This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/mMMsOm0gXLZu6wMFVhmP-3IN094.roa File: mMMsOm0gXLZu6wMFVhmP-3IN094.roa (raw, json) Hash identifier: EMFTMBWn9PgVfDP9mLd0S2NIxjneuhTDqg42ScBA28s= Subject key identifier: 98:C3:2C:3A:6D:20:5C:B6:6E:EB:03:05:56:19:8F:FB:72:0D:D3:DE Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: EDE3 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/mMMsOm0gXLZu6wMFVhmP-3IN094.roa Signing time: Mon 19 Jan 2026 21:27:41 +0000 ROA not before: Mon 19 Jan 2026 21:27:41 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 63612 IP address blocks: 103.45.128.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 60899 (0xede3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Jan 19 21:27:41 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=98C32C3A6D205CB66EEB030556198FFB720DD3DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:60:f4:7d:e2:ef:24:28:99:a2:01:ba:d4: af:c5:72:b5:6e:26:a0:83:f0:31:4e:66:39:d6:54: 50:27:bd:88:75:3d:cf:e6:1b:40:fd:c9:4b:72:de: d0:7d:52:5a:e8:34:85:67:9e:6d:da:20:03:b8:da: 9f:b5:24:48:76:3b:0c:b3:f4:29:43:24:31:17:36: 7d:af:fe:42:de:12:62:d8:3e:40:39:96:da:18:e4: 85:7f:bf:80:5e:91:ff:28:28:ed:7e:9e:37:51:17: f8:c2:d7:fe:9f:e7:8d:75:2e:00:e0:ac:6c:02:55: c2:0d:6e:7a:02:b3:68:fe:14:19:43:65:34:e6:9d: a7:4c:97:a2:e8:04:62:11:01:de:0b:a5:7a:59:3a: fe:19:25:4d:14:21:85:43:ee:4d:cc:17:20:dd:12: 83:5e:37:ee:d6:52:5f:c0:04:4a:3f:a0:ed:14:cf: fb:f9:05:09:ff:39:2d:28:55:6c:b4:07:06:5d:cb: dc:70:e2:3f:f6:fd:11:10:70:d7:19:b9:61:b5:23: 6c:7f:46:13:97:00:6b:04:d2:f6:86:74:a7:a1:5a: 70:0f:06:02:77:50:62:aa:cf:b2:91:4c:67:9b:8f: 2f:72:a0:9d:88:4e:db:c9:17:27:c6:b6:aa:c5:a3: 6e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C3:2C:3A:6D:20:5C:B6:6E:EB:03:05:56:19:8F:FB:72:0D:D3:DE X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/mMMsOm0gXLZu6wMFVhmP-3IN094.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.45.128.0/19 Signature Algorithm: sha256WithRSAEncryption 61:de:56:55:3c:f2:ae:f5:92:07:67:7b:e8:ab:78:5d:a2:c0: 0c:4f:04:31:78:46:5f:c8:6d:fb:fe:2a:30:9d:dc:d8:ee:3b: 98:d9:37:fe:0b:2b:a8:36:9f:51:59:89:95:29:07:f6:c2:68: a2:a4:88:c9:97:b6:8a:ec:30:d3:d6:69:d9:75:92:92:29:fb: 2b:00:2c:c3:c6:f0:10:4d:cd:2b:93:b2:3e:13:0a:b1:57:4c: d2:b5:22:d3:2b:63:e4:63:30:e6:96:ef:1c:d9:f0:51:2f:33: 65:c8:7e:84:d8:d1:60:b5:47:e7:bc:6c:c3:56:47:75:dd:69: 0f:30:15:8b:0a:83:cf:24:1f:06:ac:d5:56:6e:ca:29:2f:89: 1e:e2:f4:c0:f9:f2:e8:f3:05:45:7c:62:0d:42:ee:2b:07:e4: 82:08:29:d8:58:44:0e:bf:34:cb:74:1d:3c:b9:44:18:11:37: f0:f5:a4:6e:cf:e5:05:b0:3e:9b:cc:c9:5e:e1:8c:58:8c:bc: cb:5a:c7:f3:9e:f5:63:fe:a6:76:7f:c3:5d:0b:9e:fd:8d:6c: 59:f8:a9:c1:cc:8f:29:7d:bb:a9:eb:dc:76:38:2e:68:b2:a6: 71:f7:09:cc:74:82:b0:09:8e:dd:af:85:3f:b0:97:4a:db:d0: cb:02:cb:c3 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDAO3jMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjYwMTE5 MjEyNzQxWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyg5OEMzMkMzQTZEMjA1 Q0I2NkVFQjAzMDU1NjE5OEZGQjcyMEREM0RFMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAokJg9H3i7yQomaIButSvxXK1biagg/AxTmY51lRQJ72IdT3P 5htA/clLct7QfVJa6DSFZ55t2iADuNqftSRIdjsMs/QpQyQxFzZ9r/5C3hJi2D5A OZbaGOSFf7+AXpH/KCjtfp43URf4wtf+n+eNdS4A4KxsAlXCDW56ArNo/hQZQ2U0 5p2nTJei6ARiEQHeC6V6WTr+GSVNFCGFQ+5NzBcg3RKDXjfu1lJfwARKP6DtFM/7 +QUJ/zktKFVstAcGXcvccOI/9v0REHDXGblhtSNsf0YTlwBrBNL2hnSnoVpwDwYC d1Biqs+ykUxnm48vcqCdiE7byRcnxraqxaNu0QIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFJjDLDptIFy2busDBVYZj/tyDdPeMB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL21NTXNPbTBnWExa dTZ3TUZWaG1QLTNJTjA5NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVnLYAwDQYJKoZIhvcNAQELBQADggEBAGHeVlU88q71kgdne+ireF2iwAxP BDF4Rl/Ibfv+KjCd3NjuO5jZN/4LK6g2n1FZiZUpB/bCaKKkiMmXtorsMNPWadl1 kpIp+ysALMPG8BBNzSuTsj4TCrFXTNK1ItMrY+RjMOaW7xzZ8FEvM2XIfoTY0WC1 R+e8bMNWR3XdaQ8wFYsKg88kHwas1VZuyikviR7i9MD58ujzBUV8Yg1C7isH5III KdhYRA6/NMt0HTy5RBgRN/D1pG7P5QWwPpvMyV7hjFiMvMtax/Oe9WP+pnZ/w10L nv2NbFn4qcHMjyl9u6nr3HY4LmiypnH3Ccx0grAJjt2vhT+wl0rb0MsCy8M= -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:54 2026 by rpki-client