This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6ap8otiFheJzzeOPo8of6fvoS7g.roa File: 6ap8otiFheJzzeOPo8of6fvoS7g.roa (raw, json) Hash identifier: gKdv2R6lRrAuQRoyWAEOnc/fsgEIrrWIQ3hapBjbEbw= Subject key identifier: E9:AA:7C:A2:D8:85:85:E2:73:CD:E3:8F:A3:CA:1F:E9:FB:E8:4B:B8 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 444A Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6ap8otiFheJzzeOPo8of6fvoS7g.roa Signing time: Fri 19 Apr 2024 15:23:01 +0000 ROA not before: Fri 19 Apr 2024 15:23:01 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 17482 (0x444a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 19 15:23:01 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=E9AA7CA2D88585E273CDE38FA3CA1FE9FBE84BB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:fb:09:bd:0a:61:6d:84:16:65:45:f0:fd: 9e:c4:b1:9d:8f:bd:ea:e2:3f:d1:f9:10:70:ac:0c: 3a:3f:a9:7d:26:5f:6e:b8:56:8f:fc:d1:8e:16:f9: 4f:7a:18:7a:b0:47:e2:60:77:98:75:3b:8d:85:99: 94:6f:90:eb:f2:2c:cd:76:5b:d7:0f:b4:55:24:fd: 1f:6f:20:ea:f9:f2:28:91:72:c0:b8:c1:b3:a5:e9: 48:a1:20:56:43:0c:20:e8:c2:5c:cf:13:ca:46:31: f2:5e:79:d3:a1:30:5c:ab:14:9e:59:72:b9:ff:8b: 19:64:2b:0c:45:39:00:08:22:44:ac:65:3e:4e:19: 9a:9e:e3:37:86:70:9f:99:55:57:48:38:8c:0d:58: 14:3a:a5:5e:32:c6:98:cb:eb:91:03:29:b2:c8:a6: dc:84:6e:41:73:50:39:de:c5:ba:39:d5:71:91:94: cd:50:ed:7d:da:94:e1:d4:8d:32:83:d3:7e:11:2f: 99:8b:50:00:eb:36:52:81:fb:99:c1:ca:b5:8e:e0: db:48:b5:a2:ab:55:8d:51:7e:6a:cc:3f:79:f1:61: fd:f8:87:68:4c:b0:27:e3:f9:d7:a7:07:5f:84:98: c7:ec:35:9f:ff:1c:bf:20:d7:bb:01:60:e7:47:5a: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AA:7C:A2:D8:85:85:E2:73:CD:E3:8F:A3:CA:1F:E9:FB:E8:4B:B8 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6ap8otiFheJzzeOPo8of6fvoS7g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption 78:57:5e:0b:62:70:f0:a2:69:4f:0c:63:38:85:63:6b:b5:c6: ea:b7:0c:fb:f3:a4:5b:cb:09:e2:fb:b9:41:b2:15:b3:64:37: 9a:4e:d9:5b:a1:5f:fc:92:3a:81:a7:41:c3:a9:04:2d:1f:75: 8c:57:eb:27:73:23:36:ea:dc:22:d8:21:cf:48:d0:d4:3d:c8: 4b:64:ac:eb:d8:f3:f6:1c:a4:1b:85:56:0a:23:6f:54:3c:96: 8e:51:ee:48:02:2b:45:f8:48:ff:e9:31:c1:3e:89:e4:ea:3c: 6a:90:53:4b:17:32:31:33:3f:57:21:2f:d4:91:6a:23:5c:70: ba:41:8d:93:80:ad:b7:d3:5a:eb:1c:29:8c:26:32:cd:c1:23: 13:c2:77:f6:80:c1:04:d3:91:e7:b1:0a:91:fe:3b:b9:54:f6: c8:d6:92:4d:81:03:47:7a:92:d6:71:eb:39:1e:58:aa:ea:c7: 3b:ec:c3:37:54:a4:9d:c4:4a:16:3f:88:ed:76:c2:18:90:23: 9f:f9:80:77:fe:18:5b:b9:b4:61:0e:6b:d9:08:2d:2c:81:db: 63:91:2c:f1:0a:00:1c:42:cb:e7:65:2b:64:59:1d:71:39:ef: b1:7b:20:39:b2:6e:8a:e7:11:fd:47:b2:c3:99:90:ca:d2:43: f9:36:aa:a0 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICREowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTkx NTIzMDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU5QUE3Q0EyRDg4NTg1 RTI3M0NERTM4RkEzQ0ExRkU5RkJFODRCQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzAPsJvQphbYQWZUXw/Z7EsZ2PveriP9H5EHCsDDo/qX0mX264 Vo/80Y4W+U96GHqwR+Jgd5h1O42FmZRvkOvyLM12W9cPtFUk/R9vIOr58iiRcsC4 wbOl6UihIFZDDCDowlzPE8pGMfJeedOhMFyrFJ5Zcrn/ixlkKwxFOQAIIkSsZT5O GZqe4zeGcJ+ZVVdIOIwNWBQ6pV4yxpjL65EDKbLIptyEbkFzUDnexbo51XGRlM1Q 7X3alOHUjTKD034RL5mLUADrNlKB+5nByrWO4NtItaKrVY1RfmrMP3nxYf34h2hM sCfj+denB1+EmMfsNZ//HL8g17sBYOdHWvnVAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU6ap8otiFheJzzeOPo8of6fvoS7gwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzZhcDhvdGlGaGVKenpl T1BvOG9mNmZ2b1M3Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAeFdeC2Jw8KJpTwxjOIVja7XG6rcM+/Ok W8sJ4vu5QbIVs2Q3mk7ZW6Ff/JI6gadBw6kELR91jFfrJ3MjNurcItghz0jQ1D3I S2Ss69jz9hykG4VWCiNvVDyWjlHuSAIrRfhI/+kxwT6J5Oo8apBTSxcyMTM/VyEv 1JFqI1xwukGNk4Ctt9Na6xwpjCYyzcEjE8J39oDBBNOR57EKkf47uVT2yNaSTYED R3qS1nHrOR5YqurHO+zDN1SkncRKFj+I7XbCGJAjn/mAd/4YW7m0YQ5r2QgtLIHb Y5Es8QoAHELL52UrZFkdcTnvsXsgObJuiucR/Ueyw5mQytJD+TaqoA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:05:35 2025 by rpki-client