9:e9:ac:
cf:51:15:f0:09:c3:4b:b2:27:69:df:0f:e6:23:4b:
31:0c:a9:75:a1:ba:f6:a9:04:98:52:cc:29:83:27:
a1:6e:a6:67:a1:82:3e:c0:9c:d0:62:76:68:d4:c6:
c9:ad:38:3c:72:da:4d:ab:06:8a:b6:2d:af:0b:50:
1c:5b:5d:98:62:f0:81:e4:7d:89:60:5c:27:59:8b:
af:36:c9:32:fe:cb:a8:bf:00:fe:ef:bf:67:a5:c3:
cb:3a:fd:12:0e:61:c7:cf:8b:6e:f7:6c:84:68:cf:
3a:5f:30:71:4e:04:85:7c:35:b0:9d:90:23:a1:83:
c2:39:e3:eb:8c:1c:2b:21:f1:a9:8e:78:00:02:97:
c2:1c:5a:2c:e0:8b:7e:36:17:81:a1:ab:ba:64:2d:
c6:bb:d7:27:f0:47:24:83:e5:78:a5:a0:b1:6d:3e:
1b:48:a1:01:16:a9:bf:f4:e8:25:9d:dc:02:2d:4b:
84:b4:28:bb:4f:6f:b7:83:30:23:f4:2d:ce:05:32:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6F:C2:E6:AC:6B:65:71:48:06:8B:53:A1:34:CB:8C:46:E3:A3:A2
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AW_C5qxrZXFIBotToTTLjEbjo6I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.80.0/20
Signature Algorithm: sha256WithRSAEncryption
80:98:fa:66:a8:65:e2:c3:22:77:ed:e5:34:dd:2d:01:7b:32:
7f:ed:48:cc:23:47:b1:6d:07:f7:d4:02:1a:47:66:f4:ca:91:
2a:65:17:9c:95:c1:32:f2:d2:38:e7:67:4a:56:b1:61:04:2e:
13:6d:fc:fd:2f:62:c7:a5:9b:8d:0a:6d:6e:39:ef:e8:80:cd:
65:76:e3:3d:b7:69:f6:ed:a0:7f:ed:a4:f2:54:5f:13:9a:07:
5c:6c:a0:60:bc:93:3e:f9:8d:a8:b8:bd:3f:42:fb:b9:e6:93:
3b:7b:59:11:b0:3d:19:bb:f7:e9:5b:d7:62:3c:14:5b:65:39:
7a:5d:48:ec:69:8f:e1:d4:9a:68:a5:ae:7a:1e:21:9a:39:68:
5a:71:1d:2e:81:6f:cd:08:4c:6d:46:1c:8a:7f:6e:d5:30:8a:
d7:9d:55:d7:95:e8:d2:70:13:02:fa:92:7b:f3:42:2f:4d:46:
77:67:ab:a0:2b:bc:e0:1f:cd:13:0e:6a:a5:d8:62:54:c0:fd:
33:04:8f:29:2c:b3:9c:d3:d9:49:69:dd:8b:84:1e:be:6c:c0:
73:27:1a:17:e3:b7:26:e5:5b:3f:3c:e4:b2:89:84:ba:fa:47:
e5:c4:27:75:a8:bd:f5:b6:72:13:a4:00:f9:ed:d3:f7:b0:9c:
3d:b3:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 21:55:53 2026 by rpki-client