This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1cNw5zQAY4O8N4S5uUS-3NssaPc.roa File: 1cNw5zQAY4O8N4S5uUS-3NssaPc.roa (raw, json) Hash identifier: +fe+BDf8g6URhK0U36cE+sFZJwyhOE+JJN/HoZxe8/c= Subject key identifier: D5:C3:70:E7:34:00:63:83:BC:37:84:B9:B9:44:BE:DC:DB:2C:68:F7 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 3346 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1cNw5zQAY4O8N4S5uUS-3NssaPc.roa Signing time: Wed 27 Mar 2024 22:52:01 +0000 ROA not before: Wed 27 Mar 2024 22:52:01 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 13126 (0x3346) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Mar 27 22:52:01 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=D5C370E734006383BC3784B9B944BEDCDB2C68F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5a:bb:bb:24:7a:43:2d:d6:88:82:1a:6a:61: f7:d6:74:49:b5:b6:63:28:ef:03:b9:68:b2:04:f1: d4:b9:aa:2b:58:cd:02:e8:a8:b1:79:98:08:b5:1f: 38:4a:29:87:b0:b0:41:98:8f:22:81:16:2f:be:05: 74:e9:7c:76:5b:bf:ee:50:75:7c:d8:99:bc:46:da: 74:c2:3e:69:c2:f0:6d:51:02:2d:bb:68:18:c2:e4: 56:ac:46:51:da:de:7a:16:d2:8a:1d:34:91:57:b0: 82:9d:5e:4d:55:41:bb:4e:fe:bd:e0:91:e9:ee:d3: 23:4e:60:8d:ac:7d:96:92:86:3b:fb:be:d3:d8:cb: 67:36:4f:fa:aa:a2:df:cf:6d:58:e0:79:cc:e8:e7: 9d:29:b7:69:be:c9:3a:70:f5:9c:ab:10:3b:f5:d7: 7b:90:2a:77:42:fc:33:75:6d:de:8e:a1:5c:b6:0b: 24:d3:3c:5c:10:ae:d7:3f:5f:7b:fe:6b:9c:6d:b7: 5b:71:18:97:70:c7:bd:2b:7a:9b:10:54:77:f9:dd: e0:4a:fc:0e:0a:a4:15:4b:ed:7b:ef:22:c9:aa:db: b5:79:f9:a4:74:69:9c:4f:4e:f0:96:a2:5b:bb:f3: f4:2d:19:b4:8e:d2:b0:7f:59:2e:50:a2:ae:ee:e7: f9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C3:70:E7:34:00:63:83:BC:37:84:B9:B9:44:BE:DC:DB:2C:68:F7 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1cNw5zQAY4O8N4S5uUS-3NssaPc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption 27:c2:f9:89:b0:39:14:27:ec:18:0e:43:53:00:9f:4c:2f:36: 5f:4b:1c:c3:6e:10:16:e1:37:3b:26:1d:c9:d8:48:18:69:78: 8d:e8:b9:aa:c4:75:87:d4:88:8d:65:e6:fe:f6:ef:e8:06:99: bd:52:4d:20:59:b4:0e:9d:11:92:bc:6a:36:d8:92:b9:62:eb: 60:e9:20:36:e1:8a:f6:e6:59:49:46:03:48:8c:3c:10:1b:08: bd:8b:96:2b:2c:9f:1e:fe:cc:18:b2:be:a6:da:6a:32:9d:4e: 8f:8e:a5:f2:67:17:a1:ba:49:88:a4:d7:7e:11:fc:3b:91:0b: 28:49:e0:75:bf:d2:d3:20:a7:af:35:53:2d:ed:3c:a2:53:08: c0:18:0b:e0:d6:01:26:ab:48:84:4a:23:ad:0c:d0:ea:fe:3d: 75:b3:d0:cc:97:5d:42:40:39:21:33:05:1e:19:82:ff:c2:65: 11:f6:e8:56:85:45:15:cd:ae:7f:8b:b8:cf:0e:bd:08:82:31: 6d:ef:70:ce:81:76:3c:9d:b0:74:e1:d9:34:80:70:24:59:fa: 7a:f9:1f:7c:5b:28:ac:e5:9c:1e:9d:1f:84:d6:4c:85:68:28: 97:be:bc:e4:2f:c9:4b:d2:71:4e:4f:ec:0d:53:82:6b:f9:52: 49:95:b0:14 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICM0YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjcy MjUyMDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQ1QzM3MEU3MzQwMDYz ODNCQzM3ODRCOUI5NDRCRURDREIyQzY4RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzWru7JHpDLdaIghpqYffWdEm1tmMo7wO5aLIE8dS5qitYzQLo qLF5mAi1HzhKKYewsEGYjyKBFi++BXTpfHZbv+5QdXzYmbxG2nTCPmnC8G1RAi27 aBjC5FasRlHa3noW0oodNJFXsIKdXk1VQbtO/r3gkenu0yNOYI2sfZaShjv7vtPY y2c2T/qqot/PbVjgeczo550pt2m+yTpw9ZyrEDv113uQKndC/DN1bd6OoVy2CyTT PFwQrtc/X3v+a5xtt1txGJdwx70repsQVHf53eBK/A4KpBVL7XvvIsmq27V5+aR0 aZxPTvCWolu78/QtGbSO0rB/WS5Qoq7u5/mvAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU1cNw5zQAY4O8N4S5uUS+3NssaPcwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzFjTnc1elFBWTRPOE40 UzV1VVMtM05zc2FQYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAJ8L5ibA5FCfsGA5DUwCfTC82X0scw24Q FuE3OyYdydhIGGl4jei5qsR1h9SIjWXm/vbv6AaZvVJNIFm0Dp0RkrxqNtiSuWLr YOkgNuGK9uZZSUYDSIw8EBsIvYuWKyyfHv7MGLK+ptpqMp1Oj46l8mcXobpJiKTX fhH8O5ELKEngdb/S0yCnrzVTLe08olMIwBgL4NYBJqtIhEojrQzQ6v49dbPQzJdd QkA5ITMFHhmC/8JlEfboVoVFFc2uf4u4zw69CIIxbe9wzoF2PJ2wdOHZNIBwJFn6 evkffFsorOWcHp0fhNZMhWgol7685C/JS9JxTk/sDVOCa/lSSZWwFA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:51:06 2025 by rpki-client