This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/Iu_JrmUnDocuJNo8-Gt6hiE-f3o.roa File: Iu_JrmUnDocuJNo8-Gt6hiE-f3o.roa (raw, json) Hash identifier: ZenHMCfHcmHwNoJIdytVVM+AgklxPy79Ynv4pYWOMN8= Subject key identifier: 22:EF:C9:AE:65:27:0E:87:2E:24:DA:3C:F8:6B:7A:86:21:3E:7F:7A Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: EDB7 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Iu_JrmUnDocuJNo8-Gt6hiE-f3o.roa Signing time: Mon 19 Jan 2026 17:57:38 +0000 ROA not before: Mon 19 Jan 2026 17:57:38 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.226.49.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 60855 (0xedb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 19 17:57:38 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=22EFC9AE65270E872E24DA3CF86B7A86213E7F7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:cc:2b:51:f6:78:3c:0f:d8:26:70:98:82: 18:59:e1:49:7a:92:22:8c:5e:c4:ef:5a:c7:21:67: 77:ed:92:17:73:5f:7b:21:a3:7c:af:43:fa:5e:ac: eb:d8:82:37:43:67:65:b2:ae:d7:e6:0c:de:e8:a7: 56:1d:37:85:6d:8b:f7:78:2f:5f:30:6b:8d:97:68: d2:09:3b:85:35:e1:b3:67:0f:00:42:dd:56:02:dd: dd:63:89:2b:fb:88:87:43:e9:37:15:fd:b0:01:be: 1c:a6:79:b9:bd:bb:01:91:ad:f2:f8:68:6d:aa:8d: 3e:61:41:9a:f1:7c:1f:96:8c:ef:90:67:28:41:59: 16:9d:d7:4e:c0:ec:51:b7:da:fd:b5:af:1b:e4:47: f7:4d:77:5f:eb:66:bd:63:f7:b3:33:79:37:99:18: d3:aa:db:e7:c2:95:62:f1:35:8a:73:52:d9:1d:e0: 5a:e9:47:21:ca:6d:0d:84:af:bd:7a:7c:87:b9:02: d3:86:e3:b6:7e:55:25:6b:14:67:52:d4:71:63:c4: 2e:c4:f7:e7:da:b8:0c:3d:36:07:32:4f:07:25:cb: fa:69:db:a2:00:76:80:4b:5f:2e:9f:3e:04:99:6a: e0:7c:af:31:6c:bb:dd:f3:2b:b6:8a:1c:fb:aa:97: f0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EF:C9:AE:65:27:0E:87:2E:24:DA:3C:F8:6B:7A:86:21:3E:7F:7A X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Iu_JrmUnDocuJNo8-Gt6hiE-f3o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.49.0/24 Signature Algorithm: sha256WithRSAEncryption 42:43:50:c3:6f:ca:0a:fc:cd:41:07:d6:62:b9:5c:37:44:a0: da:17:e8:a2:99:7f:50:0a:14:e4:68:e9:af:7c:be:7b:9b:2f: 83:3e:fb:15:b5:89:ab:86:83:03:aa:e2:13:4e:d3:bc:19:98: cb:40:06:02:23:90:7f:6b:52:6e:ef:e2:b0:30:8a:f8:2f:ea: bd:29:a3:cb:25:43:a7:76:2a:52:3a:f3:93:15:c4:a9:2c:83: 36:f3:29:fa:21:1a:fe:3c:b8:46:1d:ed:58:bc:b0:e8:35:93: 5d:f0:93:92:41:2f:78:df:37:07:2e:31:13:f7:8b:df:77:e7: c5:6a:81:0d:1d:50:06:68:c4:18:ab:1e:1a:ad:e8:69:57:53: 46:39:74:7c:94:aa:08:27:26:35:89:a1:b2:90:10:56:b2:6d: 53:d8:3f:66:20:6e:12:01:23:6f:96:51:0f:01:80:93:61:b3: a0:34:3e:fe:46:ff:52:56:b1:7b:17:73:ec:72:11:ef:aa:52: 45:91:78:4d:58:66:5a:6a:99:d1:cc:92:13:d1:5d:d9:88:19: e9:76:d8:89:52:c0:8b:ea:61:35:ae:25:0e:a9:f3:bd:60:38: 71:4e:22:a9:52:cf:f0:c8:57:bb:f5:95:76:ab:1f:7f:9a:25: f2:76:09:62 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAO23MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTE5 MTc1NzM4WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEygyMkVGQzlBRTY1Mjcw RTg3MkUyNERBM0NGODZCN0E4NjIxM0U3RjdBMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAs8bMK1H2eDwP2CZwmIIYWeFJepIijF7E71rHIWd37ZIXc197 IaN8r0P6Xqzr2II3Q2dlsq7X5gze6KdWHTeFbYv3eC9fMGuNl2jSCTuFNeGzZw8A Qt1WAt3dY4kr+4iHQ+k3Ff2wAb4cpnm5vbsBka3y+Ghtqo0+YUGa8XwflozvkGco QVkWnddOwOxRt9r9ta8b5Ef3TXdf62a9Y/ezM3k3mRjTqtvnwpVi8TWKc1LZHeBa 6Uchym0NhK+9enyHuQLThuO2flUlaxRnUtRxY8QuxPfn2rgMPTYHMk8HJcv6adui AHaAS18unz4EmWrgfK8xbLvd8yu2ihz7qpfwOQIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFCLvya5lJw6HLiTaPPhreoYhPn96MB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL0l1X0pybVVuRG9j dUpObzgtR3Q2aGlFLWYzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr4jEwDQYJKoZIhvcNAQELBQADggEBAEJDUMNvygr8zUEH1mK5XDdEoNoX 6KKZf1AKFORo6a98vnubL4M++xW1iauGgwOq4hNO07wZmMtABgIjkH9rUm7v4rAw ivgv6r0po8slQ6d2KlI685MVxKksgzbzKfohGv48uEYd7Vi8sOg1k13wk5JBL3jf NwcuMRP3i99358VqgQ0dUAZoxBirHhqt6GlXU0Y5dHyUqggnJjWJobKQEFaybVPY P2YgbhIBI2+WUQ8BgJNhs6A0Pv5G/1JWsXsXc+xyEe+qUkWReE1YZlpqmdHMkhPR XdmIGel22IlSwIvqYTWuJQ6p871gOHFOIqlSz/DIV7v1lXarH3+aJfJ2CWI= -----END CERTIFICATE-----Generated at Mon Jan 19 21:55:52 2026 by rpki-client