This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7XmXHlUdJ1Qyre0tOK2sNLqZK7Q.roa File: 7XmXHlUdJ1Qyre0tOK2sNLqZK7Q.roa (raw, json) Hash identifier: 4XEdIgu9/kHZcCYtphnoWBqIdIQyCYKiYdlxpWc0+YA= Subject key identifier: ED:79:97:1E:55:1D:27:54:32:AD:ED:2D:38:AD:AC:34:BA:99:2B:B4 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 40A6 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7XmXHlUdJ1Qyre0tOK2sNLqZK7Q.roa Signing time: Fri 05 Dec 2025 00:16:29 +0000 ROA not before: Fri 05 Dec 2025 00:16:29 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9391 IP address blocks: 124.29.0.0/17 maxlen: 17 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 16550 (0x40a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: Dec 5 00:16:29 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=ED79971E551D275432ADED2D38ADAC34BA992BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:25:90:27:a6:67:2f:81:80:c9:5d:3d:82: 46:57:d8:54:bc:ca:48:9b:57:78:26:7e:13:55:02: 48:68:6e:6c:cf:32:37:6c:38:63:3d:7c:a4:54:d8: ac:bd:ac:ab:b8:ba:39:35:a8:d9:09:87:70:1a:f4: 3f:76:04:aa:57:c2:e4:0c:30:e7:83:43:2c:3a:34: b9:e4:f6:86:67:21:72:ba:bf:00:04:e3:41:53:9a: 29:1d:11:77:79:8c:91:6d:82:84:37:dd:b7:c4:ff: 70:32:aa:b0:08:47:58:61:dd:f3:bf:63:5c:d1:6f: 38:1f:f0:3a:e5:ee:f3:c5:78:dc:a5:9c:23:44:a6: dd:be:88:72:5f:6a:dd:1c:ea:7a:c0:2d:b1:e8:d6: 33:b1:4c:2e:5d:2d:b7:bb:1a:98:82:80:25:a2:97: 41:d2:3e:e3:a4:ba:4e:da:21:3b:ef:d9:7f:f1:1f: 3e:de:84:44:8d:93:d1:a3:52:f1:0f:1a:a3:b4:0d: d2:e0:4b:1b:8d:69:fe:63:86:3b:03:3b:76:37:e8: 54:a7:f7:2d:73:03:f0:bc:42:6d:71:f4:2c:fa:f0: 92:51:7a:bd:e8:94:c6:06:fc:96:c8:e0:36:a5:0c: a2:98:69:0b:31:47:09:fe:07:89:d8:b0:35:e5:66: a0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:79:97:1E:55:1D:27:54:32:AD:ED:2D:38:AD:AC:34:BA:99:2B:B4 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7XmXHlUdJ1Qyre0tOK2sNLqZK7Q.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.29.0.0/17 Signature Algorithm: sha256WithRSAEncryption 38:c5:36:98:88:4d:52:07:5a:c8:69:57:6e:23:ed:e0:13:7b: 59:41:96:3f:54:b3:ea:a4:4b:6e:d9:11:ab:d5:66:fe:08:79: 0f:77:1b:d0:77:5e:f1:76:a0:5e:a4:59:dc:94:0b:f9:4e:09: 96:b6:60:cd:c1:dd:2f:63:5c:13:fd:94:d1:34:54:82:8c:e0: 7d:45:6b:73:e1:ee:da:67:ee:0a:fa:b9:81:ef:55:45:0d:a5: f7:dc:42:d5:9c:7f:70:71:f1:89:fa:8a:9a:99:9d:aa:05:20: d0:c8:c0:19:29:a1:eb:93:8e:a4:f3:71:18:13:3b:48:b1:7f: f1:76:79:69:ab:22:c2:0a:28:5a:a2:14:a3:8e:97:4c:80:4e: 44:cd:37:44:e8:09:07:41:73:58:60:96:ca:af:f9:da:ca:46: 36:91:54:64:df:db:1c:6a:62:bf:24:48:18:44:64:79:d2:60: 98:66:3d:39:5b:d0:f8:f5:cd:08:60:7a:77:3c:6f:d5:d8:0f: 6f:54:42:c3:9d:e7:07:85:e0:88:62:30:ea:f9:ce:c8:0f:60: 7b:3a:a6:0f:43:48:a9:ca:1a:c8:1c:04:ce:35:e6:45:99:ed: a9:26:17:19:6a:f6:35:15:63:11:82:ed:e1:bd:01:df:f0:7c: 87:e3:c9:24 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICQKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTEyMDUw MDE2MjlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVENzk5NzFFNTUxRDI3 NTQzMkFERUQyRDM4QURBQzM0QkE5OTJCQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8ZSWQJ6ZnL4GAyV09gkZX2FS8ykibV3gmfhNVAkhobmzPMjds OGM9fKRU2Ky9rKu4ujk1qNkJh3Aa9D92BKpXwuQMMOeDQyw6NLnk9oZnIXK6vwAE 40FTmikdEXd5jJFtgoQ33bfE/3AyqrAIR1hh3fO/Y1zRbzgf8Drl7vPFeNylnCNE pt2+iHJfat0c6nrALbHo1jOxTC5dLbe7GpiCgCWil0HSPuOkuk7aITvv2X/xHz7e hESNk9GjUvEPGqO0DdLgSxuNaf5jhjsDO3Y36FSn9y1zA/C8Qm1x9Cz68JJRer3o lMYG/JbI4DalDKKYaQsxRwn+B4nYsDXlZqAfAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU7XmXHlUdJ1Qyre0tOK2sNLqZK7QwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni83WG1YSGxVZEoxUXlyZTB0 T0syc05McVpLN1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH fB0AMA0GCSqGSIb3DQEBCwUAA4IBAQA4xTaYiE1SB1rIaVduI+3gE3tZQZY/VLPq pEtu2RGr1Wb+CHkPdxvQd17xdqBepFnclAv5TgmWtmDNwd0vY1wT/ZTRNFSCjOB9 RWtz4e7aZ+4K+rmB71VFDaX33ELVnH9wcfGJ+oqamZ2qBSDQyMAZKaHrk46k83EY EztIsX/xdnlpqyLCCihaohSjjpdMgE5EzTdE6AkHQXNYYJbKr/naykY2kVRk39sc amK/JEgYRGR50mCYZj05W9D49c0IYHp3PG/V2A9vVELDnecHheCIYjDq+c7ID2B7 OqYPQ0ipyhrIHATONeZFme2pJhcZavY1FWMRgu3hvQHf8HyH48kk -----END CERTIFICATE-----Generated at Fri Dec 5 01:45:32 2025 by rpki-client