This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vtJ3Tm1sdWODHFhm4LLUtwERy-E.roa File: vtJ3Tm1sdWODHFhm4LLUtwERy-E.roa (raw, json) Hash identifier: V53LJDAP8bhloRxolZbijv7jFXipvSgnS7+zd32iY5o= Subject key identifier: BE:D2:77:4E:6D:6C:75:63:83:1C:58:66:E0:B2:D4:B7:01:11:CB:E1 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 3816 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vtJ3Tm1sdWODHFhm4LLUtwERy-E.roa Signing time: Wed 03 Apr 2024 08:52:17 +0000 ROA not before: Wed 03 Apr 2024 08:52:17 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 14358 (0x3816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 3 08:52:17 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=BED2774E6D6C7563831C5866E0B2D4B70111CBE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:8c:6a:41:fc:bb:2b:af:29:b4:6b:e0:fd: 4e:9a:a3:5a:08:7f:f7:24:ce:b8:ff:8f:5e:57:98: 88:c5:e7:09:c6:cf:54:43:76:a2:40:30:1e:8e:ee: 60:40:23:e7:87:eb:c4:85:0c:8a:95:40:c2:58:1d: ea:37:d2:8c:9e:35:fb:81:e5:a9:b2:b2:b0:58:69: 0b:8f:5e:02:e9:40:a4:46:56:fc:30:6a:4a:c8:94: 6f:22:ba:24:aa:fb:02:17:46:8f:f1:45:bc:59:8e: 14:63:96:11:df:14:e1:cc:c0:1f:95:8c:d0:12:51: 38:9b:6b:ba:1c:e6:3f:2b:61:cb:5e:a8:c1:3c:39: d3:47:27:cb:70:60:bb:6d:a5:fa:97:84:93:a5:34: 92:03:7d:69:ae:18:bd:e7:f4:00:1d:9d:30:96:c1: c9:38:39:7d:02:d3:b1:b6:77:ae:c2:f4:c7:c3:f4: b7:36:d5:6e:3e:8f:11:c1:cb:54:4e:51:a0:6c:bb: d6:f8:5e:3d:d3:e3:5f:62:8a:aa:9a:8c:30:12:28: dc:97:f1:d2:17:9d:cd:7e:92:14:f1:a0:aa:94:3f: f4:30:0d:e4:52:58:0d:a0:41:46:1d:68:2c:fa:d4: 9f:f9:bf:d8:92:59:c8:c6:2c:9d:c4:b3:23:12:e4: 31:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D2:77:4E:6D:6C:75:63:83:1C:58:66:E0:B2:D4:B7:01:11:CB:E1 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vtJ3Tm1sdWODHFhm4LLUtwERy-E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0d:3e:dc:a5:52:40:1b:be:35:51:41:14:53:8b:db:94:72:45: 42:8f:c7:07:45:5c:c8:59:2e:9e:f8:3e:a1:f9:8b:ca:7e:94: 73:a4:88:1b:6b:57:49:a8:26:77:89:26:a1:82:1a:25:2a:1d: bf:0d:91:b7:56:e6:33:ee:06:03:1d:37:44:4b:69:99:ea:cc: 8c:69:14:43:98:1d:fa:13:c2:0d:24:b6:f1:da:20:f5:33:27: ae:50:3c:51:81:8c:87:f7:4c:63:50:68:06:d2:db:90:77:64: 80:72:67:f5:91:9f:c3:ca:a5:b1:91:d1:ff:28:f7:43:73:48: fc:f8:79:52:0f:c7:7e:55:f5:2f:f7:39:8e:17:30:65:ee:28: b3:9a:36:c0:2b:e3:9a:4a:e8:7a:12:b2:62:10:85:31:6f:44: 87:2f:9a:7d:26:61:e0:91:f3:9d:33:c3:f4:96:9f:35:80:86: 72:e7:ee:72:c1:ed:01:1c:d7:21:f6:ee:ff:1a:89:d1:a1:b9: 1d:36:c3:f8:e6:45:b4:6c:14:cd:0c:81:1b:c7:70:74:93:b4: ce:2c:54:ba:8d:f0:dd:d2:1e:36:37:62:07:92:49:6b:a5:ae: f2:56:28:3a:da:5f:7d:b1:24:81:40:22:2c:03:a5:fa:ff:2a: 87:be:62:1a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICOBYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDMw ODUyMTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJFRDI3NzRFNkQ2Qzc1 NjM4MzFDNTg2NkUwQjJENEI3MDExMUNCRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1oIxqQfy7K68ptGvg/U6ao1oIf/ckzrj/j15XmIjF5wnGz1RD dqJAMB6O7mBAI+eH68SFDIqVQMJYHeo30oyeNfuB5amysrBYaQuPXgLpQKRGVvww akrIlG8iuiSq+wIXRo/xRbxZjhRjlhHfFOHMwB+VjNASUTiba7oc5j8rYcteqME8 OdNHJ8twYLttpfqXhJOlNJIDfWmuGL3n9AAdnTCWwck4OX0C07G2d67C9MfD9Lc2 1W4+jxHBy1ROUaBsu9b4Xj3T419iiqqajDASKNyX8dIXnc1+khTxoKqUP/QwDeRS WA2gQUYdaCz61J/5v9iSWcjGLJ3EsyMS5DG5AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUvtJ3Tm1sdWODHFhm4LLUtwERy+EwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3Z0SjNUbTFzZFdPREhG aG00TExVdHdFUnktRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEADT7cpVJAG741UUEUU4vblHJFQo/HB0Vc yFkunvg+ofmLyn6Uc6SIG2tXSagmd4kmoYIaJSodvw2Rt1bmM+4GAx03REtpmerM jGkUQ5gd+hPCDSS28dog9TMnrlA8UYGMh/dMY1BoBtLbkHdkgHJn9ZGfw8qlsZHR /yj3Q3NI/Ph5Ug/HflX1L/c5jhcwZe4os5o2wCvjmkroehKyYhCFMW9Ehy+afSZh 4JHznTPD9JafNYCGcufucsHtARzXIfbu/xqJ0aG5HTbD+OZFtGwUzQyBG8dwdJO0 zixUuo3w3dIeNjdiB5JJa6Wu8lYoOtpffbEkgUAiLAOl+v8qh75iGg== -----END CERTIFICATE-----Generated at Mon Dec 22 07:09:10 2025 by rpki-client