This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/12UqmPo3cHAnBziGRF7HMt5UDGo.roa File: 12UqmPo3cHAnBziGRF7HMt5UDGo.roa (raw, json) Hash identifier: 9HrgeF9vRJ0dnDWvuKD11a01yRrXSdI5xxNLaU0qaXo= Subject key identifier: D7:65:2A:98:FA:37:70:70:27:07:38:86:44:5E:C7:32:DE:54:0C:6A Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 3B95 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/12UqmPo3cHAnBziGRF7HMt5UDGo.roa Signing time: Mon 08 Apr 2024 00:52:33 +0000 ROA not before: Mon 08 Apr 2024 00:52:33 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.239.0.0/19 maxlen: 19 101.78.32.0/19 maxlen: 19 103.35.0.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 15253 (0x3b95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 8 00:52:33 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=D7652A98FA37707027073886445EC732DE540C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:12:32:dc:10:20:b0:fe:06:8c:e4:91:f5:68: 78:a6:ad:b5:8b:9a:e0:00:51:4c:db:98:04:42:b8: ef:05:2d:e6:ce:87:6b:97:36:3e:b4:0b:14:15:6f: b2:75:97:0a:e1:18:e8:bb:8d:bc:0c:e3:b1:e4:18: 2b:22:ef:56:20:da:b0:48:66:ee:c9:85:7f:20:f2: bb:bf:28:d9:f9:ec:4e:d4:c5:d2:cd:3c:06:36:5d: fe:bc:d2:62:d3:1e:53:3b:06:42:28:7e:61:5d:ad: 03:cb:9d:a8:7d:c1:ff:30:b8:a1:9f:54:ae:09:5a: 1d:53:80:e1:31:28:d2:ae:93:b8:22:17:f8:80:cc: d5:aa:24:95:de:03:52:05:7e:1e:d6:c9:1e:e8:66: 46:a8:7b:fa:fd:6b:e3:7b:85:9b:86:04:ef:98:e1: 7c:53:75:76:7d:11:9a:30:94:70:aa:86:1e:8d:53: 0e:3c:3b:06:69:e2:c9:87:ea:22:8c:fc:dd:b3:bd: b9:37:40:25:67:e9:9b:41:6f:25:a7:30:3d:a2:a5: 20:0d:64:6b:68:28:a9:5e:29:e3:86:58:71:41:28: c0:9b:22:57:2e:cb:d5:d3:ce:45:fa:41:6e:0f:40: 18:1d:95:91:30:c3:e5:df:ca:16:79:2a:1e:e2:64: 8e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:65:2A:98:FA:37:70:70:27:07:38:86:44:5E:C7:32:DE:54:0C:6A X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/12UqmPo3cHAnBziGRF7HMt5UDGo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.0.0/19 101.78.32.0/19 103.35.0.0/19 Signature Algorithm: sha256WithRSAEncryption 8e:7a:94:da:e8:7c:ef:06:97:ef:c3:a8:ac:b1:cc:bc:31:61: 61:89:36:b0:77:45:6f:73:a2:fd:4b:f2:b6:9c:3e:d9:ce:f1: 71:ca:11:92:13:f7:ea:f1:9e:3c:4e:70:ed:78:c6:6a:07:71: 2d:e6:8c:6a:35:a9:4f:09:91:49:00:fc:8b:f3:f2:d0:21:97: 15:7d:fc:93:8a:3a:8f:1a:96:93:28:fe:a8:a8:73:c9:9e:5a: b7:76:3c:a5:f3:8e:f7:c7:94:8c:d4:cf:29:ab:c0:79:ca:a8: 86:8a:25:23:d2:3e:7d:e5:28:b6:1a:bf:4d:56:2f:d7:f5:59: ef:5d:c0:0c:f9:f7:0d:d5:2d:b2:0c:ca:34:9e:67:95:7f:00: d6:cb:fa:73:a3:92:ad:6f:c1:a3:63:b6:9a:6a:ef:31:9d:07: 32:4d:93:1f:c5:7c:d7:b9:9b:44:aa:04:a8:98:8b:8f:46:b1: aa:d6:c8:75:5d:4b:cd:87:01:ab:36:89:ce:b6:2f:14:17:fd: 7d:d6:e8:12:59:63:2f:c2:cc:cf:53:7e:b5:6b:23:9f:35:23: 13:00:cd:37:1b:08:74:98:d3:f7:99:2d:37:90:91:91:3d:35: a2:f2:12:15:7c:c3:f3:7b:5e:90:e1:a4:36:3d:ec:de:67:9a: 1d:76:d9:ea -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgICO5UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDgw MDUyMzNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQ3NjUyQTk4RkEzNzcw NzAyNzA3Mzg4NjQ0NUVDNzMyREU1NDBDNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtEjLcECCw/gaM5JH1aHimrbWLmuAAUUzbmARCuO8FLebOh2uX Nj60CxQVb7J1lwrhGOi7jbwM47HkGCsi71Yg2rBIZu7JhX8g8ru/KNn57E7UxdLN PAY2Xf680mLTHlM7BkIofmFdrQPLnah9wf8wuKGfVK4JWh1TgOExKNKuk7giF/iA zNWqJJXeA1IFfh7WyR7oZkaoe/r9a+N7hZuGBO+Y4XxTdXZ9EZowlHCqhh6NUw48 OwZp4smH6iKM/N2zvbk3QCVn6ZtBbyWnMD2ipSANZGtoKKleKeOGWHFBKMCbIlcu y9XTzkX6QW4PQBgdlZEww+XfyhZ5Kh7iZI65AgMBAAGjggH9MIIB+TAdBgNVHQ4E FgQU12UqmPo3cHAnBziGRF7HMt5UDGowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzEyVXFtUG8zY0hBbkJ6 aUdSRjdITXQ1VURHby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAI56lNrofO8Gl+/D qKyxzLwxYWGJNrB3RW9zov1L8racPtnO8XHKEZIT9+rxnjxOcO14xmoHcS3mjGo1 qU8JkUkA/Ivz8tAhlxV9/JOKOo8alpMo/qioc8meWrd2PKXzjvfHlIzUzymrwHnK qIaKJSPSPn3lKLYav01WL9f1We9dwAz59w3VLbIMyjSeZ5V/ANbL+nOjkq1vwaNj tppq7zGdBzJNkx/FfNe5m0SqBKiYi49GsarWyHVdS82HAas2ic62LxQX/X3W6BJZ Yy/CzM9TfrVrI581IxMAzTcbCHSY0/eZLTeQkZE9NaLyEhV8w/N7XpDhpDY97N5n mh122eo= -----END CERTIFICATE-----Generated at Wed Dec 31 03:27:01 2025 by rpki-client