This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/acorVBVG2qdLINAMixU2vOs3CQs.roa
File: acorVBVG2qdLINAMixU2vOs3CQs.roa (raw, json)
Hash identifier: yfZLYDw/CXR3S2PNxGLmVSR1IVsZ78BlFAJF7Wv7MGU=
Subject key identifier: 69:CA:2B:54:15:46:DA:A7:4B:20:D0:0C:8B:15:36:BC:EB:37:09:0B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4ADB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/acorVBVG2qdLINAMixU2vOs3CQs.roa
Signing time: Sun 28 Apr 2024 09:23:41 +0000
ROA not before: Sun 28 Apr 2024 09:23:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19163 (0x4adb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 09:23:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=69CA2B541546DAA74B20D00C8B1536BCEB37090B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:97:77:d7:cd:54:ed:3d:54:cb:1c:47:c2:
4e:f9:fa:88:19:9e:37:fe:d8:47:f4:ce:61:ce:fb:
12:05:e3:f7:e9:d2:b7:90:89:08:b9:9e:d6:18:e1:
20:92:d7:33:43:18:49:3f:45:80:b7:ba:1b:70:c7:
87:aa:be:4b:74:f5:d4:1e:42:33:9e:27:ec:bb:72:
6b:9c:4f:c9:99:92:53:c3:48:c4:20:43:9a:84:a6:
bd:2c:d2:1d:75:97:8a:cf:0b:b9:ad:2c:81:ae:89:
c3:76:e7:4b:1c:31:6b:ab:4f:6f:cb:ec:79:36:da:
26:1c:4c:46:af:cd:84:e5:e9:22:bc:7a:6d:65:92:
2c:6f:08:03:56:fe:90:91:59:6a:14:db:70:a4:c6:
cf:b3:06:30:d0:74:0e:6e:bc:6e:05:9b:09:3f:97:
b8:52:c4:59:38:f7:7b:5c:89:c7:17:89:a7:2d:c5:
19:78:5b:62:5b:ad:ce:1e:49:8d:fd:80:c0:4a:e7:
95:14:a7:a7:9f:75:b7:a2:ca:0a:5d:ac:d7:1f:90:
4f:2b:48:4d:51:8a:72:be:a4:fa:82:77:44:03:55:
f2:b1:c4:c5:70:11:09:52:04:44:38:78:d0:a7:6f:
cc:c2:6e:00:c1:0b:ce:b9:8d:8c:a8:c6:b5:3e:5f:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CA:2B:54:15:46:DA:A7:4B:20:D0:0C:8B:15:36:BC:EB:37:09:0B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/acorVBVG2qdLINAMixU2vOs3CQs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2b:df:bb:d0:73:c2:d0:e2:0c:95:75:c8:a7:b2:1f:fb:3a:86:
5c:de:c8:8c:e8:38:58:04:dd:a9:46:8a:72:d7:5a:2e:37:0d:
4b:6c:fa:b0:b1:65:7a:9b:1d:26:b1:2f:fe:b4:9b:84:75:74:
b5:63:c6:92:78:ed:e9:8b:d9:43:0a:bb:11:70:e8:28:57:a0:
cc:7b:09:33:66:72:4b:ef:4a:8d:a6:a5:b1:84:87:59:31:f1:
3f:6a:66:6b:b3:97:4e:a0:8f:a6:18:e5:f3:0a:87:e6:c1:f7:
fd:30:39:f5:58:0a:f4:1a:87:0c:0c:3f:c9:9e:55:0c:27:03:
68:e9:25:13:be:b4:fa:ba:1b:9e:c7:12:af:62:62:54:a1:a6:
38:13:34:7f:da:22:23:dd:ac:6f:eb:52:c4:d4:2e:83:71:c5:
42:78:bf:7b:6c:a5:f4:48:46:0f:af:7f:44:b3:0a:25:74:3f:
9a:d3:9a:4b:17:7c:87:43:20:1a:d6:5d:f1:a0:6a:1b:37:ec:
ba:cf:46:97:6e:f7:0d:fc:e1:a6:fa:73:95:b4:b5:b9:d8:ba:
c7:9e:39:5c:59:6b:5c:7a:e6:0c:59:7b:67:1d:c2:cc:a7:af:
9b:c0:1f:b5:c9:87:4e:5f:76:d9:59:88:08:06:72:24:dc:ac:
1f:a8:7e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:25:25 2025 by rpki-client