This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/qwNQE67j__6Ywf72-cQSofDOAzI.roa File: qwNQE67j__6Ywf72-cQSofDOAzI.roa (raw, json) Hash identifier: MO+0wqRESmXjBinacQqCcrL+oIhRSWVD5PmNQhfUqgI= Subject key identifier: AB:03:50:13:AE:E3:FF:FE:98:C1:FE:F6:F9:C4:12:A1:F0:CE:03:32 Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Certificate serial: 05A4 Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qwNQE67j__6Ywf72-cQSofDOAzI.roa Signing time: Wed 14 May 2025 14:38:07 +0000 ROA not before: Wed 14 May 2025 14:38:07 +0000 ROA not after: Thu 09 Apr 2026 06:33:21 +0000 asID: 9391 IP address blocks: 125.169.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 1444 (0x5a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942 Validity Not Before: May 14 14:38:07 2025 GMT Not After : Apr 9 06:33:21 2026 GMT Subject: CN=AB035013AEE3FFFE98C1FEF6F9C412A1F0CE0332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:87:88:40:de:ff:d9:59:97:6e:bb:72:52:3e: 78:c8:19:93:32:2c:3b:1a:96:c6:60:e4:5b:b2:77: b9:e9:9e:f4:05:ac:88:9e:46:ec:1f:d7:91:b5:0b: 84:fd:3d:4b:b2:37:f8:ad:06:9c:87:7b:c6:d5:4a: 4e:4b:f2:6f:74:a0:75:52:32:fc:6b:94:3e:8a:76: b2:4b:7a:6b:fd:82:55:db:bb:46:e9:de:e9:38:62: 19:25:e5:15:3b:87:30:7b:c4:58:a9:a6:fb:20:f2: a3:ca:ea:48:64:b4:b6:7e:87:98:14:10:0d:4b:61: 9a:f0:dd:4a:7e:6c:66:b5:b8:23:41:57:fe:14:1d: 8b:9d:ec:d6:f6:d1:f2:93:b0:d7:e5:61:98:87:20: 3a:3a:f1:d2:7e:a4:ca:02:b3:55:cc:a0:2e:ed:bc: ff:86:ea:e6:68:6f:a9:a0:b1:66:c9:41:d7:a7:65: 0b:f0:4c:26:75:b3:69:03:0f:de:c4:3b:7e:23:21: 40:d1:0c:84:7e:8d:ce:86:f4:4a:c4:5d:68:be:0a: 3b:1d:b1:e0:43:da:4c:2d:73:d8:89:27:9a:1b:b5: f3:77:17:39:6d:5a:ba:53:87:06:e5:ce:ee:6b:a6: a9:e0:80:fc:95:05:a6:d7:ac:b0:4c:01:82:d0:2f: 51:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:03:50:13:AE:E3:FF:FE:98:C1:FE:F6:F9:C4:12:A1:F0:CE:03:32 X509v3 Authority Key Identifier: keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qwNQE67j__6Ywf72-cQSofDOAzI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 125.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption a9:64:c4:9b:be:eb:68:37:71:4d:15:f9:e6:85:cb:07:d6:af: a3:0a:16:2f:82:65:51:d5:e7:ff:ad:dd:83:35:99:66:32:ce: 00:27:91:24:aa:dd:63:5f:87:7b:12:63:3b:3c:72:d7:fb:7c: 36:d4:10:bd:e4:cd:81:5c:65:64:60:42:60:12:d0:2b:4f:8e: d5:9c:53:0d:47:e2:0a:c1:1b:48:b1:64:31:05:cd:1d:36:de: 5c:9b:f5:a2:28:e8:c1:a6:6a:6e:26:98:7d:80:30:bb:b6:f2: 07:1e:ce:61:0b:d2:9e:57:6d:94:c2:cd:69:12:45:83:c9:cf: e3:17:c2:53:31:a1:a4:98:bd:bd:79:37:48:d0:3e:d7:ec:12: fc:86:1d:36:56:c7:17:27:57:fa:79:69:e8:92:71:9e:ae:04: c5:95:ea:74:6b:62:df:78:94:1c:54:31:18:74:a9:d2:c0:37: 13:dc:66:a2:5a:0d:85:cd:8b:09:78:79:88:7b:90:93:a4:cc: 58:e2:9c:b7:4b:e1:18:ce:5d:d1:d4:a7:32:81:aa:61:e5:6f: c6:d7:2c:9d:0c:8c:0a:02:00:ee:8a:fc:22:24:02:dc:4d:ce: 53:6b:0a:f6:5c:03:04:47:af:72:33:aa:50:be:54:73:ec:05: ec:89:ec:e6 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTQx NDM4MDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEFCMDM1MDEzQUVFM0ZG RkU5OEMxRkVGNkY5QzQxMkExRjBDRTAzMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChh4hA3v/ZWZduu3JSPnjIGZMyLDsalsZg5Fuyd7npnvQFrIie Ruwf15G1C4T9PUuyN/itBpyHe8bVSk5L8m90oHVSMvxrlD6KdrJLemv9glXbu0bp 3uk4Yhkl5RU7hzB7xFippvsg8qPK6khktLZ+h5gUEA1LYZrw3Up+bGa1uCNBV/4U HYud7Nb20fKTsNflYZiHIDo68dJ+pMoCs1XMoC7tvP+G6uZob6mgsWbJQdenZQvw TCZ1s2kDD97EO34jIUDRDIR+jc6G9ErEXWi+CjsdseBD2kwtc9iJJ5obtfN3Fzlt WrpThwblzu5rpqnggPyVBabXrLBMAYLQL1F1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUqwNQE67j//6Ywf72+cQSofDOAzIwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9xd05RRTY3al9fNll3Zjcy LWNRU29mRE9Bekkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA fakwDQYJKoZIhvcNAQELBQADggEBAKlkxJu+62g3cU0V+eaFywfWr6MKFi+CZVHV 5/+t3YM1mWYyzgAnkSSq3WNfh3sSYzs8ctf7fDbUEL3kzYFcZWRgQmAS0CtPjtWc Uw1H4grBG0ixZDEFzR023lyb9aIo6MGmam4mmH2AMLu28gcezmEL0p5XbZTCzWkS RYPJz+MXwlMxoaSYvb15N0jQPtfsEvyGHTZWxxcnV/p5aeiScZ6uBMWV6nRrYt94 lBxUMRh0qdLANxPcZqJaDYXNiwl4eYh7kJOkzFjinLdL4RjOXdHUpzKBqmHlb8bX LJ0MjAoCAO6K/CIkAtxNzlNrCvZcAwRHr3IzqlC+VHPsBeyJ7OY= -----END CERTIFICATE-----Generated at Sat Dec 20 23:09:28 2025 by rpki-client