This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DrjumKPp3gEvDEaBMwIl_INCS-o.roa File: DrjumKPp3gEvDEaBMwIl_INCS-o.roa (raw, json) Hash identifier: K9+4Qx2EteUSAgQzxeGL99RKdjgv9A1dPo8syFr+akY= Subject key identifier: 0E:B8:EE:98:A3:E9:DE:01:2F:0C:46:81:33:02:25:FC:83:42:4B:EA Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 4516 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DrjumKPp3gEvDEaBMwIl_INCS-o.roa Signing time: Sat 20 Apr 2024 16:53:13 +0000 ROA not before: Sat 20 Apr 2024 16:53:13 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 17686 (0x4516) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 20 16:53:13 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=0EB8EE98A3E9DE012F0C4681330225FC83424BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:a2:72:72:0c:65:41:62:b1:58:66:89:31: 02:52:35:08:31:49:01:1e:fb:01:f3:08:eb:e9:62: 45:c0:b6:0b:69:06:18:c7:c2:8e:78:96:58:c5:9f: ec:e0:1d:53:4d:b3:06:79:e4:e1:86:78:77:97:fb: cf:47:1b:8e:75:05:5d:5d:a1:47:fd:ed:51:2c:87: 34:24:2c:2a:c7:9b:27:b6:34:2b:7f:ae:59:d9:42: bb:12:10:b9:44:a6:09:28:e6:81:0e:5d:f1:8e:92: 4b:84:07:a4:09:62:1c:ed:b3:dc:e6:91:9b:9c:fb: 61:de:0a:62:31:26:5b:9c:6a:02:72:2b:c7:6d:9e: 8a:a9:69:08:73:1d:17:58:6d:4b:f7:76:4b:e6:13: 34:56:b6:aa:2f:67:6f:27:25:41:79:f9:5f:b3:0e: 34:de:15:2d:43:76:64:46:69:72:e1:2c:0b:92:10: 18:23:24:8c:2d:98:f7:1a:6f:17:85:56:75:8b:21: 95:85:6b:09:ba:a4:f3:75:e5:c4:fa:a6:78:fc:df: 7a:e5:96:52:f8:19:9e:77:65:14:23:4c:af:d1:90: 60:71:fe:c8:84:5f:9c:e3:07:a4:6e:39:12:8e:0f: 3a:b4:f3:de:a7:20:ef:28:d6:30:af:8a:34:63:78: 3d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B8:EE:98:A3:E9:DE:01:2F:0C:46:81:33:02:25:FC:83:42:4B:EA X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DrjumKPp3gEvDEaBMwIl_INCS-o.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1b:61:63:92:e5:92:d6:00:b5:f8:63:28:88:6b:22:a0:91:d2: 34:b9:74:70:b9:4e:38:fd:c4:a0:80:02:c6:9a:97:69:6b:4d: 66:e4:85:7d:ce:1c:57:de:f2:d0:08:bf:f7:77:3e:1a:45:43: 20:78:ad:be:ef:0a:a1:2c:97:73:97:35:1d:d6:67:92:43:14: 62:97:4b:a4:67:5a:3a:ea:73:3a:cd:08:9b:49:81:15:63:a1: b3:13:4b:12:18:c0:ab:92:61:bc:45:da:4b:59:06:68:34:64: ef:7b:38:1c:8d:28:51:84:1c:1e:4d:4b:03:f5:9d:a5:ea:08: 4d:ba:57:ae:69:d6:08:25:77:15:e3:e5:90:4c:b0:df:b4:5f: 7e:1a:11:63:69:0f:67:0a:b5:26:8d:c4:33:98:6f:08:2b:50: 01:72:06:2f:ba:28:d5:16:af:cb:ae:eb:07:06:6a:0d:8b:a0: c9:c8:27:81:eb:6c:d4:a5:09:7d:4c:be:30:51:e1:a7:46:4c: da:1b:b6:69:1f:dc:96:f4:ab:c8:65:a4:82:31:f8:91:cf:56: ca:fe:be:a8:96:65:79:46:5c:30:08:eb:c7:bc:be:fb:07:d2: 40:ad:99:7d:a1:14:85:72:4a:44:28:59:55:cf:2c:cd:e5:f1: c8:8c:2a:18 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICRRYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjAx NjUzMTNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDBFQjhFRTk4QTNFOURF MDEyRjBDNDY4MTMzMDIyNUZDODM0MjRCRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ86JycgxlQWKxWGaJMQJSNQgxSQEe+wHzCOvpYkXAtgtpBhjH wo54lljFn+zgHVNNswZ55OGGeHeX+89HG451BV1doUf97VEshzQkLCrHmye2NCt/ rlnZQrsSELlEpgko5oEOXfGOkkuEB6QJYhzts9zmkZuc+2HeCmIxJlucagJyK8dt noqpaQhzHRdYbUv3dkvmEzRWtqovZ28nJUF5+V+zDjTeFS1DdmRGaXLhLAuSEBgj JIwtmPcabxeFVnWLIZWFawm6pPN15cT6pnj833rlllL4GZ53ZRQjTK/RkGBx/siE X5zjB6RuORKODzq0896nIO8o1jCvijRjeD3HAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUDrjumKPp3gEvDEaBMwIl/INCS+owHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0RyanVtS1BwM2dFdkRF YUJNd0lsX0lOQ1Mtby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAG2FjkuWS1gC1+GMoiGsioJHSNLl0cLlO OP3EoIACxpqXaWtNZuSFfc4cV97y0Ai/93c+GkVDIHitvu8KoSyXc5c1HdZnkkMU YpdLpGdaOupzOs0Im0mBFWOhsxNLEhjAq5JhvEXaS1kGaDRk73s4HI0oUYQcHk1L A/WdpeoITbpXrmnWCCV3FePlkEyw37RffhoRY2kPZwq1Jo3EM5hvCCtQAXIGL7oo 1Ravy67rBwZqDYugycgngets1KUJfUy+MFHhp0ZM2hu2aR/clvSryGWkgjH4kc9W yv6+qJZleUZcMAjrx7y++wfSQK2ZfaEUhXJKRChZVc8szeXxyIwqGA== -----END CERTIFICATE-----Generated at Mon Dec 22 23:35:14 2025 by rpki-client