This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WXcx2xkcFqoNpB0396t_ntSjRYo.roa File: WXcx2xkcFqoNpB0396t_ntSjRYo.roa (raw, json) Hash identifier: nUlnH7kaMJaKOzj3xeDmX7jsDyCZ9Cpg3JkqGs5JYNE= Subject key identifier: 59:77:31:DB:19:1C:16:AA:0D:A4:1D:37:F7:AB:7F:9E:D4:A3:45:8A Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 4CBA Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WXcx2xkcFqoNpB0396t_ntSjRYo.roa Signing time: Tue 30 Apr 2024 21:23:50 +0000 ROA not before: Tue 30 Apr 2024 21:23:50 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 19642 (0x4cba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 30 21:23:50 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=597731DB191C16AA0DA41D37F7AB7F9ED4A3458A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:50:c0:af:ab:ba:87:54:92:5e:99:b2:13:29: 4f:5b:c2:bb:c0:51:38:7b:56:a5:e5:05:7a:b2:61: e5:b4:cb:dc:4b:c3:9e:b0:22:51:fa:ba:57:e5:20: 31:f5:b4:42:a0:fa:f9:28:07:77:09:4f:bd:ae:12: 25:55:43:63:6b:26:14:c7:6c:91:dd:13:d5:db:65: 1a:d9:2a:66:54:98:61:2c:bb:b4:c8:c5:2e:af:63: 2f:e7:98:7a:b9:bf:ee:0a:41:b0:75:11:55:d1:ee: 31:dc:16:a9:d8:a2:f5:78:f4:29:94:31:b8:75:92: df:3c:ef:5c:94:b7:b8:ea:83:df:0d:c1:48:a4:81: 4a:45:fe:92:75:14:c1:66:b6:2a:17:14:16:4e:af: 5e:c6:c1:ac:e8:53:46:42:6e:4d:bc:1f:64:98:7e: be:72:0b:af:fa:59:7b:58:91:fc:3e:b0:ba:54:02: fd:0a:4f:34:96:4f:fb:c3:af:7e:32:b4:63:61:93: 6f:21:88:7d:24:fd:42:c9:24:57:35:cf:be:b2:48: ed:6c:7c:34:ff:bb:1c:93:77:d7:91:57:9d:93:32: d9:c0:6b:03:17:e5:be:b9:58:6e:cb:1f:0d:f9:d8: c4:28:b5:68:1c:99:3e:74:47:d8:a7:ed:62:de:1a: 7e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:77:31:DB:19:1C:16:AA:0D:A4:1D:37:F7:AB:7F:9E:D4:A3:45:8A X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WXcx2xkcFqoNpB0396t_ntSjRYo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption 39:f0:d7:73:fd:23:b3:1f:80:cd:b7:aa:a0:c9:5a:1a:42:fc: 4c:76:72:5f:3d:94:e1:ed:5e:3b:08:93:a5:84:b6:9c:24:d0: b0:4b:bf:d2:5f:35:50:18:ec:3e:e1:fd:fc:11:9d:f5:a9:62: 26:4d:fc:26:97:7a:56:b9:c5:b2:a2:69:1e:86:d5:d4:06:a8: bd:66:c6:a7:15:03:00:eb:11:86:b8:3b:17:33:a2:92:5d:ae: 5d:49:8f:4c:6f:25:18:ed:88:3f:64:20:03:e8:b7:14:e9:dd: 32:2d:0d:ad:7f:a5:8a:35:2b:71:30:e5:59:50:a7:0f:33:8e: 45:f2:5e:ee:65:4a:c7:fd:d3:72:28:5f:d1:49:cf:dc:22:31: 9d:a3:50:c2:ca:1e:e0:10:53:84:6f:4e:42:24:5b:34:0c:1a: ee:5f:4a:5e:49:59:54:90:c9:01:9c:d3:9e:06:6f:e5:7e:a5: f1:ce:ec:6c:b0:6c:e8:0d:41:a5:bf:6c:12:96:40:2c:13:fe: 4a:8d:84:c0:24:9d:c9:a6:1f:36:dd:19:cf:73:82:a1:81:c0: ff:55:e0:c0:ab:68:a4:0f:85:25:66:09:c0:1b:29:73:3f:5f: 5e:d1:72:77:c2:fe:3c:30:be:73:15:31:3a:d9:1f:75:b2:83: 19:cb:32:5c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICTLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MzAy MTIzNTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDU5NzczMURCMTkxQzE2 QUEwREE0MUQzN0Y3QUI3RjlFRDRBMzQ1OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5UMCvq7qHVJJembITKU9bwrvAUTh7VqXlBXqyYeW0y9xLw56w IlH6ulflIDH1tEKg+vkoB3cJT72uEiVVQ2NrJhTHbJHdE9XbZRrZKmZUmGEsu7TI xS6vYy/nmHq5v+4KQbB1EVXR7jHcFqnYovV49CmUMbh1kt8871yUt7jqg98NwUik gUpF/pJ1FMFmtioXFBZOr17GwazoU0ZCbk28H2SYfr5yC6/6WXtYkfw+sLpUAv0K TzSWT/vDr34ytGNhk28hiH0k/ULJJFc1z76ySO1sfDT/uxyTd9eRV52TMtnAawMX 5b65WG7LHw352MQotWgcmT50R9in7WLeGn7rAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUWXcx2xkcFqoNpB0396t/ntSjRYowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1dYY3gyeGtjRnFvTnBC MDM5NnRfbnRTalJZby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAOfDXc/0jsx+AzbeqoMlaGkL8THZyXz2U 4e1eOwiTpYS2nCTQsEu/0l81UBjsPuH9/BGd9aliJk38Jpd6VrnFsqJpHobV1Aao vWbGpxUDAOsRhrg7FzOikl2uXUmPTG8lGO2IP2QgA+i3FOndMi0NrX+lijUrcTDl WVCnDzOORfJe7mVKx/3Tcihf0UnP3CIxnaNQwsoe4BBThG9OQiRbNAwa7l9KXklZ VJDJAZzTngZv5X6l8c7sbLBs6A1Bpb9sEpZALBP+So2EwCSdyaYfNt0Zz3OCoYHA /1XgwKtopA+FJWYJwBspcz9fXtFyd8L+PDC+cxUxOtkfdbKDGcsyXA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:06:44 2025 by rpki-client