This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yDcAc7FcKNwbwr5vgX32jdcAoY4.roa File: yDcAc7FcKNwbwr5vgX32jdcAoY4.roa (raw, json) Hash identifier: 4UfFYQaTWXvEdfmA0v/G8//STw8aXSuZJpRoVNyabnw= Subject key identifier: C8:37:00:73:B1:5C:28:DC:1B:C2:BE:6F:81:7D:F6:8D:D7:00:A1:8E Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 412F Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yDcAc7FcKNwbwr5vgX32jdcAoY4.roa Signing time: Mon 15 Apr 2024 11:53:24 +0000 ROA not before: Mon 15 Apr 2024 11:53:24 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 36.0.64.0/18 maxlen: 18 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 16687 (0x412f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 15 11:53:24 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=C8370073B15C28DC1BC2BE6F817DF68DD700A18E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2e:8a:37:bc:f2:f9:89:79:e0:fe:e9:2d:e2: 21:00:e7:67:d7:03:ff:da:21:f0:1b:82:a2:d1:25: 38:1a:8c:ef:e4:ad:44:3f:23:94:1a:99:be:50:e1: c6:79:dc:54:fc:c1:cc:56:8a:b4:fd:c1:03:88:6e: b7:23:b0:24:43:76:08:bf:ab:a8:48:f5:d5:96:5b: 4f:08:48:42:c5:e8:27:dd:2d:38:3a:3f:ef:af:1b: a9:5f:ad:4e:61:eb:2d:68:1b:cc:26:e8:5d:65:06: 14:be:5b:2e:95:5d:1d:12:b3:1c:fb:44:04:5a:46: 13:4b:d8:8e:86:fe:00:de:ca:6f:e7:3a:61:a4:5d: d3:9d:2a:b7:96:4b:50:b1:c7:41:dc:14:be:82:4b: 49:69:5c:c4:e4:ff:a5:32:13:0e:0b:d5:05:ce:d8: ab:f5:cd:04:63:e3:ef:3c:46:a9:b9:7c:88:d0:e7: 15:7b:13:d5:b2:31:f9:3c:ae:f0:14:e7:12:60:0f: f3:30:7f:71:b9:31:a8:65:f5:eb:b5:46:79:1f:8b: 4d:ec:3f:9d:a6:7e:63:bc:e6:bc:d0:68:46:a6:18: 1e:02:a3:b1:4c:e2:03:a8:38:45:14:0b:5c:cf:ba: 49:df:00:b8:f6:2f:79:6a:57:c5:4f:01:17:21:9c: 35:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:37:00:73:B1:5C:28:DC:1B:C2:BE:6F:81:7D:F6:8D:D7:00:A1:8E X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yDcAc7FcKNwbwr5vgX32jdcAoY4.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption 9a:d8:c7:32:5a:43:e3:02:96:6c:9b:6c:5f:6b:ee:bb:57:86: 6b:99:a2:be:a3:4e:16:6a:59:eb:3c:73:12:bc:92:a6:3f:9d: d6:34:b1:0f:48:22:b9:31:20:1d:2a:9e:87:a2:d8:02:b7:f9: bd:19:60:1b:8b:4d:3a:43:a6:50:d2:20:94:e7:f2:df:66:dc: a8:c5:91:0b:40:bb:3d:c4:8f:13:96:0d:38:86:3b:a6:5b:73: c1:bc:33:0c:46:18:e3:0e:b9:c5:f3:76:65:b6:69:42:11:33: f4:cc:6f:fe:0d:33:8e:93:33:42:a8:6f:33:c4:bc:b6:51:a3: 06:dc:9e:20:49:f5:f1:b0:f9:8d:f4:0d:07:84:94:5b:d2:1b: 2d:f8:d3:f1:c5:41:62:2c:0b:d5:2a:1a:e7:d1:13:f3:60:35: c8:6d:1c:83:55:33:4d:1f:7d:d0:0a:78:59:ca:01:21:b2:0e: f9:e6:f1:53:c5:f6:62:d8:f3:ca:4a:1e:2c:6e:66:3d:2c:a4: d6:ce:ea:11:9c:0b:e1:6e:ad:d1:b2:90:e7:21:44:9a:4f:e6: 5a:5f:7b:3e:86:db:a1:27:03:93:22:e4:c5:cb:50:a8:4c:9f: f2:70:68:9e:34:b5:c4:d6:ba:8c:1f:a8:3e:1e:37:98:58:c5: 74:53:8f:40 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICQS8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTUx MTUzMjRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEM4MzcwMDczQjE1QzI4 REMxQkMyQkU2RjgxN0RGNjhERDcwMEExOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyLoo3vPL5iXng/ukt4iEA52fXA//aIfAbgqLRJTgajO/krUQ/ I5Qamb5Q4cZ53FT8wcxWirT9wQOIbrcjsCRDdgi/q6hI9dWWW08ISELF6CfdLTg6 P++vG6lfrU5h6y1oG8wm6F1lBhS+Wy6VXR0Ssxz7RARaRhNL2I6G/gDeym/nOmGk XdOdKreWS1Cxx0HcFL6CS0lpXMTk/6UyEw4L1QXO2Kv1zQRj4+88Rqm5fIjQ5xV7 E9WyMfk8rvAU5xJgD/Mwf3G5Mahl9eu1Rnkfi03sP52mfmO85rzQaEamGB4Co7FM 4gOoOEUUC1zPuknfALj2L3lqV8VPARchnDVVAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUyDcAc7FcKNwbwr5vgX32jdcAoY4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3lEY0FjN0ZjS053Yndy NXZnWDMyamRjQW9ZNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAJrYxzJaQ+MClmybbF9r7rtXhmuZor6j ThZqWes8cxK8kqY/ndY0sQ9IIrkxIB0qnoei2AK3+b0ZYBuLTTpDplDSIJTn8t9m 3KjFkQtAuz3EjxOWDTiGO6Zbc8G8MwxGGOMOucXzdmW2aUIRM/TMb/4NM46TM0Ko bzPEvLZRowbcniBJ9fGw+Y30DQeElFvSGy340/HFQWIsC9UqGufRE/NgNchtHINV M00ffdAKeFnKASGyDvnm8VPF9mLY88pKHixuZj0spNbO6hGcC+FurdGykOchRJpP 5lpfez6G26EnA5Mi5MXLUKhMn/JwaJ40tcTWuowfqD4eN5hYxXRTj0A= -----END CERTIFICATE-----Generated at Mon Dec 22 05:22:07 2025 by rpki-client