This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/29V9E2R_0LY-T5IcfKAmmdzzeT8.roa File: 29V9E2R_0LY-T5IcfKAmmdzzeT8.roa (raw, json) Hash identifier: yXqHI+NF43+n8zBfdGGHKK1+IyIOaAvTi4ArymByvIc= Subject key identifier: DB:D5:7D:13:64:7F:D0:B6:3E:4F:92:1C:7C:A0:26:99:DC:F3:79:3F Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 4CE5 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/29V9E2R_0LY-T5IcfKAmmdzzeT8.roa Signing time: Wed 01 May 2024 02:53:34 +0000 ROA not before: Wed 01 May 2024 02:53:34 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.239.0.0/19 maxlen: 19 101.78.32.0/19 maxlen: 19 103.35.0.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 19685 (0x4ce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 1 02:53:34 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=DBD57D13647FD0B63E4F921C7CA02699DCF3793F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:89:1c:47:bf:e3:61:c6:24:d2:ee:03:65: 59:b7:62:47:0d:81:26:41:cf:da:12:c0:53:50:86: 9d:de:89:d5:a8:3c:43:7c:6e:62:f5:66:b0:73:7b: 7e:57:5a:f4:ed:10:d0:07:51:e5:b9:45:79:a6:b4: cf:4d:fd:8e:67:eb:95:5f:12:6e:fc:65:9a:3b:3b: 63:93:46:9b:28:6b:48:a7:f5:f1:f2:7b:98:75:9b: e4:45:bb:de:a5:aa:08:bf:a6:94:cd:e2:14:50:c7: d0:0d:90:26:7e:4e:53:71:1a:00:e7:48:60:45:26: 9c:b7:21:55:12:a5:55:35:91:79:2b:d5:e3:b6:bd: 02:57:52:8c:46:fe:7a:98:6f:57:83:3c:21:31:f2: c1:52:6c:47:bb:fe:fe:49:87:e0:c7:dc:10:28:39: 70:15:90:33:e1:42:63:92:62:c3:b3:40:df:68:8f: b5:40:eb:a5:29:1e:b2:8b:92:b3:41:41:4c:bd:84: 13:21:ac:f4:1f:df:ea:89:ca:98:f5:32:4d:44:49: 60:c8:46:fd:e5:69:42:9f:61:10:63:17:3f:a7:9a: 6c:07:e3:8d:5e:62:27:04:ec:9b:96:91:c6:b0:0f: 56:84:eb:d5:75:38:3e:8c:8c:22:93:74:b6:d5:0d: 64:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D5:7D:13:64:7F:D0:B6:3E:4F:92:1C:7C:A0:26:99:DC:F3:79:3F X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/29V9E2R_0LY-T5IcfKAmmdzzeT8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.0.0/19 101.78.32.0/19 103.35.0.0/19 Signature Algorithm: sha256WithRSAEncryption 2d:03:e9:76:79:fd:41:39:e1:f1:b4:b7:d8:53:d0:33:c7:9d: 10:e7:d9:90:6d:9b:5f:48:cb:06:24:92:3e:2c:00:7a:50:4d: 15:49:b7:13:27:84:ab:74:64:27:1c:fc:aa:65:95:26:a4:b8: 1c:54:f5:9b:1b:ba:d1:a6:77:64:da:3f:9d:de:10:8a:83:30: 69:e3:83:15:8f:26:35:47:21:2d:75:a2:f2:7a:ee:d6:eb:37: e0:61:2e:ca:df:bd:2c:55:4f:d5:4c:61:43:a2:4e:11:43:11: 0f:5b:e4:f2:8c:21:8a:38:64:2c:b7:59:d3:fb:56:27:f8:c1: 1b:f3:cd:9a:8f:ff:66:1b:82:6b:ce:44:19:38:66:e4:9a:df: d2:8f:9e:dd:80:a6:3d:7a:ec:f8:2f:1f:d0:0c:f2:c3:db:45: 34:45:1d:d9:f2:ed:83:68:e6:d3:51:70:6d:cf:38:23:d0:da: 80:bd:6d:c4:6a:20:08:9c:40:de:8b:74:20:a0:60:30:71:fb: aa:68:0c:33:e2:84:46:ed:5c:66:ed:6e:2b:95:d1:01:d3:89: 09:cc:df:f9:3f:ee:41:16:80:38:3f:fb:eb:9e:98:3b:37:26: 59:b9:17:1c:ec:57:73:da:b1:b2:c3:85:69:60:c6:a3:e3:e5: 5e:f8:f6:11 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgICTOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDEw MjUzMzRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKERCRDU3RDEzNjQ3RkQw QjYzRTRGOTIxQzdDQTAyNjk5RENGMzc5M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwpYkcR7/jYcYk0u4DZVm3YkcNgSZBz9oSwFNQhp3eidWoPEN8 bmL1ZrBze35XWvTtENAHUeW5RXmmtM9N/Y5n65VfEm78ZZo7O2OTRpsoa0in9fHy e5h1m+RFu96lqgi/ppTN4hRQx9ANkCZ+TlNxGgDnSGBFJpy3IVUSpVU1kXkr1eO2 vQJXUoxG/nqYb1eDPCEx8sFSbEe7/v5Jh+DH3BAoOXAVkDPhQmOSYsOzQN9oj7VA 66UpHrKLkrNBQUy9hBMhrPQf3+qJypj1Mk1ESWDIRv3laUKfYRBjFz+nmmwH441e YicE7JuWkcawD1aE69V1OD6MjCKTdLbVDWSbAgMBAAGjggH9MIIB+TAdBgNVHQ4E FgQU29V9E2R/0LY+T5IcfKAmmdzzeT8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzI5VjlFMlJfMExZLVQ1 SWNmS0FtbWR6emVUOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAC0D6XZ5/UE54fG0 t9hT0DPHnRDn2ZBtm19IywYkkj4sAHpQTRVJtxMnhKt0ZCcc/KpllSakuBxU9Zsb utGmd2TaP53eEIqDMGnjgxWPJjVHIS11ovJ67tbrN+BhLsrfvSxVT9VMYUOiThFD EQ9b5PKMIYo4ZCy3WdP7Vif4wRvzzZqP/2YbgmvORBk4ZuSa39KPnt2Apj167Pgv H9AM8sPbRTRFHdny7YNo5tNRcG3POCPQ2oC9bcRqIAicQN6LdCCgYDBx+6poDDPi hEbtXGbtbiuV0QHTiQnM3/k/7kEWgDg/++uemDs3Jlm5FxzsV3PasbLDhWlgxqPj 5V749hE= -----END CERTIFICATE-----Generated at Mon Jan 12 13:06:11 2026 by rpki-client