This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-GbdRIxvVGXus9bdYKIscTF7mD8.roa
File: -GbdRIxvVGXus9bdYKIscTF7mD8.roa (raw, json)
Hash identifier: t6KO90IYqLoNnnrmAvFATLb5W654RCkgGuuUMoGj42Y=
Subject key identifier: F8:66:DD:44:8C:6F:54:65:EE:B3:D6:DD:60:A2:2C:71:31:7B:98:3F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 41A1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-GbdRIxvVGXus9bdYKIscTF7mD8.roa
Signing time: Tue 16 Apr 2024 02:23:24 +0000
ROA not before: Tue 16 Apr 2024 02:23:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16801 (0x41a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 02:23:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F866DD448C6F5465EEB3D6DD60A22C71317B983F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:3a:f5:56:29:7e:44:e8:32:bf:da:e9:cf:
32:d1:5a:b1:d6:8b:03:3a:a7:05:48:5b:c6:a4:72:
d1:dd:23:0c:8f:5e:22:f2:58:5c:0e:42:32:96:5a:
6c:33:51:9c:69:a4:e0:2d:7b:f8:47:0c:b7:04:41:
db:37:c4:81:f5:56:78:35:78:79:a1:3b:e8:66:ed:
c1:f4:62:93:71:a4:b3:1e:28:eb:e6:e7:fc:ca:e4:
b7:b4:ce:24:e7:1d:85:82:bf:1e:80:e7:27:d7:9a:
0c:82:76:be:65:e1:2a:61:45:e8:5b:07:70:cc:e1:
c6:4e:1c:3f:d1:87:1a:0b:36:7d:a2:9d:c5:aa:3f:
00:86:88:5c:e0:49:f5:a2:94:f0:eb:fd:6e:88:c1:
c2:d5:ce:d7:4a:e7:72:be:f9:20:d6:b7:13:85:d1:
7d:1c:be:40:a3:40:06:e8:b2:da:55:b7:cb:5c:68:
ee:44:4f:1f:a8:94:d4:83:9a:1c:f3:8c:00:13:5a:
b4:55:47:e4:f7:70:3d:c9:9d:ac:8d:9b:45:66:35:
e9:a9:68:d8:8e:02:d2:ca:a8:2f:11:5e:aa:2d:75:
3e:73:29:11:4a:28:72:63:7c:19:c4:68:ad:71:ab:
74:c5:60:a5:7c:e7:b1:34:23:32:80:5d:9f:60:92:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:66:DD:44:8C:6F:54:65:EE:B3:D6:DD:60:A2:2C:71:31:7B:98:3F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-GbdRIxvVGXus9bdYKIscTF7mD8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
37:66:6a:5e:f2:38:0b:07:8d:ca:08:d7:9c:8c:10:54:2b:4a:
29:ba:b7:e9:cf:01:10:14:19:f6:01:0f:8c:93:52:c3:eb:d2:
68:fd:ea:e9:77:fa:6e:1e:65:5a:01:7e:10:eb:ac:de:fa:2b:
35:0d:56:e8:dd:63:3c:04:2c:ba:86:1b:c8:8a:76:c3:13:3f:
ef:84:20:b9:7d:fe:ad:a6:a1:95:b9:bd:4a:f2:25:46:38:04:
6c:2d:dc:d7:1d:43:d5:9c:72:7a:4f:1f:dc:7b:a8:95:5b:b7:
d4:01:80:aa:f6:9c:46:ea:d4:48:29:16:c8:61:30:0e:e9:dd:
22:bb:87:ee:e7:ac:22:3e:c9:8e:7e:29:12:5a:9b:d4:d7:c9:
49:90:6d:d3:27:af:f0:97:ce:02:96:b0:6b:0e:94:21:e0:da:
21:4e:76:c7:cb:be:cf:66:cd:b1:30:8e:2e:f6:73:0c:19:5f:
03:65:0a:4c:e2:28:b6:06:88:f9:2e:22:aa:e8:36:26:d3:a2:
f6:f6:0d:55:30:02:c2:a6:53:91:26:df:1e:a3:7c:34:8d:2f:
0d:c1:3d:65:25:ab:6e:18:ff:f1:40:4f:dd:fa:21:5a:9c:15:
d0:68:2b:b4:6c:1a:ce:86:3d:4c:fb:11:62:c9:c0:7b:c4:35:
87:3e:56:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:34:38 2026 by rpki-client