This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/ehQc69I9ilUfZymXTNaNPpLc2oU.roa File: ehQc69I9ilUfZymXTNaNPpLc2oU.roa (raw, json) Hash identifier: OLuCLa5EpPk8nlv6AorGCrJkcDm/oyHdoi1AhGYhY5g= Subject key identifier: 7A:14:1C:EB:D2:3D:8A:55:1F:67:29:97:4C:D6:8D:3E:92:DC:DA:85 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: BA34 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ehQc69I9ilUfZymXTNaNPpLc2oU.roa Signing time: Thu 04 Dec 2025 22:17:23 +0000 ROA not before: Thu 04 Dec 2025 22:17:23 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.227.68.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 47668 (0xba34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Dec 4 22:17:23 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=7A141CEBD23D8A551F6729974CD68D3E92DCDA85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4a:9b:2f:ee:31:d7:65:8e:88:9c:05:92:d9: 68:f8:27:68:1b:10:3b:c0:f8:c0:5a:80:13:fa:64: 24:eb:12:9f:53:78:b4:25:f5:88:ae:ed:6c:31:a1: 00:e9:89:60:31:00:d9:8e:02:c6:55:92:4b:85:93: a2:ff:cc:16:40:1a:10:76:04:44:23:e1:8b:23:5c: 0e:56:73:c3:e0:dd:7c:5f:1e:49:ef:23:f2:df:02: b1:d4:ec:3c:f9:52:fc:78:de:b9:c8:f5:69:56:b0: 9c:a1:fd:fc:9e:43:f6:2d:51:da:20:b1:7a:75:91: 62:33:11:92:e3:cb:42:f0:38:5c:e3:6d:d2:0d:78: 27:f2:d5:fb:52:03:c6:17:47:25:f1:e3:93:93:f0: c4:25:a2:5d:fd:d3:0a:be:72:e4:fe:0f:4e:9b:01: 71:63:11:ad:6c:ff:dd:64:4b:19:37:9b:32:33:6c: 6e:10:c8:1a:70:1a:0d:1f:dd:60:88:e1:8e:ca:1a: 73:cc:6b:dd:0c:dd:90:eb:24:97:2a:9d:06:6a:db: 97:de:36:54:15:29:1d:e5:1d:cb:c2:b9:36:96:45: d3:28:73:0d:af:2f:d1:cc:c1:d4:8c:36:73:e5:b0: 8c:b8:31:96:9b:f0:4c:7e:95:63:6b:fe:e5:f9:2d: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:14:1C:EB:D2:3D:8A:55:1F:67:29:97:4C:D6:8D:3E:92:DC:DA:85 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ehQc69I9ilUfZymXTNaNPpLc2oU.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.68.0/24 Signature Algorithm: sha256WithRSAEncryption 81:0b:72:56:cb:ff:36:0f:bc:a8:1d:ab:63:7f:dc:71:e9:ad: 7b:16:25:95:2a:10:41:57:e5:81:c5:77:49:de:5e:6e:d8:2c: 86:4d:3e:b2:96:3d:17:f1:2f:f7:35:d9:67:50:5a:65:23:9d: a0:2b:80:2e:cd:a5:54:d3:08:97:c9:0c:3b:9b:aa:58:e2:08: 93:08:9d:dd:64:fe:13:95:9f:4c:f1:07:38:04:ce:20:07:4a: 6f:e9:45:06:95:8d:87:03:27:c5:5b:63:bf:fe:0b:e3:b6:77: 71:c8:10:35:c0:93:12:00:d5:85:b1:fb:3c:b3:85:c2:7e:3e: 69:c2:95:f3:a8:da:a0:ac:72:d8:44:e9:da:dd:7b:29:8a:39: 0a:e1:41:9a:50:b7:be:21:e9:2f:4e:49:1e:4d:c5:b6:79:e9: 28:64:bf:b6:67:ef:db:f9:65:90:02:05:65:71:36:78:fb:7c: 2e:10:ed:82:8e:63:0c:a0:56:d4:b8:f7:8d:30:33:6d:47:b4: c1:a5:05:9c:a7:50:a1:7d:d2:7c:c4:58:28:ec:83:32:21:b9: ce:bf:9b:5d:0a:9c:90:ee:43:0c:8f:9d:ff:c8:e1:9f:91:fc: fe:3a:cc:8e:21:50:44:18:13:cc:41:89:48:ab:5d:a7:9a:dd: e6:4b:80:5d -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDALo0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjUxMjA0 MjIxNzIzWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyg3QTE0MUNFQkQyM0Q4 QTU1MUY2NzI5OTc0Q0Q2OEQzRTkyRENEQTg1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA6UqbL+4x12WOiJwFktlo+CdoGxA7wPjAWoAT+mQk6xKfU3i0 JfWIru1sMaEA6YlgMQDZjgLGVZJLhZOi/8wWQBoQdgREI+GLI1wOVnPD4N18Xx5J 7yPy3wKx1Ow8+VL8eN65yPVpVrCcof38nkP2LVHaILF6dZFiMxGS48tC8Dhc423S DXgn8tX7UgPGF0cl8eOTk/DEJaJd/dMKvnLk/g9OmwFxYxGtbP/dZEsZN5syM2xu EMgacBoNH91giOGOyhpzzGvdDN2Q6ySXKp0GatuX3jZUFSkd5R3Lwrk2lkXTKHMN ry/RzMHUjDZz5bCMuDGWm/BMfpVja/7l+S2LFwIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFHoUHOvSPYpVH2cpl0zWjT6S3NqFMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL2VoUWM2OUk5aWxV Zlp5bVhUTmFOUHBMYzJvVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr40QwDQYJKoZIhvcNAQELBQADggEBAIELclbL/zYPvKgdq2N/3HHprXsW JZUqEEFX5YHFd0neXm7YLIZNPrKWPRfxL/c12WdQWmUjnaArgC7NpVTTCJfJDDub qljiCJMInd1k/hOVn0zxBzgEziAHSm/pRQaVjYcDJ8VbY7/+C+O2d3HIEDXAkxIA 1YWx+zyzhcJ+PmnClfOo2qCscthE6drdeymKOQrhQZpQt74h6S9OSR5NxbZ56Shk v7Zn79v5ZZACBWVxNnj7fC4Q7YKOYwygVtS4940wM21HtMGlBZynUKF90nzEWCjs gzIhuc6/m10KnJDuQwyPnf/I4Z+R/P46zI4hUEQYE8xBiUirXaea3eZLgF0= -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:49 2025 by rpki-client