This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1C-GjhSTBicxV_npxMnU6Kmx62M.roa File: 1C-GjhSTBicxV_npxMnU6Kmx62M.roa (raw, json) Hash identifier: czkLX1MJ7fOgkNi9EvLKBvYcTxaUf4kR0nUzVJ6/xLE= Subject key identifier: D4:2F:86:8E:14:93:06:27:31:57:F9:E9:C4:C9:D4:E8:A9:B1:EB:63 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 4F1A Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1C-GjhSTBicxV_npxMnU6Kmx62M.roa Signing time: Sat 04 May 2024 01:23:54 +0000 ROA not before: Sat 04 May 2024 01:23:54 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 20250 (0x4f1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 4 01:23:54 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=D42F868E149306273157F9E9C4C9D4E8A9B1EB63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1f:ab:6c:dd:55:69:14:92:a3:32:79:8d:80: 28:10:7f:16:c6:b2:78:3f:73:54:ca:ab:2e:99:69: 8c:a8:7e:e4:46:7c:24:1d:e0:52:4e:83:9c:84:f3: db:15:ca:2d:7a:89:0e:cd:0f:06:09:e9:f6:5b:4a: f1:fe:79:3f:f0:5f:6a:57:0d:17:50:41:76:69:cd: b6:7a:1f:07:fe:b1:0e:48:b5:f2:e3:e0:5e:41:c6: bd:67:e9:67:da:82:83:ad:ce:2c:ca:4b:c2:d0:28: 1e:f1:ef:75:94:4f:76:f4:8c:54:2d:be:9e:65:08: 1d:38:f2:f6:64:6a:c7:b6:ca:2c:78:58:8c:2f:00: a9:c3:3f:12:85:e8:0b:be:aa:1e:e3:6f:d8:63:e1: 49:2a:bd:a0:37:28:bb:9d:21:6e:30:93:3b:e3:d0: 92:26:f1:b9:ad:b2:43:bc:13:32:d3:4f:1e:2d:80: fb:85:4b:d3:aa:2d:55:e0:0b:8a:89:7b:66:d1:03: ea:1c:f3:dc:8c:1a:e8:a4:b5:cc:f5:0b:7d:ea:a2: ce:34:31:0f:9b:06:1a:09:33:41:7c:62:07:70:b9: 73:c4:d2:17:6a:91:48:3d:cf:c6:11:60:94:c2:5e: ed:c3:a4:2a:53:fb:6c:2a:e9:56:39:5d:ec:88:7e: 7a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2F:86:8E:14:93:06:27:31:57:F9:E9:C4:C9:D4:E8:A9:B1:EB:63 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1C-GjhSTBicxV_npxMnU6Kmx62M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1a:d9:32:44:95:e1:07:84:48:88:3f:4a:7d:45:54:f7:34:82: 99:15:4c:73:04:5e:0a:b3:6d:da:34:20:e9:98:27:20:18:27: fb:db:c5:25:3a:c2:c6:37:ad:c9:42:a4:a9:34:9d:a9:bf:ef: 55:af:c9:61:ea:3e:30:c9:ad:fa:0f:e0:7f:4a:be:96:ec:ae: 91:de:5a:19:47:ea:9c:9a:10:5e:d3:91:31:c2:60:8f:2a:74: 4a:25:93:b6:1c:b7:85:72:2e:6c:9a:95:0c:4d:a2:69:c0:f8: 6e:b3:a2:ec:54:ac:38:c5:a1:5d:04:01:62:ac:11:5f:5c:91: b4:9d:06:12:cd:c4:02:70:d9:e6:4b:83:7e:43:04:b9:a8:2f: 37:d5:05:a1:52:a1:30:2f:f5:f5:b1:e3:84:2d:9c:f5:ef:fb: 86:50:d5:aa:99:3b:78:25:3d:e5:3c:3f:59:df:f0:eb:1d:66: b9:17:42:69:7b:a2:f4:fb:06:d8:cb:4c:60:47:f6:46:1c:7b: 3c:f5:7f:78:81:2b:92:04:cb:15:0c:a4:02:fe:24:05:8f:e4: 61:36:86:20:06:db:c7:29:4e:d6:77:33:cd:c7:74:e2:7a:9f: 1b:56:67:1e:85:cd:53:15:f0:e3:d7:85:8c:4b:1a:e1:9c:e7: b3:21:12:f2 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICTxowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDQw MTIzNTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQ0MkY4NjhFMTQ5MzA2 MjczMTU3RjlFOUM0QzlENEU4QTlCMUVCNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiH6ts3VVpFJKjMnmNgCgQfxbGsng/c1TKqy6ZaYyofuRGfCQd 4FJOg5yE89sVyi16iQ7NDwYJ6fZbSvH+eT/wX2pXDRdQQXZpzbZ6Hwf+sQ5ItfLj 4F5Bxr1n6WfagoOtzizKS8LQKB7x73WUT3b0jFQtvp5lCB048vZkase2yix4WIwv AKnDPxKF6Au+qh7jb9hj4UkqvaA3KLudIW4wkzvj0JIm8bmtskO8EzLTTx4tgPuF S9OqLVXgC4qJe2bRA+oc89yMGuiktcz1C33qos40MQ+bBhoJM0F8YgdwuXPE0hdq kUg9z8YRYJTCXu3DpCpT+2wq6VY5XeyIfnpNAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU1C+GjhSTBicxV/npxMnU6Kmx62MwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzFDLUdqaFNUQmljeFZf bnB4TW5VNktteDYyTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAGtkyRJXhB4RIiD9KfUVU9zSCmRVMcwRe CrNt2jQg6ZgnIBgn+9vFJTrCxjetyUKkqTSdqb/vVa/JYeo+MMmt+g/gf0q+luyu kd5aGUfqnJoQXtORMcJgjyp0SiWTthy3hXIubJqVDE2iacD4brOi7FSsOMWhXQQB YqwRX1yRtJ0GEs3EAnDZ5kuDfkMEuagvN9UFoVKhMC/19bHjhC2c9e/7hlDVqpk7 eCU95Tw/Wd/w6x1muRdCaXui9PsG2MtMYEf2Rhx7PPV/eIErkgTLFQykAv4kBY/k YTaGIAbbxylO1nczzcd04nqfG1ZnHoXNUxXw49eFjEsa4ZznsyES8g== -----END CERTIFICATE-----Generated at Mon Dec 22 16:00:56 2025 by rpki-client