This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/Qze3zGNRkcS1SXJL4tKyYMiNWTE.roa File: Qze3zGNRkcS1SXJL4tKyYMiNWTE.roa (raw, json) Hash identifier: 85gmKv58RRRCO8PtoHK7FEwizZysk59vRdHY0eJrrv4= Subject key identifier: 43:37:B7:CC:63:51:91:C4:B5:49:72:4B:E2:D2:B2:60:C8:8D:59:31 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: EDEE Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Qze3zGNRkcS1SXJL4tKyYMiNWTE.roa Signing time: Mon 19 Jan 2026 22:27:39 +0000 ROA not before: Mon 19 Jan 2026 22:27:39 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.227.68.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 60910 (0xedee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 19 22:27:39 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4337B7CC635191C4B549724BE2D2B260C88D5931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:c5:23:9f:1d:c5:05:8d:d3:7f:5a:c0:dc: 13:43:e6:29:a3:6e:42:13:11:e1:a4:c9:c6:30:f8: 9e:9e:22:9d:b4:9a:64:d4:61:a2:32:c9:77:f4:77: 15:a0:bd:7a:9a:f7:f4:69:af:1c:23:d0:a9:2e:bc: 7a:e7:8f:64:f9:fb:92:9c:1a:2c:3a:9f:a5:cc:10: e4:33:fa:c3:82:80:1c:d2:8b:8a:c0:fb:42:d5:08: 67:aa:97:cb:f0:00:b8:47:e6:be:3d:9c:ae:37:43: da:1b:82:62:be:90:6b:18:21:18:29:9c:c4:c3:db: 8c:c0:2a:a4:64:f6:48:31:42:87:76:4d:bc:9b:df: a5:cb:cc:22:81:5e:9c:34:64:6d:4b:66:f0:74:87: 8b:74:f3:ec:63:c5:c2:dc:ac:b8:e8:56:78:a1:4a: 12:8c:18:2f:b2:b8:92:1a:5a:71:f8:f8:bf:40:0b: 28:83:05:92:5b:6d:e7:75:54:d6:e0:79:d9:c4:bb: a6:3c:34:da:65:a5:c6:4a:2e:df:7c:b5:8e:39:be: 2c:2e:1f:e6:26:bb:08:bd:a7:5d:25:a6:a0:bd:1e: 9c:1c:6d:d3:eb:e8:b0:50:0d:dd:f8:f7:f7:35:32: e7:f0:31:b0:fe:c6:46:8c:cd:22:e7:70:c4:c9:13: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:37:B7:CC:63:51:91:C4:B5:49:72:4B:E2:D2:B2:60:C8:8D:59:31 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Qze3zGNRkcS1SXJL4tKyYMiNWTE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.68.0/24 Signature Algorithm: sha256WithRSAEncryption 52:65:e6:d9:4f:bf:12:63:5d:33:b3:c2:5b:40:64:49:d1:64: 7b:95:da:45:6a:01:2c:f0:60:1e:8c:ab:ff:ff:d5:24:32:77: 82:31:a0:02:d3:0e:e6:39:9a:61:16:ef:12:4f:7b:61:d9:bd: ae:bf:d0:77:3f:42:22:f3:ad:1d:64:26:b6:1f:15:ee:8b:0b: 0a:d2:0e:5b:c6:f3:48:a0:3e:16:d0:07:40:aa:5b:46:89:35: 0d:b7:55:30:30:07:81:ad:ae:a7:61:e3:bb:57:b2:e0:1f:b7: b6:1f:4f:49:5c:80:da:40:2c:15:6e:8a:46:e0:ce:14:52:8e: 7b:f5:35:ef:d3:c1:ca:d2:7f:74:7a:39:b6:78:d7:39:70:58: 36:c8:17:4d:54:ee:3d:70:51:f0:72:2a:8b:57:31:ab:35:52: 2b:e3:d9:de:70:bc:9c:56:fb:c8:8b:52:af:38:90:7d:c6:6b: dd:bc:a0:3d:43:44:47:6e:89:42:c0:2b:cc:02:60:7e:7a:84: 7e:a8:10:34:e2:42:82:c3:5c:56:3e:50:95:ca:8d:2a:0a:12: 66:40:24:35:e7:e4:57:d7:0f:f6:4a:63:e0:77:5c:7d:14:c4: 0e:a7:31:bd:42:42:42:40:f3:75:e2:1b:72:cd:e6:36:c8:5c: f5:a5:a0:40 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAO3uMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTE5 MjIyNzM5WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyg0MzM3QjdDQzYzNTE5 MUM0QjU0OTcyNEJFMkQyQjI2MEM4OEQ1OTMxMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAq/TFI58dxQWN039awNwTQ+Ypo25CExHhpMnGMPieniKdtJpk 1GGiMsl39HcVoL16mvf0aa8cI9CpLrx6549k+fuSnBosOp+lzBDkM/rDgoAc0ouK wPtC1QhnqpfL8AC4R+a+PZyuN0PaG4JivpBrGCEYKZzEw9uMwCqkZPZIMUKHdk28 m9+ly8wigV6cNGRtS2bwdIeLdPPsY8XC3Ky46FZ4oUoSjBgvsriSGlpx+Pi/QAso gwWSW23ndVTW4HnZxLumPDTaZaXGSi7ffLWOOb4sLh/mJrsIvaddJaagvR6cHG3T 6+iwUA3d+Pf3NTLn8DGw/sZGjM0i53DEyRPTLwIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFEM3t8xjUZHEtUlyS+LSsmDIjVkxMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL1F6ZTN6R05Sa2NT MVNYSkw0dEt5WU1pTldURS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr40QwDQYJKoZIhvcNAQELBQADggEBAFJl5tlPvxJjXTOzwltAZEnRZHuV 2kVqASzwYB6Mq///1SQyd4IxoALTDuY5mmEW7xJPe2HZva6/0Hc/QiLzrR1kJrYf Fe6LCwrSDlvG80igPhbQB0CqW0aJNQ23VTAwB4Gtrqdh47tXsuAft7YfT0lcgNpA LBVuikbgzhRSjnv1Ne/TwcrSf3R6ObZ41zlwWDbIF01U7j1wUfByKotXMas1Uivj 2d5wvJxW+8iLUq84kH3Ga928oD1DREduiULAK8wCYH56hH6oEDTiQoLDXFY+UJXK jSoKEmZAJDXn5FfXD/ZKY+B3XH0UxA6nMb1CQkJA83XiG3LN5jbIXPWloEA= -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:53 2026 by rpki-client