This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/25dEPg5nkrmgLojiHSB0-DYKhbA.roa File: 25dEPg5nkrmgLojiHSB0-DYKhbA.roa (raw, json) Hash identifier: +MwSiyqgR4OMQi19wWn+AeyQVrZ52MOP9OZVjvpsVC4= Subject key identifier: DB:97:44:3E:0E:67:92:B9:A0:2E:88:E2:1D:20:74:F8:36:0A:85:B0 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 6766 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/25dEPg5nkrmgLojiHSB0-DYKhbA.roa Signing time: Mon 02 Jun 2025 19:41:38 +0000 ROA not before: Mon 02 Jun 2025 19:41:38 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 26470 (0x6766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Jun 2 19:41:38 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=DB97443E0E6792B9A02E88E21D2074F8360A85B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f3:50:5a:c6:c1:5d:9f:e8:5a:46:8e:63:70: 6b:1c:51:fa:71:be:26:d1:13:28:44:46:ba:fb:3b: 95:a2:a8:2d:2a:13:f3:51:2a:4f:00:16:d8:6d:27: 28:a6:0f:ae:1c:1a:13:e0:52:d3:92:e1:5b:5e:c9: 4e:6f:1c:35:c4:ae:e1:99:bc:ea:e2:ae:0a:25:c7: 6d:8d:16:c9:28:f4:85:db:04:80:99:ac:46:ba:70: 71:ac:ce:15:93:64:4a:5f:ef:0e:af:4e:e7:4c:6f: 3a:d8:f4:9c:15:cb:d0:14:5c:5d:a0:e6:a5:44:8d: b1:11:5e:56:b7:8a:e0:09:2e:a6:47:a6:3e:2f:89: 08:25:f0:64:a4:ed:7b:d2:47:d7:1f:a0:e7:76:33: 6c:a0:21:0f:45:f1:01:7e:ba:d4:24:87:3e:21:20: 4b:26:2c:66:2e:b4:84:98:a1:0f:04:77:d1:db:04: 1b:1b:21:71:8e:ae:a4:96:95:86:9a:42:33:91:d5: 2c:86:f5:9b:96:0a:db:e1:ae:0f:b6:7e:31:f7:63: 64:f5:af:2f:81:da:bd:e3:f0:d2:42:93:43:7f:64: 8d:9a:00:c4:01:19:77:77:3b:7c:ce:03:94:a9:93: 56:43:4d:bc:9f:f1:29:d4:14:ab:f6:e0:56:9b:8d: 4b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:97:44:3E:0E:67:92:B9:A0:2E:88:E2:1D:20:74:F8:36:0A:85:B0 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/25dEPg5nkrmgLojiHSB0-DYKhbA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 86:84:c5:70:70:2e:0d:a9:d5:83:7e:4c:53:d8:78:bf:f2:7c: c6:c0:a0:8c:bc:1c:11:1f:21:84:58:38:f9:dc:1d:f2:da:f2: a7:8d:d5:22:b0:d3:6d:e5:fb:ce:79:d6:ef:62:dd:0d:93:9f: 82:5d:07:82:b9:a3:ec:52:13:57:20:cf:b5:78:6f:9f:d1:e9: 63:51:6a:32:9a:4c:db:20:3e:37:48:eb:cc:bf:e8:96:0d:25: 64:e4:fc:8c:f9:ef:71:e4:cc:06:75:c3:0e:b5:28:48:f2:8d: 0a:08:fc:bc:89:73:1c:94:ba:ad:43:7d:6e:09:03:24:7c:99: 49:ca:88:6a:84:6a:25:d9:74:33:a1:77:32:f6:6c:3a:8f:78: d6:25:00:82:b5:f4:09:8a:70:93:55:6b:8f:b8:56:dd:62:e8: 0f:81:09:44:5f:1b:0a:b0:95:3f:bd:68:02:37:f1:bd:83:f5: 90:c7:df:39:1d:a6:01:37:1b:c8:65:e3:6c:67:6d:7e:a6:1c: a6:78:9e:8f:12:e9:f6:cc:fb:ca:85:9f:88:5b:ff:a0:bd:2a: 50:d3:55:79:fa:34:7e:21:ce:b3:94:d2:a4:d5:56:7c:27:76: 9b:9a:b8:e0:ff:79:93:7a:c7:b4:79:ef:10:70:cf:ea:01:57: 26:02:48:1e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICZ2YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MDIx OTQxMzhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKERCOTc0NDNFMEU2Nzky QjlBMDJFODhFMjFEMjA3NEY4MzYwQTg1QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCf81BaxsFdn+haRo5jcGscUfpxvibREyhERrr7O5WiqC0qE/NR Kk8AFthtJyimD64cGhPgUtOS4VteyU5vHDXEruGZvOrirgolx22NFsko9IXbBICZ rEa6cHGszhWTZEpf7w6vTudMbzrY9JwVy9AUXF2g5qVEjbERXla3iuAJLqZHpj4v iQgl8GSk7XvSR9cfoOd2M2ygIQ9F8QF+utQkhz4hIEsmLGYutISYoQ8Ed9HbBBsb IXGOrqSWlYaaQjOR1SyG9ZuWCtvhrg+2fjH3Y2T1ry+B2r3j8NJCk0N/ZI2aAMQB GXd3O3zOA5Spk1ZDTbyf8SnUFKv24FabjUuXAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQU25dEPg5nkrmgLojiHSB0+DYKhbAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzI1ZEVQZzVua3JtZ0xv amlIU0IwLURZS2hiQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCGhMVw cC4NqdWDfkxT2Hi/8nzGwKCMvBwRHyGEWDj53B3y2vKnjdUisNNt5fvOedbvYt0N k5+CXQeCuaPsUhNXIM+1eG+f0eljUWoymkzbID43SOvMv+iWDSVk5PyM+e9x5MwG dcMOtShI8o0KCPy8iXMclLqtQ31uCQMkfJlJyohqhGol2XQzoXcy9mw6j3jWJQCC tfQJinCTVWuPuFbdYugPgQlEXxsKsJU/vWgCN/G9g/WQx985HaYBNxvIZeNsZ21+ phymeJ6PEun2zPvKhZ+IW/+gvSpQ01V5+jR+Ic6zlNKk1VZ8J3abmrjg/3mTese0 ee8QcM/qAVcmAkge -----END CERTIFICATE-----Generated at Mon Jan 12 13:06:59 2026 by rpki-client