This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1o3-BZWl0GztL8YSeN2IIKKJWnk.roa File: 1o3-BZWl0GztL8YSeN2IIKKJWnk.roa (raw, json) Hash identifier: kYvRMWO9Gah446L8oD4vW453COfHoTtI+lcwm/WCSBc= Subject key identifier: D6:8D:FE:05:95:A5:D0:6C:ED:2F:C6:12:78:DD:88:20:A2:89:5A:79 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 3E2B Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1o3-BZWl0GztL8YSeN2IIKKJWnk.roa Signing time: Thu 11 Apr 2024 11:22:47 +0000 ROA not before: Thu 11 Apr 2024 11:22:47 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 36.0.64.0/18 maxlen: 18 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 15915 (0x3e2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 11 11:22:47 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=D68DFE0595A5D06CED2FC61278DD8820A2895A79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:22:04:8b:25:77:65:08:b9:a8:4e:72:f1:e2: b2:c3:87:d3:5e:24:5e:70:8a:f4:dd:6a:e0:35:8f: 4b:d8:07:b8:2d:7e:c1:dc:7f:eb:63:eb:06:d9:b5: 95:fe:48:58:16:2f:9e:a1:15:7f:f6:2b:5a:62:ef: 1d:6f:63:5e:23:89:ad:69:7c:be:8e:3c:92:61:d8: 83:ff:79:b1:cf:d3:47:11:b8:78:ae:e8:3a:52:55: 3e:c2:4f:74:d5:60:20:7e:ff:a9:26:b4:3c:5c:72: 0d:61:6e:2a:2b:36:f0:6d:35:f4:6a:01:44:61:0b: b5:e7:04:4c:2f:bc:fb:9f:72:a9:2b:7c:58:e0:79: 70:2c:52:b0:31:fb:ba:47:a4:95:02:0a:b8:be:0a: 9c:3c:27:36:0c:8c:dc:98:2f:70:83:7a:e0:5a:fc: a7:9e:64:40:de:bb:1c:8b:9b:be:a1:96:94:5d:b8: 40:8b:24:8a:d4:ff:bf:b3:85:16:45:fd:b9:93:89: 12:5b:45:e1:b5:cb:47:0c:4c:85:85:55:64:eb:7b: 43:bf:97:53:b8:cd:5c:ad:b0:6a:d7:ca:8c:36:08: 3e:1b:84:7a:a9:e9:7e:0c:61:48:f1:4a:02:02:0d: 49:16:03:2a:ad:e6:1f:3e:8e:94:46:e0:d3:51:38: 2a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8D:FE:05:95:A5:D0:6C:ED:2F:C6:12:78:DD:88:20:A2:89:5A:79 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1o3-BZWl0GztL8YSeN2IIKKJWnk.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption 10:40:3c:05:bc:1c:51:d7:d8:2a:0f:2c:c3:6d:57:d2:25:59: 34:60:9f:82:96:2b:d8:5d:f6:ea:79:3a:56:e5:43:2e:e8:e9: f0:17:93:2e:52:4e:26:dc:07:ec:4b:ff:21:18:d3:f8:3e:02: 1d:77:f7:36:15:ad:e5:76:f5:73:5a:7c:9e:e9:c3:56:ee:0b: 2d:a9:7e:38:f0:01:3b:82:76:dd:5d:59:68:b7:cc:8f:19:b5: 72:8d:b1:eb:dd:96:96:9a:71:c4:3a:33:34:ee:2f:b3:d2:fd: 79:c1:b3:f2:e2:e6:ec:b5:3e:5e:44:6d:0a:81:74:4d:47:b1: bc:84:af:c7:3f:90:71:08:df:77:0d:eb:85:f2:71:39:d1:41: 05:12:61:ee:06:82:f5:5b:5c:11:a9:98:1d:88:22:6d:84:fa: a0:35:fd:bb:3a:3f:06:17:fa:7e:8b:bf:54:63:99:44:e6:5a: 68:1e:2d:c6:24:6d:db:17:08:60:51:c6:17:13:3d:7e:18:25: c2:7e:3e:22:6b:65:79:68:f4:d0:fd:9b:ec:06:df:be:06:33: 31:f3:1d:e3:95:31:10:3e:3e:ac:36:1c:d9:bf:b7:04:42:17: 49:1d:5f:15:07:5b:6e:f1:6c:1c:01:fe:d4:c7:ca:25:fa:77: 0f:20:fd:ca -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICPiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTEx MTIyNDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQ2OERGRTA1OTVBNUQw NkNFRDJGQzYxMjc4REQ4ODIwQTI4OTVBNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD6IgSLJXdlCLmoTnLx4rLDh9NeJF5wivTdauA1j0vYB7gtfsHc f+tj6wbZtZX+SFgWL56hFX/2K1pi7x1vY14jia1pfL6OPJJh2IP/ebHP00cRuHiu 6DpSVT7CT3TVYCB+/6kmtDxccg1hbiorNvBtNfRqAURhC7XnBEwvvPufcqkrfFjg eXAsUrAx+7pHpJUCCri+Cpw8JzYMjNyYL3CDeuBa/KeeZEDeuxyLm76hlpRduECL JIrU/7+zhRZF/bmTiRJbReG1y0cMTIWFVWTre0O/l1O4zVytsGrXyow2CD4bhHqp 6X4MYUjxSgICDUkWAyqt5h8+jpRG4NNROCpzAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU1o3+BZWl0GztL8YSeN2IIKKJWnkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzFvMy1CWldsMEd6dEw4 WVNlTjJJSUtLSlduay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYkAEAwDQYJKoZIhvcNAQELBQADggEBABBAPAW8HFHX2CoPLMNtV9IlWTRgn4KW K9hd9up5OlblQy7o6fAXky5STibcB+xL/yEY0/g+Ah139zYVreV29XNafJ7pw1bu Cy2pfjjwATuCdt1dWWi3zI8ZtXKNsevdlpaaccQ6MzTuL7PS/XnBs/Li5uy1Pl5E bQqBdE1HsbyEr8c/kHEI33cN64XycTnRQQUSYe4GgvVbXBGpmB2IIm2E+qA1/bs6 PwYX+n6Lv1RjmUTmWmgeLcYkbdsXCGBRxhcTPX4YJcJ+PiJrZXlo9ND9m+wG374G MzHzHeOVMRA+Pqw2HNm/twRCF0kdXxUHW27xbBwB/tTHyiX6dw8g/co= -----END CERTIFICATE-----Generated at Mon Jan 12 15:20:40 2026 by rpki-client