This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-J7Ndx3tV5Nj9MMjalE8PXXQIYQ.roa File: -J7Ndx3tV5Nj9MMjalE8PXXQIYQ.roa (raw, json) Hash identifier: CvocODZkJJ2vTtvoEnMeH5bc3S9x/E52vXzu2zZDcfg= Subject key identifier: F8:9E:CD:77:1D:ED:57:93:63:F4:C3:23:6A:51:3C:3D:75:D0:21:84 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 3EF3 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-J7Ndx3tV5Nj9MMjalE8PXXQIYQ.roa Signing time: Fri 12 Apr 2024 12:22:49 +0000 ROA not before: Fri 12 Apr 2024 12:22:49 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 36.0.64.0/18 maxlen: 18 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 16115 (0x3ef3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 12 12:22:49 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=F89ECD771DED579363F4C3236A513C3D75D02184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:bd:55:20:d7:48:19:90:78:f9:d0:65:98: ed:42:9f:5e:4b:90:12:fb:20:a9:48:f9:4a:ee:73: a7:64:ac:4c:d3:ec:ea:c6:33:8f:88:3d:8a:6b:18: 41:7f:56:f4:a9:ae:6b:39:ae:8b:12:0d:7b:d5:7c: 1b:0f:3a:db:32:7e:86:18:99:50:4f:9b:1e:15:9c: 2b:6b:ca:1a:84:d3:5b:d9:68:e6:0e:b8:dc:a2:67: 3a:54:e6:91:79:f9:f3:69:ae:93:fa:55:25:49:21: 3a:6a:44:30:64:3d:88:7c:cd:a9:5f:f8:86:b0:04: 2f:a9:51:85:d8:8f:e9:a8:4f:03:85:43:6b:1c:37: 6a:b7:fc:fe:6d:14:a4:40:af:f1:4c:9b:7c:7d:c7: 78:07:88:ef:7e:65:77:5a:8b:99:b8:f5:d3:33:0e: 58:29:c8:21:9e:59:3b:1a:34:91:ac:e9:7f:1b:8a: b2:f0:fd:ff:cd:d9:2c:94:b4:c6:12:2b:f3:a3:ec: 7a:89:03:c4:51:8b:22:8a:81:a9:38:de:69:b6:08: fe:5f:5f:0a:90:d3:07:cd:ee:6a:60:73:2c:2e:20: e2:15:51:4f:3d:a1:48:10:eb:34:67:19:19:46:29: 53:f0:8a:59:89:1a:3c:ee:4f:ff:d5:e4:0c:ea:44: 6b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9E:CD:77:1D:ED:57:93:63:F4:C3:23:6A:51:3C:3D:75:D0:21:84 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-J7Ndx3tV5Nj9MMjalE8PXXQIYQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption 47:44:0b:44:90:ca:0a:69:5b:91:14:f4:e8:7c:fc:00:9f:ae: 4e:29:44:c6:0d:bc:94:06:21:93:e8:5c:06:f1:ee:34:dc:96: c7:1d:9c:18:88:c4:47:66:4b:6f:8d:c0:32:7c:a7:02:31:f7: ce:ac:d0:47:62:a6:12:fe:61:ff:e2:5d:61:8f:97:08:5c:c9: 01:cb:16:8e:9c:3f:6f:2a:b3:5f:15:82:71:df:a4:54:d2:b4: 83:c6:4b:54:a9:48:20:7f:1f:33:1c:69:67:b0:26:df:1d:55: ed:a2:8f:9d:d3:3a:33:15:55:53:e9:3d:32:cc:30:c2:aa:66: d4:c6:87:01:70:88:b6:b9:23:06:01:3e:e6:db:a4:57:95:af: 53:0d:b9:1d:18:ae:0d:ed:bf:ef:74:fb:59:46:ee:85:83:3e: 2c:2c:63:67:d5:e5:75:1b:d1:da:79:15:5d:e5:5d:e3:84:a1: 48:ec:8b:97:42:fd:1d:fe:1b:05:35:a8:93:f7:5b:1b:08:99: ec:7d:da:0e:30:46:d5:06:c6:b0:76:35:fb:60:ad:5f:57:d7: c6:59:46:3a:b7:8d:62:16:37:ea:9a:f8:fb:6c:e5:77:f0:9e: fe:52:86:12:5a:6a:84:71:a8:b3:2a:1a:3c:08:f8:42:56:e5: e7:92:16:ac -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICPvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTIx MjIyNDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEY4OUVDRDc3MURFRDU3 OTM2M0Y0QzMyMzZBNTEzQzNENzVEMDIxODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBrb1VINdIGZB4+dBlmO1Cn15LkBL7IKlI+Uruc6dkrEzT7OrG M4+IPYprGEF/VvSprms5rosSDXvVfBsPOtsyfoYYmVBPmx4VnCtryhqE01vZaOYO uNyiZzpU5pF5+fNprpP6VSVJITpqRDBkPYh8zalf+IawBC+pUYXYj+moTwOFQ2sc N2q3/P5tFKRAr/FMm3x9x3gHiO9+ZXdai5m49dMzDlgpyCGeWTsaNJGs6X8birLw /f/N2SyUtMYSK/Oj7HqJA8RRiyKKgak43mm2CP5fXwqQ0wfN7mpgcywuIOIVUU89 oUgQ6zRnGRlGKVPwilmJGjzuT//V5AzqRGshAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU+J7Ndx3tV5Nj9MMjalE8PXXQIYQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3Ly1KN05keDN0VjVOajlN TWphbEU4UFhYUUlZUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAEdEC0SQygppW5EU9Oh8/ACfrk4pRMYN vJQGIZPoXAbx7jTclscdnBiIxEdmS2+NwDJ8pwIx986s0EdiphL+Yf/iXWGPlwhc yQHLFo6cP28qs18VgnHfpFTStIPGS1SpSCB/HzMcaWewJt8dVe2ij53TOjMVVVPp PTLMMMKqZtTGhwFwiLa5IwYBPubbpFeVr1MNuR0Yrg3tv+90+1lG7oWDPiwsY2fV 5XUb0dp5FV3lXeOEoUjsi5dC/R3+GwU1qJP3WxsImex92g4wRtUGxrB2NftgrV9X 18ZZRjq3jWIWN+qa+Pts5Xfwnv5ShhJaaoRxqLMqGjwI+EJW5eeSFqw= -----END CERTIFICATE-----Generated at Tue Dec 23 01:31:51 2025 by rpki-client