This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/m9zH3SODdHM7uDNgZRT6qjO5kRs.roa File: m9zH3SODdHM7uDNgZRT6qjO5kRs.roa (raw, json) Hash identifier: R+hwgvW/g1ntsXXRjCjv/mGRp0DK+nO2EHjzbPt0i+M= Subject key identifier: 9B:DC:C7:DD:23:83:74:73:3B:B8:33:60:65:14:FA:AA:33:B9:91:1B Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: EDB8 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/m9zH3SODdHM7uDNgZRT6qjO5kRs.roa Signing time: Mon 19 Jan 2026 17:57:39 +0000 ROA not before: Mon 19 Jan 2026 17:57:39 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.227.68.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 60856 (0xedb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 19 17:57:39 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=9BDCC7DD238374733BB833606514FAAA33B9911B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ce:a7:66:62:53:c9:c6:1e:55:2c:c9:64:b3: dc:0a:56:76:75:8b:95:09:09:01:a5:a2:a2:a5:0a: 84:58:5e:61:2a:dd:a9:da:d5:92:d6:99:6f:ca:7c: 20:11:26:49:f3:94:53:fb:d5:6c:6c:6c:1e:38:e6: 70:03:2c:42:f3:4f:7f:eb:e0:2b:68:20:55:6b:e5: d0:ff:a2:3f:b2:3b:4b:49:da:09:42:73:4d:9d:8a: 34:8b:93:41:46:e6:c7:81:c2:2b:6c:d3:37:3f:e2: bd:0f:b7:57:b4:cf:a7:59:66:54:06:ca:8a:a4:c3: bf:bc:4e:37:f4:00:8b:3c:ca:dc:e2:2f:96:65:35: 4c:eb:00:49:d7:62:49:d7:0e:9a:a9:a2:90:bf:d0: b6:5d:09:c7:ca:34:56:70:97:55:22:be:95:6d:9f: 38:9c:7f:bf:4d:26:1d:ed:28:b9:a7:07:8a:2f:93: 3a:66:0b:8c:59:f5:1b:5e:74:6e:9a:0c:a5:2e:92: ae:88:fe:fd:6e:26:ae:a3:16:d6:77:eb:db:0f:39: fa:5b:b3:77:4d:97:a4:43:76:25:0c:f5:cc:f4:87: 38:bc:5b:64:ec:fa:ae:a6:11:aa:e4:fb:8d:d8:e1: 72:65:20:73:f5:a4:b3:10:7b:64:1f:d4:a4:99:fe: e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DC:C7:DD:23:83:74:73:3B:B8:33:60:65:14:FA:AA:33:B9:91:1B X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/m9zH3SODdHM7uDNgZRT6qjO5kRs.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.68.0/24 Signature Algorithm: sha256WithRSAEncryption b4:f7:ee:40:d4:e0:cf:9c:e2:92:64:b5:da:ed:27:c1:97:11: e7:b3:80:cd:27:32:8a:e0:4d:65:c7:02:5d:3e:9d:f1:a8:d6: 68:62:78:07:f6:5a:c1:97:f0:94:d4:76:26:38:d8:9b:13:d8: f5:9f:b3:25:04:7b:35:a2:fe:23:ed:4f:b2:37:2a:81:29:f1: 48:54:0d:61:74:56:a5:f0:13:3e:70:ae:9e:ec:3b:b2:af:2a: e0:f3:3e:11:c0:98:d8:eb:65:65:af:ec:58:c8:d1:5c:60:93: 35:aa:55:e2:ff:c2:cd:10:da:2a:a4:43:6a:9e:61:35:19:ba: b6:49:0d:25:4c:c4:1b:4f:7d:a2:b1:76:30:41:85:a5:87:7c: 31:00:91:64:c2:94:f9:90:28:06:69:50:d2:84:39:76:a2:9f: 21:21:cd:fa:ef:b8:74:56:c0:8a:d9:49:ed:b0:55:1b:10:81: ab:99:61:99:d2:78:dc:10:39:b4:bb:b8:6f:be:c5:c3:43:c3: 53:eb:6d:0f:37:5d:61:82:98:98:b9:3f:b8:ed:f8:46:eb:8b: ae:e0:ce:36:f6:24:e9:e8:7b:2b:cf:66:aa:af:df:58:0e:07: 95:a3:8c:ee:93:6e:58:d1:fd:ae:00:3d:61:9c:04:1a:aa:07: e1:0e:30:c2 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAO24MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTE5 MTc1NzM5WhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyg5QkRDQzdERDIzODM3 NDczM0JCODMzNjA2NTE0RkFBQTMzQjk5MTFCMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA5s6nZmJTycYeVSzJZLPcClZ2dYuVCQkBpaKipQqEWF5hKt2p 2tWS1plvynwgESZJ85RT+9VsbGweOOZwAyxC809/6+AraCBVa+XQ/6I/sjtLSdoJ QnNNnYo0i5NBRubHgcIrbNM3P+K9D7dXtM+nWWZUBsqKpMO/vE439ACLPMrc4i+W ZTVM6wBJ12JJ1w6aqaKQv9C2XQnHyjRWcJdVIr6VbZ84nH+/TSYd7Si5pweKL5M6 ZguMWfUbXnRumgylLpKuiP79biauoxbWd+vbDzn6W7N3TZekQ3YlDPXM9Ic4vFtk 7PquphGq5PuN2OFyZSBz9aSzEHtkH9Skmf7nVwIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFJvcx90jg3RzO7gzYGUU+qozuZEbMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL205ekgzU09EZEhN N3VETmdaUlQ2cWpPNWtScy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr40QwDQYJKoZIhvcNAQELBQADggEBALT37kDU4M+c4pJktdrtJ8GXEeez gM0nMorgTWXHAl0+nfGo1mhieAf2WsGX8JTUdiY42JsT2PWfsyUEezWi/iPtT7I3 KoEp8UhUDWF0VqXwEz5wrp7sO7KvKuDzPhHAmNjrZWWv7FjI0VxgkzWqVeL/ws0Q 2iqkQ2qeYTUZurZJDSVMxBtPfaKxdjBBhaWHfDEAkWTClPmQKAZpUNKEOXainyEh zfrvuHRWwIrZSe2wVRsQgauZYZnSeNwQObS7uG++xcNDw1PrbQ83XWGCmJi5P7jt +Ebri67gzjb2JOnoeyvPZqqv31gOB5WjjO6TbljR/a4APWGcBBqqB+EOMMI= -----END CERTIFICATE-----Generated at Mon Jan 19 21:55:53 2026 by rpki-client