This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/AjTtzrDEsqfGz8YZYWF5b88Xpuw.roa File: AjTtzrDEsqfGz8YZYWF5b88Xpuw.roa (raw, json) Hash identifier: 9idwcaMHFfsXQ/n6zkjf7rWZGOMKoFV5zJV3Am65uEQ= Subject key identifier: 02:34:ED:CE:B0:C4:B2:A7:C6:CF:C6:19:61:61:79:6F:CF:17:A6:EC Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 33CD Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AjTtzrDEsqfGz8YZYWF5b88Xpuw.roa Signing time: Thu 28 Mar 2024 15:52:02 +0000 ROA not before: Thu 28 Mar 2024 15:52:02 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.239.0.0/19 maxlen: 19 101.78.32.0/19 maxlen: 19 103.35.0.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 13261 (0x33cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Mar 28 15:52:02 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=0234EDCEB0C4B2A7C6CFC6196161796FCF17A6EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:6f:f3:29:9e:e6:30:79:86:7d:05:44:e7: 6d:b5:4e:bf:f4:aa:c2:7d:9d:f2:ca:35:af:ab:99: 23:cd:2d:bf:c6:9d:56:55:7a:cd:f2:06:93:33:bb: 7e:02:3d:b5:c3:e2:9d:db:d9:18:b1:85:14:fe:d8: 23:40:75:92:84:a7:de:31:62:08:c6:9c:02:c7:6a: f4:7d:44:1f:5e:c6:d0:30:7a:87:34:0e:f7:e7:21: 4b:a3:69:4c:e7:3b:24:51:bf:cc:87:b1:ba:db:42: d5:45:80:bf:d8:41:88:f7:3f:be:46:51:9b:13:28: bd:9b:ac:da:6c:cc:b6:ed:15:97:b1:dc:e0:ab:99: 64:2e:91:c7:ef:69:39:aa:ec:94:a2:30:25:d6:6d: 39:4a:eb:92:62:3d:b7:cb:78:33:23:76:f6:99:5a: 6d:ea:c0:3a:ac:8d:0a:7e:0f:6f:86:e4:78:ca:b0: 62:c0:7f:2c:fe:8a:6b:cb:75:4e:60:99:ca:d6:63: d7:05:7a:4e:a9:f9:eb:7b:fc:bb:03:b4:3e:73:74: 5e:7d:c7:a9:b1:c6:30:9b:c9:c7:43:52:9e:30:90: 88:d4:4c:f7:95:a1:e8:76:53:c0:56:d4:96:2e:7b: 95:ee:c2:db:a1:78:e6:b7:74:fb:a5:1d:29:98:b3: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:34:ED:CE:B0:C4:B2:A7:C6:CF:C6:19:61:61:79:6F:CF:17:A6:EC X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AjTtzrDEsqfGz8YZYWF5b88Xpuw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.0.0/19 101.78.32.0/19 103.35.0.0/19 Signature Algorithm: sha256WithRSAEncryption 95:83:68:04:9b:c9:e9:f5:14:b9:e7:ac:82:e7:c1:b0:50:c3: 81:de:b1:25:79:03:55:bc:c6:f3:9e:2c:62:b9:88:f6:93:68: 6c:ef:8e:41:36:dc:65:34:54:ff:84:d3:df:64:f2:e7:c6:ca: f9:58:44:73:5a:df:ba:c0:3e:48:8d:66:97:b1:24:75:ff:5e: d9:ea:74:1d:bb:67:52:88:22:46:b5:cf:c4:09:37:f9:fa:5d: 49:ed:1b:7d:3a:be:4c:b9:f5:b6:4e:af:0f:16:4a:9d:14:af: 86:df:1f:3f:ab:6f:dd:9e:4d:5d:bd:99:ec:10:7b:ed:78:dc: ca:84:14:d0:ae:0a:d9:e8:76:e2:2d:6c:ae:36:9d:19:59:92: ef:35:2b:a6:f0:b7:3b:5d:85:09:0a:9f:76:f7:de:f4:43:4f: 26:bb:ac:c0:09:6b:ff:f3:c0:6f:12:c6:32:5b:f7:d0:af:3c: ff:99:85:94:c0:7e:87:d6:ac:4d:71:d3:ee:ec:46:45:2c:f2: 4f:32:f2:e5:99:33:52:e3:63:1e:56:4b:24:c6:f9:13:23:c1: 53:de:ba:24:a0:e2:80:d5:07:40:ba:18:85:45:6c:3c:83:6a: a6:aa:30:73:13:61:e2:ca:fe:0e:82:db:5c:39:8e:97:70:16: 1d:97:86:93 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgICM80wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjgx NTUyMDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDAyMzRFRENFQjBDNEIy QTdDNkNGQzYxOTYxNjE3OTZGQ0YxN0E2RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6T2/zKZ7mMHmGfQVE5221Tr/0qsJ9nfLKNa+rmSPNLb/GnVZV es3yBpMzu34CPbXD4p3b2RixhRT+2CNAdZKEp94xYgjGnALHavR9RB9extAweoc0 DvfnIUujaUznOyRRv8yHsbrbQtVFgL/YQYj3P75GUZsTKL2brNpszLbtFZex3OCr mWQukcfvaTmq7JSiMCXWbTlK65JiPbfLeDMjdvaZWm3qwDqsjQp+D2+G5HjKsGLA fyz+imvLdU5gmcrWY9cFek6p+et7/LsDtD5zdF59x6mxxjCbycdDUp4wkIjUTPeV oeh2U8BW1JYue5XuwtuheOa3dPulHSmYs659AgMBAAGjggH9MIIB+TAdBgNVHQ4E FgQUAjTtzrDEsqfGz8YZYWF5b88XpuwwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0FqVHR6ckRFc3FmR3o4 WVpZV0Y1Yjg4WHB1dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAJWDaASbyen1FLnn rILnwbBQw4HesSV5A1W8xvOeLGK5iPaTaGzvjkE23GU0VP+E099k8ufGyvlYRHNa 37rAPkiNZpexJHX/XtnqdB27Z1KIIka1z8QJN/n6XUntG306vky59bZOrw8WSp0U r4bfHz+rb92eTV29mewQe+143MqEFNCuCtnoduItbK42nRlZku81K6bwtztdhQkK n3b33vRDTya7rMAJa//zwG8SxjJb99CvPP+ZhZTAfofWrE1x0+7sRkUs8k8y8uWZ M1LjYx5WSyTG+RMjwVPeuiSg4oDVB0C6GIVFbDyDaqaqMHMTYeLK/g6C21w5jpdw Fh2XhpM= -----END CERTIFICATE-----Generated at Mon Jan 12 13:45:57 2026 by rpki-client