This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-d4u7rQ_5-dFbfORhFdp1Aklau4.roa File: -d4u7rQ_5-dFbfORhFdp1Aklau4.roa (raw, json) Hash identifier: PiNPVwO67KUbFin9eT9rt71SD6Pd6zc5NzBKwbJ9dl4= Subject key identifier: F9:DE:2E:EE:B4:3F:E7:E7:45:6D:F3:91:84:57:69:D4:09:25:6A:EE Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 4D05 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-d4u7rQ_5-dFbfORhFdp1Aklau4.roa Signing time: Wed 01 May 2024 06:53:35 +0000 ROA not before: Wed 01 May 2024 06:53:35 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.239.0.0/19 maxlen: 19 101.78.32.0/19 maxlen: 19 103.35.0.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 19717 (0x4d05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 1 06:53:35 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=F9DE2EEEB43FE7E7456DF391845769D409256AEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cb:d0:76:76:98:44:1d:7a:97:e6:c4:ea:62: 33:91:f6:41:0b:c4:c8:39:20:db:f2:6a:c0:e0:34: fc:42:4d:4e:19:8e:fa:5b:10:d9:4e:af:7a:d1:3b: da:6e:81:07:59:75:47:5b:df:51:8c:29:76:cd:90: 39:29:06:79:3c:76:2d:2b:1b:d8:10:7c:7c:f1:83: a0:c6:22:1c:aa:30:ef:84:4a:18:41:96:d4:06:b3: 15:25:3d:95:8c:c9:ff:8c:e6:2d:80:e5:e5:34:d7: 36:2d:cf:12:09:ab:5c:0c:70:72:07:37:8a:a3:ab: c8:a8:cc:fb:18:c0:0a:f2:7a:e5:fc:c3:75:3c:b4: 74:29:ca:b8:dd:78:a2:68:72:ee:08:34:ad:2a:e9: e9:3c:ef:14:0d:e2:4b:c4:12:59:8a:a0:fc:75:7a: e7:84:d4:4f:1b:bf:09:d7:0f:2c:5c:68:da:48:fe: 56:04:d4:2c:22:ac:64:e0:f5:dc:27:1d:33:b9:b7: 36:ae:d9:f0:ee:f9:39:ae:a7:c2:50:84:f4:63:a2: 7a:a8:74:6e:b8:d9:f6:79:1f:a9:33:56:a4:29:8c: 53:e4:1d:07:93:15:54:67:3f:9a:08:a5:ec:73:0e: e9:0c:8d:dd:71:b0:5c:94:ec:55:82:ac:df:4d:60: 4c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DE:2E:EE:B4:3F:E7:E7:45:6D:F3:91:84:57:69:D4:09:25:6A:EE X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-d4u7rQ_5-dFbfORhFdp1Aklau4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.0.0/19 101.78.32.0/19 103.35.0.0/19 Signature Algorithm: sha256WithRSAEncryption a2:f4:07:e6:f4:c3:29:d0:93:6a:27:4f:46:bf:25:86:67:71: b5:7f:4d:b8:db:c5:ee:15:e6:69:ab:3c:45:40:dd:2a:b6:3a: 97:58:ed:2d:bf:81:f5:b0:c9:91:98:71:e3:b3:1e:3c:7a:4a: 70:7c:4d:ed:0a:0b:ce:46:77:6e:c0:8e:35:51:e0:99:d2:bf: 43:f9:d2:53:c8:14:58:93:0e:a9:21:58:c0:90:de:c1:fb:72: ae:6a:47:15:c1:91:ba:88:62:aa:7f:58:91:39:2d:e1:6e:53: 72:dc:3b:25:e1:72:ab:dd:98:ef:7b:e1:5e:10:d3:8f:fb:18: 0f:01:c8:91:8d:f3:1a:a5:3f:8f:0f:fc:0d:8e:c9:b5:91:c8: 36:e8:6e:84:9c:50:32:6e:36:42:56:44:b1:56:33:d0:d9:fa: 46:cd:95:cf:30:ae:d3:0a:cc:c2:68:84:e6:a9:89:c3:68:4b: 87:57:66:bd:43:50:ec:4e:a5:5c:28:5a:8e:c8:4d:25:b1:5b: a0:9a:cd:73:56:57:1a:e6:21:d5:42:ad:9e:69:d9:4e:78:44: f5:28:ca:3b:60:3e:e1:9d:07:0b:99:7a:ef:fa:e8:a0:1e:88: 0d:da:fd:59:2f:81:0d:38:20:55:bd:8b:40:f2:4b:f3:75:f0: cb:ed:6e:d2 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgICTQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDEw NjUzMzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEY5REUyRUVFQjQzRkU3 RTc0NTZERjM5MTg0NTc2OUQ0MDkyNTZBRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5y9B2dphEHXqX5sTqYjOR9kELxMg5INvyasDgNPxCTU4Zjvpb ENlOr3rRO9pugQdZdUdb31GMKXbNkDkpBnk8di0rG9gQfHzxg6DGIhyqMO+EShhB ltQGsxUlPZWMyf+M5i2A5eU01zYtzxIJq1wMcHIHN4qjq8iozPsYwAryeuX8w3U8 tHQpyrjdeKJocu4INK0q6ek87xQN4kvEElmKoPx1eueE1E8bvwnXDyxcaNpI/lYE 1CwirGTg9dwnHTO5tzau2fDu+Tmup8JQhPRjonqodG642fZ5H6kzVqQpjFPkHQeT FVRnP5oIpexzDukMjd1xsFyU7FWCrN9NYExbAgMBAAGjggH9MIIB+TAdBgNVHQ4E FgQU+d4u7rQ/5+dFbfORhFdp1Aklau4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3Ly1kNHU3clFfNS1kRmJm T1JoRmRwMUFrbGF1NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAKL0B+b0wynQk2on T0a/JYZncbV/Tbjbxe4V5mmrPEVA3Sq2OpdY7S2/gfWwyZGYceOzHjx6SnB8Te0K C85Gd27AjjVR4JnSv0P50lPIFFiTDqkhWMCQ3sH7cq5qRxXBkbqIYqp/WJE5LeFu U3LcOyXhcqvdmO974V4Q04/7GA8ByJGN8xqlP48P/A2OybWRyDboboScUDJuNkJW RLFWM9DZ+kbNlc8wrtMKzMJohOapicNoS4dXZr1DUOxOpVwoWo7ITSWxW6CazXNW VxrmIdVCrZ5p2U54RPUoyjtgPuGdBwuZeu/66KAeiA3a/VkvgQ04IFW9i0DyS/N1 8MvtbtI= -----END CERTIFICATE-----Generated at Mon Dec 22 12:52:07 2025 by rpki-client