This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kr6MxURvdHj5HRgZEeUNCqLJB7U.roa File: kr6MxURvdHj5HRgZEeUNCqLJB7U.roa (raw, json) Hash identifier: IkEOzfNAI+38kG0+u/IqJ/ATTOItVsh0FnUmXhCzni4= Subject key identifier: 92:BE:8C:C5:44:6F:74:78:F9:1D:18:19:11:E5:0D:0A:A2:C9:07:B5 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 5651 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kr6MxURvdHj5HRgZEeUNCqLJB7U.roa Signing time: Mon 13 May 2024 16:24:07 +0000 ROA not before: Mon 13 May 2024 16:24:07 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.239.0.0/19 maxlen: 19 101.78.32.0/19 maxlen: 19 103.35.0.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 22097 (0x5651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 13 16:24:07 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=92BE8CC5446F7478F91D181911E50D0AA2C907B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:28:d3:8f:e9:d0:9a:d5:a7:25:af:67:85: 5a:9f:ed:4d:63:51:46:a8:8d:3e:70:30:2f:9b:33: ed:31:aa:59:10:1e:f1:db:6e:44:cb:35:b0:47:14: 00:e7:d4:40:73:7c:f9:5f:eb:52:a1:30:63:cd:d1: 33:55:fe:cb:bc:70:67:76:35:cb:f7:a3:0f:d8:7f: bb:8d:b8:81:2f:30:21:cb:37:a5:87:06:9b:02:d4: ae:49:9f:02:79:3b:83:71:90:e9:f4:5c:1b:45:71: 8d:64:15:66:ad:0c:03:ad:d3:ee:78:27:df:7a:d4: 53:e0:65:44:46:54:bc:65:76:22:c4:e7:ec:d2:95: 16:a9:22:05:89:d4:fa:88:f1:aa:17:4c:90:20:00: f8:53:e3:a2:11:f8:d6:8b:cf:a1:94:89:e9:1a:d1: 08:cd:0e:42:53:87:ff:3e:eb:4e:46:78:8b:b1:f3: 3c:91:6c:1f:ca:70:13:b4:bd:8f:77:4d:6e:00:ea: 57:13:8a:c5:3c:8e:af:4a:7f:fc:75:5e:a5:4e:61: 24:44:d3:85:e0:90:84:a2:5a:5b:f0:2e:fb:9b:9b: 67:b1:35:0f:99:61:06:e6:2d:cf:48:92:75:ea:fc: 11:34:55:76:fa:7f:90:15:68:63:d8:18:79:6d:25: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BE:8C:C5:44:6F:74:78:F9:1D:18:19:11:E5:0D:0A:A2:C9:07:B5 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kr6MxURvdHj5HRgZEeUNCqLJB7U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.0.0/19 101.78.32.0/19 103.35.0.0/19 Signature Algorithm: sha256WithRSAEncryption a2:4c:6f:91:2b:8a:94:97:08:06:84:85:1d:a7:e5:38:1d:87: 68:f0:85:4f:9d:2b:9d:36:4a:52:56:92:b1:aa:fe:a6:91:17: fc:73:c9:b6:29:fe:da:b6:96:aa:1f:4c:7b:44:80:c5:f2:f5: dd:63:ac:48:64:19:a2:1b:a9:a7:54:ca:ff:6d:39:eb:89:fb: 25:21:e1:fa:d7:73:2d:b3:7b:97:8e:b6:43:7b:fc:cd:d1:1f: 3f:84:6b:90:7a:a5:e3:7d:29:dd:8b:e2:54:40:05:ea:5f:37: ed:2d:e7:c5:2b:58:1e:65:c7:dd:d4:57:45:8a:12:da:9e:0e: e9:cd:bd:10:34:a9:52:49:a2:33:73:b9:01:3b:1d:fc:a3:a6: 97:a9:f8:d2:dd:14:e8:86:18:4f:fb:d4:bd:08:29:46:98:28: a8:b2:d7:ee:e0:6c:e3:b5:64:4d:49:f0:6d:f0:ac:ff:ba:4d: 98:e9:d8:b1:bf:01:0e:2b:ad:f7:cb:3d:d0:52:c3:d7:55:d5: 56:15:19:e5:e3:38:a5:1e:d3:9f:79:31:51:42:fa:80:64:78: e8:05:20:33:f4:b4:06:4e:51:17:50:40:62:b4:0d:c8:8c:55: b8:0a:cc:03:47:43:72:91:4b:48:20:6c:15:38:05:e1:8f:19: fa:2e:23:8d -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgICVlEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTMx NjI0MDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDkyQkU4Q0M1NDQ2Rjc0 NzhGOTFEMTgxOTExRTUwRDBBQTJDOTA3QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC64yjTj+nQmtWnJa9nhVqf7U1jUUaojT5wMC+bM+0xqlkQHvHb bkTLNbBHFADn1EBzfPlf61KhMGPN0TNV/su8cGd2Ncv3ow/Yf7uNuIEvMCHLN6WH BpsC1K5JnwJ5O4NxkOn0XBtFcY1kFWatDAOt0+54J9961FPgZURGVLxldiLE5+zS lRapIgWJ1PqI8aoXTJAgAPhT46IR+NaLz6GUieka0QjNDkJTh/8+605GeIux8zyR bB/KcBO0vY93TW4A6lcTisU8jq9Kf/x1XqVOYSRE04XgkISiWlvwLvubm2exNQ+Z YQbmLc9IknXq/BE0VXb6f5AVaGPYGHltJQVFAgMBAAGjggH9MIIB+TAdBgNVHQ4E FgQUkr6MxURvdHj5HRgZEeUNCqLJB7UwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2tyNk14VVJ2ZEhqNUhS Z1pFZVVOQ3FMSkI3VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAKJMb5EripSXCAaE hR2n5Tgdh2jwhU+dK502SlJWkrGq/qaRF/xzybYp/tq2lqofTHtEgMXy9d1jrEhk GaIbqadUyv9tOeuJ+yUh4frXcy2ze5eOtkN7/M3RHz+Ea5B6peN9Kd2L4lRABepf N+0t58UrWB5lx93UV0WKEtqeDunNvRA0qVJJojNzuQE7Hfyjppep+NLdFOiGGE/7 1L0IKUaYKKiy1+7gbOO1ZE1J8G3wrP+6TZjp2LG/AQ4rrffLPdBSw9dV1VYVGeXj OKUe0595MVFC+oBkeOgFIDP0tAZOURdQQGK0DciMVbgKzANHQ3KRS0ggbBU4BeGP GfouI40= -----END CERTIFICATE-----Generated at Mon Dec 22 16:19:33 2025 by rpki-client