This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DWVak_qqcFST0GYI-P6ODBfqOVE.roa File: DWVak_qqcFST0GYI-P6ODBfqOVE.roa (raw, json) Hash identifier: XC8pFt7wD0WUgBjppdl73UIbGMEzmbx4GFNjwhEGQhE= Subject key identifier: 0D:65:5A:93:FA:AA:70:54:93:D0:66:08:F8:FE:8E:0C:17:EA:39:51 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 3C03 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DWVak_qqcFST0GYI-P6ODBfqOVE.roa Signing time: Mon 08 Apr 2024 14:22:35 +0000 ROA not before: Mon 08 Apr 2024 14:22:35 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 36.0.64.0/18 maxlen: 18 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 15363 (0x3c03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 8 14:22:35 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=0D655A93FAAA705493D06608F8FE8E0C17EA3951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:89:41:c6:ea:78:71:54:7c:6b:7e:de:00: 40:12:51:14:24:da:da:ac:2b:e4:5f:3d:ca:d1:d4: 8a:d4:06:b4:37:f3:b1:2e:11:dd:e7:c9:fc:d3:13: 76:7b:30:fe:e7:44:ce:d5:b9:ba:f0:6c:bc:7a:19: be:f3:bb:13:df:97:82:3c:ca:32:08:28:24:90:d7: 48:11:92:de:fd:dd:9e:5e:fa:d4:2f:35:32:82:cb: 4e:86:92:47:56:c4:6a:a0:a2:ae:dc:a3:d8:5e:eb: 0e:54:d6:f6:ce:05:c8:7e:8e:93:d5:9f:9e:f2:04: 3e:ab:42:a5:ae:08:58:d8:d5:d1:fa:e0:7b:79:1e: de:e9:cd:65:5c:31:84:5b:ba:eb:9a:fd:8e:c9:80: 49:43:2c:9d:70:a6:61:87:be:02:3b:b7:3e:12:2a: d3:3a:a7:b4:02:90:65:13:e5:95:e3:4e:8a:1b:20: 5b:75:2f:75:39:65:d1:0d:5c:24:b6:6c:97:81:75: 7f:2b:bc:a8:fd:c8:a9:3e:a7:14:35:d1:fb:6f:11: 59:0f:f3:0c:fe:7e:49:ad:fe:5e:09:23:d7:ce:8f: 83:e7:36:4e:32:ee:86:5a:0e:8a:06:31:28:b1:e3: cc:27:32:04:5f:47:01:69:d1:67:8e:ac:0b:5c:69: c9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:65:5A:93:FA:AA:70:54:93:D0:66:08:F8:FE:8E:0C:17:EA:39:51 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DWVak_qqcFST0GYI-P6ODBfqOVE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption b3:3b:7b:fc:74:89:f4:af:ff:d3:d0:1a:e6:27:dc:f2:69:48: a9:a3:09:1d:3e:f8:c3:e5:89:b0:14:54:d1:d2:44:1a:37:a0: 11:4e:1c:a2:55:c9:53:a9:64:11:68:fa:c7:17:b0:00:44:60: 1e:73:28:72:8e:7d:8c:f1:ce:1f:e5:72:8a:dc:25:41:c8:d5: cc:32:f9:bd:11:0f:97:f1:05:a1:93:70:d5:a3:d5:a1:90:38: 93:4f:ea:62:b0:83:b4:93:57:1e:bb:2e:95:83:24:af:cc:e6: 49:bb:fc:36:94:cd:68:33:61:b9:2b:27:82:52:4b:c8:ee:1c: af:ad:47:98:0d:26:09:d4:9d:e4:2e:ed:a9:e2:83:33:d5:ae: 69:85:a4:6b:b2:6e:52:ca:26:f3:b4:c3:2b:47:8a:1c:e4:c8: 4c:e7:e0:3a:42:16:54:a5:ae:24:76:95:92:6a:ba:71:f4:ad: aa:38:95:1b:96:95:20:f1:91:9d:cc:42:06:a2:a3:33:6e:86: 01:74:98:d4:12:e3:af:8b:57:5f:33:73:ce:a7:d8:77:59:05: a8:43:28:8f:be:bd:4d:0d:5d:71:a6:3d:e0:93:1d:56:0e:06: c2:38:71:b9:92:94:c7:ee:dd:fd:0d:e0:75:94:c7:92:45:bc: 43:78:9a:7c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICPAMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDgx NDIyMzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDBENjU1QTkzRkFBQTcw NTQ5M0QwNjYwOEY4RkU4RTBDMTdFQTM5NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCc+IlBxup4cVR8a37eAEASURQk2tqsK+RfPcrR1IrUBrQ387Eu Ed3nyfzTE3Z7MP7nRM7VubrwbLx6Gb7zuxPfl4I8yjIIKCSQ10gRkt793Z5e+tQv NTKCy06GkkdWxGqgoq7co9he6w5U1vbOBch+jpPVn57yBD6rQqWuCFjY1dH64Ht5 Ht7pzWVcMYRbuuua/Y7JgElDLJ1wpmGHvgI7tz4SKtM6p7QCkGUT5ZXjToobIFt1 L3U5ZdENXCS2bJeBdX8rvKj9yKk+pxQ10ftvEVkP8wz+fkmt/l4JI9fOj4PnNk4y 7oZaDooGMSix48wnMgRfRwFp0WeOrAtcack9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUDWVak/qqcFST0GYI+P6ODBfqOVEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0RXVmFrX3FxY0ZTVDBH WUktUDZPREJmcU9WRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYkAEAwDQYJKoZIhvcNAQELBQADggEBALM7e/x0ifSv/9PQGuYn3PJpSKmjCR0+ +MPlibAUVNHSRBo3oBFOHKJVyVOpZBFo+scXsABEYB5zKHKOfYzxzh/lcorcJUHI 1cwy+b0RD5fxBaGTcNWj1aGQOJNP6mKwg7STVx67LpWDJK/M5km7/DaUzWgzYbkr J4JSS8juHK+tR5gNJgnUneQu7anigzPVrmmFpGuyblLKJvO0wytHihzkyEzn4DpC FlSlriR2lZJqunH0rao4lRuWlSDxkZ3MQgaiozNuhgF0mNQS46+LV18zc86n2HdZ BahDKI++vU0NXXGmPeCTHVYOBsI4cbmSlMfu3f0N4HWUx5JFvEN4mnw= -----END CERTIFICATE-----Generated at Mon Jan 12 01:46:52 2026 by rpki-client