This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ycyl47arRGkBalyzoV2U-cq-lyQ.roa
File: Ycyl47arRGkBalyzoV2U-cq-lyQ.roa (raw, json)
Hash identifier: T/oYSlqFj0lvV6mVcyuL1RKLKdM7rRN8Np7SauHIcS0=
Subject key identifier: 61:CC:A5:E3:B6:AB:44:69:01:6A:5C:B3:A1:5D:94:F9:CA:BE:97:24
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EB1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ycyl47arRGkBalyzoV2U-cq-lyQ.roa
Signing time: Fri 03 May 2024 12:23:44 +0000
ROA not before: Fri 03 May 2024 12:23:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20145 (0x4eb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 12:23:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=61CCA5E3B6AB4469016A5CB3A15D94F9CABE9724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:38:b1:2a:2b:c5:d5:5c:8c:17:1e:0c:0a:
c6:06:79:9b:9c:e8:3b:62:6f:83:84:63:4e:a1:67:
8f:49:b6:61:e6:8c:7d:00:50:c8:f0:08:fc:37:63:
b3:f6:39:20:1f:9c:c2:cb:da:a2:de:c6:2a:cb:8b:
68:14:e2:8c:34:54:b6:ca:a9:b4:62:cf:38:b4:4c:
a4:46:7f:8e:9a:28:26:40:ad:a5:11:1a:93:f6:d0:
71:3f:28:52:b9:d9:0b:17:93:3f:95:12:f8:e9:1c:
a9:f6:77:6f:78:b7:cf:d2:c8:6a:6d:19:1f:16:ea:
da:65:39:fa:7f:c7:37:d7:45:27:59:75:1a:a2:eb:
00:61:75:ef:5a:4c:2a:d8:5d:cb:2a:4d:96:02:84:
4f:03:8d:ff:f1:67:d8:a9:a1:a5:2b:01:31:d2:ba:
c1:f5:c2:3c:3a:61:43:81:c7:a0:3c:17:74:da:c5:
d9:9b:f9:e3:74:b5:d5:6e:e4:74:69:fe:1f:23:f2:
4f:e0:ab:f4:85:9f:78:81:38:b7:f5:b8:00:52:57:
47:dc:01:f3:b8:72:96:24:81:f9:d1:99:d0:97:bc:
57:83:37:63:7c:ef:dd:77:07:75:d4:b5:1a:88:38:
2f:18:c6:25:f4:7d:0d:61:f0:af:ae:91:21:70:41:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:A5:E3:B6:AB:44:69:01:6A:5C:B3:A1:5D:94:F9:CA:BE:97:24
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ycyl47arRGkBalyzoV2U-cq-lyQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
00:b9:5a:e7:1d:27:7e:76:58:1b:f3:af:53:61:87:f5:fd:23:
6f:4a:16:2e:18:db:1e:ca:22:e8:b6:f6:c5:fc:25:c8:47:91:
30:de:45:0e:2a:84:ba:f8:82:7a:da:a9:6e:44:18:44:25:e8:
e5:a8:88:d8:c3:b1:a7:e1:4a:85:73:20:e9:24:d5:0e:31:59:
a4:c1:b0:d9:d2:0d:d3:61:1e:08:a5:15:dd:2f:3a:8c:dc:08:
5c:9f:31:72:de:57:d0:fb:4c:d3:b7:17:1f:9a:ff:c3:ef:33:
64:e9:7f:25:70:78:fd:8a:9d:e1:35:6a:72:cc:e4:65:70:0c:
27:bf:1c:61:86:bd:cc:ca:2d:ee:ee:27:89:cd:4d:82:60:c4:
37:db:f5:0e:b6:b7:ea:8f:56:22:c9:d9:e2:9b:20:2d:01:b8:
52:7d:2c:3d:1c:c5:d1:23:0f:69:2b:a1:9a:42:fd:26:99:c4:
0d:7f:53:40:1d:f8:ad:01:2d:e3:89:a2:ef:2b:8a:30:2d:af:
38:f5:2c:0a:22:2b:db:92:b7:b0:16:c7:52:6d:cb:17:db:db:
31:f7:96:67:84:6e:4c:26:e8:a4:a3:36:ba:cd:5c:db:11:90:
82:c3:34:d0:fb:b6:82:90:10:c8:9e:55:b7:05:f3:b2:b1:2b:
6e:fb:8d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:31:54 2025 by rpki-client