This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/ErO9hwfMrCje3VTsyQ6G0263AcA.roa File: ErO9hwfMrCje3VTsyQ6G0263AcA.roa (raw, json) Hash identifier: GpvEePrRs3WLSAjeO8yNHmwYej9g3USS+qN+VfRpRvs= Subject key identifier: 12:B3:BD:87:07:CC:AC:28:DE:DD:54:EC:C9:0E:86:D3:6E:B7:01:C0 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: EDED Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ErO9hwfMrCje3VTsyQ6G0263AcA.roa Signing time: Mon 19 Jan 2026 22:27:39 +0000 ROA not before: Mon 19 Jan 2026 22:27:39 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.226.49.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 60909 (0xeded) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 19 22:27:39 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=12B3BD8707CCAC28DEDD54ECC90E86D36EB701C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9e:8b:b5:1a:3f:30:c5:dc:80:69:7f:0c:e5: ef:fc:02:ee:40:84:62:81:f7:3c:08:4a:a7:74:11: f0:b1:7d:6e:33:99:4f:0d:81:08:a5:8f:1f:1f:a8: c6:49:16:11:92:b1:98:78:ef:a3:75:41:24:e7:67: 80:9a:f7:29:bb:41:2d:24:33:bc:47:eb:1a:3f:49: db:58:ad:89:38:3e:23:bd:43:8d:d9:88:f5:9f:b3: 01:80:ef:58:31:93:f7:b4:d3:9f:59:ee:21:ca:20: eb:4f:1a:5e:00:26:1a:4d:9b:05:75:74:38:73:39: 3c:74:ac:73:84:c1:b7:6e:09:2d:64:f1:0a:94:9f: 1c:90:e0:7e:30:95:53:e2:6a:78:78:41:1c:f4:64: 81:04:54:4f:f6:46:75:e4:7e:63:a3:42:4c:2a:37: c6:94:7b:7e:89:bd:31:a8:6f:8f:0b:b8:ec:1d:34: 2a:0a:ba:dd:b9:64:58:d5:f5:47:9f:b3:0d:13:6f: 5b:25:6e:3b:0f:89:3c:f8:c9:06:6f:0e:82:c4:df: 5a:07:8f:2c:c7:5b:a3:b7:7b:11:24:fe:31:e8:6e: 3d:79:d5:73:0a:35:83:25:c3:d4:01:89:ba:b2:3b: 4b:58:b0:44:ea:b4:b1:e3:fb:d6:bd:fe:02:76:87: 49:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B3:BD:87:07:CC:AC:28:DE:DD:54:EC:C9:0E:86:D3:6E:B7:01:C0 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ErO9hwfMrCje3VTsyQ6G0263AcA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.49.0/24 Signature Algorithm: sha256WithRSAEncryption 86:e4:3f:0a:78:ba:6f:2c:43:d8:49:5b:4c:cb:7e:8c:48:83: d6:36:f7:8c:2f:93:e5:12:d6:1d:ad:d3:ab:c4:e5:a8:10:84: 3f:30:e6:ea:9e:cd:e8:a9:78:55:4b:fc:ab:fa:61:89:f2:ea: 4f:2b:14:43:ec:89:de:3d:60:51:7b:7f:d2:74:bb:41:6f:3d: 93:b7:5b:f7:45:d3:c8:90:7a:a3:fd:8e:3a:36:e8:d8:10:86: 1e:8d:9e:ec:b3:b1:cf:08:2f:41:96:56:2c:8b:a3:f9:2c:3a: b8:79:24:82:65:d2:e6:ee:fc:52:0f:8a:49:ab:03:8b:0d:50: 5b:4c:61:e5:33:95:d1:4f:a6:98:f6:cb:2b:84:9f:c9:16:f2: 16:a5:93:37:fb:be:ed:d8:6f:b6:13:d4:d3:31:5a:dd:d3:d8: a6:2b:82:3e:95:7a:81:12:73:df:db:1e:e2:92:cd:a4:89:72: c5:ad:fa:c2:a3:78:a5:e5:f0:c0:1c:cc:fc:9e:43:7a:46:5f: bc:2b:56:5f:b8:01:7f:ad:99:e4:cd:51:2b:8f:80:c1:15:f9: db:3b:f7:94:40:0c:44:a3:0d:5f:ba:0d:6a:af:1c:48:b1:eb: 64:6d:99:70:49:2d:f7:e6:1a:52:54:b9:d3:32:0a:57:ce:49: fe:93:e4:b8 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAO3tMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTE5 MjIyNzM5WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEygxMkIzQkQ4NzA3Q0NB QzI4REVERDU0RUNDOTBFODZEMzZFQjcwMUMwMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA3Z6LtRo/MMXcgGl/DOXv/ALuQIRigfc8CEqndBHwsX1uM5lP DYEIpY8fH6jGSRYRkrGYeO+jdUEk52eAmvcpu0EtJDO8R+saP0nbWK2JOD4jvUON 2Yj1n7MBgO9YMZP3tNOfWe4hyiDrTxpeACYaTZsFdXQ4czk8dKxzhMG3bgktZPEK lJ8ckOB+MJVT4mp4eEEc9GSBBFRP9kZ15H5jo0JMKjfGlHt+ib0xqG+PC7jsHTQq CrrduWRY1fVHn7MNE29bJW47D4k8+MkGbw6CxN9aB48sx1ujt3sRJP4x6G49edVz CjWDJcPUAYm6sjtLWLBE6rSx4/vWvf4CdodJdwIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFBKzvYcHzKwo3t1U7MkOhtNutwHAMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL0VyTzlod2ZNckNq ZTNWVHN5UTZHMDI2M0FjQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr4jEwDQYJKoZIhvcNAQELBQADggEBAIbkPwp4um8sQ9hJW0zLfoxIg9Y2 94wvk+US1h2t06vE5agQhD8w5uqezeipeFVL/Kv6YYny6k8rFEPsid49YFF7f9J0 u0FvPZO3W/dF08iQeqP9jjo26NgQhh6Nnuyzsc8IL0GWViyLo/ksOrh5JIJl0ubu /FIPikmrA4sNUFtMYeUzldFPppj2yyuEn8kW8halkzf7vu3Yb7YT1NMxWt3T2KYr gj6VeoESc9/bHuKSzaSJcsWt+sKjeKXl8MAczPyeQ3pGX7wrVl+4AX+tmeTNUSuP gMEV+ds795RADESjDV+6DWqvHEix62RtmXBJLffmGlJUudMyClfOSf6T5Lg= -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:53 2026 by rpki-client