This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/tFstIOJ4j4uZTCuLMSP6UhDpW3c.roa File: tFstIOJ4j4uZTCuLMSP6UhDpW3c.roa (raw, json) Hash identifier: z+OqjablQjLunEc63VUxYTwZ7kltxjduPU2mSj8AEiQ= Subject key identifier: B4:5B:2D:20:E2:78:8F:8B:99:4C:2B:8B:31:23:FA:52:10:E9:5B:77 Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Certificate serial: BA46 Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/tFstIOJ4j4uZTCuLMSP6UhDpW3c.roa Signing time: Thu 04 Dec 2025 23:47:23 +0000 ROA not before: Thu 04 Dec 2025 23:47:23 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 134762 IP address blocks: 43.227.68.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 47686 (0xba46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC Validity Not Before: Dec 4 23:47:23 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=B45B2D20E2788F8B994C2B8B3123FA5210E95B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:f6:0d:7a:5d:29:4f:9c:b8:80:b7:8e:2a: 11:62:d0:5d:1f:df:0f:10:b2:04:8e:c4:d1:75:7e: 48:03:88:a1:c3:c6:22:78:99:fe:32:b3:f2:06:3d: c3:cb:ae:66:51:9b:1a:c4:27:72:32:d5:96:60:5b: 03:87:e0:aa:b5:d3:31:33:4f:50:14:0b:25:63:c3: 2c:fa:8b:6a:4d:25:2a:34:07:28:0b:9a:a9:ee:37: d3:3f:a6:60:13:dc:88:23:89:5d:cb:19:ba:b0:42: c5:ec:c1:30:96:e6:a2:72:34:44:99:15:d7:43:0d: b7:69:f4:db:85:98:36:39:99:83:ae:1a:4f:61:54: a4:c3:b8:8f:9e:24:16:50:46:eb:6b:6e:44:aa:5f: d8:26:50:55:c0:10:8f:11:c5:b8:cb:ad:c1:cc:90: 58:d6:06:f1:56:c5:33:04:44:40:f2:03:31:e8:0e: aa:d5:13:94:ba:a8:cf:5c:a7:e8:fb:be:5e:5e:e0: 4b:86:92:98:84:b6:06:2f:81:08:c8:12:f4:04:20: 32:ba:49:3b:f5:8c:99:89:88:62:6c:e4:87:50:60: de:7a:b7:86:aa:ad:ca:68:4b:72:e6:23:8f:b2:7e: b5:ec:57:b5:98:f8:ad:ab:57:6a:d5:fc:2a:77:d7: 92:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5B:2D:20:E2:78:8F:8B:99:4C:2B:8B:31:23:FA:52:10:E9:5B:77 X509v3 Authority Key Identifier: keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/tFstIOJ4j4uZTCuLMSP6UhDpW3c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.68.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:3b:e9:5d:5a:3c:db:9b:72:cd:d6:fc:e6:19:72:92:8b:75: 11:87:e2:41:c4:68:be:85:08:8a:0a:12:64:4c:1c:39:f7:3c: a5:e7:64:67:96:8c:2b:d2:bd:c5:4b:f0:01:31:1a:99:6f:b4: c0:ea:0e:45:31:bb:92:11:47:6e:b0:45:e6:17:9e:dd:e4:76: 0d:36:b8:99:6e:65:9f:22:1b:04:50:67:1e:0e:f7:2a:0f:07: 8c:04:a3:2f:d6:cf:02:3d:9b:07:00:ee:ee:2b:ec:32:68:ff: 10:b5:9e:1e:b9:06:8b:4e:1e:a5:78:52:98:ee:5c:de:8d:98: e5:59:a0:3e:cc:4a:aa:3e:89:a4:e3:11:69:81:1b:f5:16:2b: 36:23:35:7f:83:a6:a6:18:ed:68:ef:e8:38:11:45:d1:3c:e7: 18:6e:2f:15:90:14:28:70:4d:b8:9b:3d:3d:13:3f:8b:01:31: 4e:ea:fd:0b:2c:bf:0c:8b:c3:04:62:9f:e6:a3:9e:0d:5a:0a: db:62:ed:f9:a0:c1:41:f5:d5:8a:bf:e2:08:41:a7:82:83:35: fd:ab:4f:ed:4d:86:84:e3:ac:cb:ba:f9:62:ff:f9:8e:16:14: a5:d0:9f:7d:29:c7:7b:47:93:05:ec:3f:6f:40:da:e3:7f:5a: f7:81:03:3b -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIDALpGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhB RTRDRjc4QjQ5REYwQjJDMUQyOUQzMkU0OEE5NDNBRTRGNDFBQ0MwHhcNMjUxMjA0 MjM0NzIzWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEyhCNDVCMkQyMEUyNzg4 RjhCOTk0QzJCOEIzMTIzRkE1MjEwRTk1Qjc3MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAua/2DXpdKU+cuIC3jioRYtBdH98PELIEjsTRdX5IA4ihw8Yi eJn+MrPyBj3Dy65mUZsaxCdyMtWWYFsDh+CqtdMxM09QFAslY8Ms+otqTSUqNAco C5qp7jfTP6ZgE9yII4ldyxm6sELF7MEwluaicjREmRXXQw23afTbhZg2OZmDrhpP YVSkw7iPniQWUEbra25Eql/YJlBVwBCPEcW4y63BzJBY1gbxVsUzBERA8gMx6A6q 1ROUuqjPXKfo+75eXuBLhpKYhLYGL4EIyBL0BCAyukk79YyZiYhibOSHUGDeereG qq3KaEty5iOPsn617Fe1mPitq1dq1fwqd9eSYwIDAQABo4IB8zCCAe8wHQYDVR0O BBYEFLRbLSDieI+LmUwrizEj+lIQ6Vt3MB8GA1UdIwQYMBaAFIrkz3i0nfCywdKd MuSKlDrk9BrMMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2 NjMvaXVUUGVMU2Q4TExCMHAweTVJcVVPdVQwR3N3LmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjYzL3RGc3RJT0o0ajR1 WlRDdUxNU1A2VWhEcFczYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAr40QwDQYJKoZIhvcNAQELBQADggEBAF476V1aPNubcs3W/OYZcpKLdRGH 4kHEaL6FCIoKEmRMHDn3PKXnZGeWjCvSvcVL8AExGplvtMDqDkUxu5IRR26wReYX nt3kdg02uJluZZ8iGwRQZx4O9yoPB4wEoy/WzwI9mwcA7u4r7DJo/xC1nh65BotO HqV4UpjuXN6NmOVZoD7MSqo+iaTjEWmBG/UWKzYjNX+DpqYY7Wjv6DgRRdE85xhu LxWQFChwTbibPT0TP4sBMU7q/QssvwyLwwRin+ajng1aCtti7fmgwUH11Yq/4ghB p4KDNf2rT+1NhoTjrMu6+WL/+Y4WFKXQn30px3tHkwXsP29A2uN/WveBAzs= -----END CERTIFICATE-----Generated at Fri Dec 5 01:45:33 2025 by rpki-client