This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vNRrlolDG9qf8dsDgehdxiZ4btg.roa
File: vNRrlolDG9qf8dsDgehdxiZ4btg.roa (raw, json)
Hash identifier: +/yNMlbaGUQhibfStqxCrh4x0z3pxcRvUYBOA7OPIKI=
Subject key identifier: BC:D4:6B:96:89:43:1B:DA:9F:F1:DB:03:81:E8:5D:C6:26:78:6E:D8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5319
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vNRrlolDG9qf8dsDgehdxiZ4btg.roa
Signing time: Thu 09 May 2024 09:24:01 +0000
ROA not before: Thu 09 May 2024 09:24:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21273 (0x5319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 09:24:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BCD46B9689431BDA9FF1DB0381E85DC626786ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:12:01:65:f8:25:4e:0f:2e:a2:05:af:cc:
1e:6a:f5:6d:b4:92:92:75:eb:25:22:ce:89:6e:1b:
91:cf:67:a3:d8:35:30:e3:19:46:d8:73:09:c4:1e:
74:d3:12:8d:97:41:f5:03:20:8d:9a:27:51:72:64:
cb:b5:a6:b2:44:6f:75:d3:24:1b:49:29:3e:ba:9b:
a5:01:bd:1f:d4:0d:3f:5c:29:3f:cc:4a:63:46:cc:
07:22:7e:c8:b0:c8:f0:72:3a:bc:e4:bc:dc:14:75:
bb:8d:a6:82:96:24:11:a1:8b:8b:bd:33:3b:77:e0:
0d:16:28:3e:b4:c1:12:43:b4:0c:b0:f1:68:41:04:
a0:d7:d9:0a:2b:34:58:56:69:27:26:94:d2:d7:07:
24:5c:fe:d1:e0:7d:c2:fd:a9:f8:05:95:5c:c5:d7:
70:47:9b:ba:46:24:87:b6:8f:87:16:8c:e5:0d:27:
3f:ea:da:b2:b5:32:1f:35:ee:12:21:5d:6d:02:26:
2c:4b:cf:bd:4c:b7:c5:b0:e7:29:a4:a1:31:f4:53:
7d:d2:a3:1e:26:b3:bc:f2:8e:b3:02:60:01:59:8d:
63:4a:d3:c1:15:e8:9e:b8:c4:9e:bd:b5:61:46:26:
bd:62:a2:c0:33:9d:7b:9a:1f:f8:80:14:44:43:c2:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D4:6B:96:89:43:1B:DA:9F:F1:DB:03:81:E8:5D:C6:26:78:6E:D8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vNRrlolDG9qf8dsDgehdxiZ4btg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:83:f1:09:49:8e:d7:87:4a:a9:fd:ea:e3:3f:fa:0e:b2:3e:
53:42:6d:04:f5:57:fa:69:23:cc:43:f4:e6:5a:80:fd:3f:74:
9a:02:e8:0b:89:40:af:27:b0:9a:85:04:14:75:86:89:bb:67:
c4:73:3d:37:b6:aa:bd:29:cc:e1:e2:bf:ac:17:3d:60:5c:49:
fe:c0:f3:77:4a:27:03:61:b8:f2:9a:95:7b:1a:51:ca:cf:bd:
cd:2c:ee:ab:4c:99:39:21:69:d1:7f:08:03:ec:0d:8a:28:6b:
b3:ec:42:cd:93:b1:9e:cd:9a:2b:16:48:7b:36:5c:64:89:1c:
d2:42:8c:fe:2c:96:aa:e9:4a:28:c6:5d:3f:9d:d6:c8:a7:35:
2a:d6:36:08:12:66:19:7f:f4:e9:1e:be:56:54:2a:e5:47:25:
a2:bf:6a:78:d6:8d:a5:48:2c:d4:3a:fd:b5:9e:ca:f9:5d:a9:
75:2f:5c:03:e8:37:13:61:3f:af:04:91:65:cf:e3:20:92:5b:
a4:0b:e6:fb:62:ff:8f:9a:59:af:b5:83:e3:34:2f:e4:e6:aa:
17:ed:a0:e4:42:e2:a0:f8:1f:b8:46:3f:39:7b:07:56:f5:d7:
26:02:54:2f:18:10:62:09:b5:47:6d:af:65:40:45:7a:71:0c:
bd:ee:d9:24
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICUxkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDkw
OTI0MDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJDRDQ2Qjk2ODk0MzFC
REE5RkYxREIwMzgxRTg1REM2MjY3ODZFRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8GhIBZfglTg8uogWvzB5q9W20kpJ16yUizoluG5HPZ6PYNTDj
GUbYcwnEHnTTEo2XQfUDII2aJ1FyZMu1prJEb3XTJBtJKT66m6UBvR/UDT9cKT/M
SmNGzAcifsiwyPByOrzkvNwUdbuNpoKWJBGhi4u9Mzt34A0WKD60wRJDtAyw8WhB
BKDX2QorNFhWaScmlNLXByRc/tHgfcL9qfgFlVzF13BHm7pGJIe2j4cWjOUNJz/q
2rK1Mh817hIhXW0CJixLz71Mt8Ww5ymkoTH0U33Sox4ms7zyjrMCYAFZjWNK08EV
6J64xJ69tWFGJr1iosAznXuaH/iAFERDwlepAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUvNRrlolDG9qf8dsDgehdxiZ4btgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZOUnJsb2xERzlxZjhk
c0RnZWhkeGlaNGJ0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAKGD8QlJjteHSqn9
6uM/+g6yPlNCbQT1V/ppI8xD9OZagP0/dJoC6AuJQK8nsJqFBBR1hom7Z8RzPTe2
qr0pzOHiv6wXPWBcSf7A83dKJwNhuPKalXsaUcrPvc0s7qtMmTkhadF/CAPsDYoo
a7PsQs2TsZ7NmisWSHs2XGSJHNJCjP4slqrpSijGXT+d1sinNSrWNggSZhl/9Oke
vlZUKuVHJaK/anjWjaVILNQ6/bWeyvldqXUvXAPoNxNhP68EkWXP4yCSW6QL5vti
/4+aWa+1g+M0L+TmqhftoORC4qD4H7hGPzl7B1b11yYCVC8YEGIJtUdtr2VARXpx
DL3u2SQ=
-----END CERTIFICATE-----
Generated at Mon Dec 22 14:17:08 2025 by rpki-client