This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FzWFIE1-Gnx-IwRgFZxzvsUr6TQ.roa File: FzWFIE1-Gnx-IwRgFZxzvsUr6TQ.roa (raw, json) Hash identifier: iTFUE/t95EiuS/Azx8wGtU4+f70qFOBzqX54zoofWpM= Subject key identifier: 17:35:85:20:4D:7E:1A:7C:7E:23:04:60:15:9C:73:BE:C5:2B:E9:34 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 50D3 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FzWFIE1-Gnx-IwRgFZxzvsUr6TQ.roa Signing time: Mon 06 May 2024 08:23:56 +0000 ROA not before: Mon 06 May 2024 08:23:56 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 36.0.64.0/18 maxlen: 18 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 20691 (0x50d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 6 08:23:56 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=173585204D7E1A7C7E230460159C73BEC52BE934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:2b:3a:22:f4:0b:4d:ac:e7:a7:7c:ee:21: 1e:04:50:d1:bc:96:36:ad:1e:c3:2c:ba:6d:4e:21: 82:8e:2c:25:23:89:bc:b9:2d:42:35:81:ec:92:ec: ae:0c:58:67:f2:20:fd:39:ae:46:df:da:91:2f:3e: 66:ae:35:c8:ad:0c:1a:2e:21:9d:91:64:4b:94:2c: 4d:de:8a:ef:0c:49:fe:18:02:e3:95:f6:04:95:36: 5e:bd:2f:7b:ec:90:ce:3b:5f:6e:f3:01:bb:c6:00: f5:35:fa:49:00:31:47:9d:a2:39:c5:9e:83:84:79: 58:16:57:90:cd:38:f7:ea:e0:06:1c:71:3c:e3:93: 90:c0:c4:fd:93:ef:94:d0:e0:43:9a:36:21:89:eb: b1:9f:9a:0e:84:f2:55:3c:43:24:df:56:62:51:5c: 57:a4:d0:29:3e:14:d3:45:34:93:6f:a7:40:7e:04: 29:bc:b2:fc:23:6d:ce:0d:85:e1:33:36:82:b7:4f: da:93:6f:83:91:51:1a:5a:b7:ee:3f:d6:f6:21:fc: 3e:fe:99:ed:9d:b0:96:d9:23:59:1b:d8:e5:73:c9: c4:d3:bf:f1:58:c2:db:cf:1a:f8:41:32:db:1a:d1: c5:60:0e:0f:13:e7:ee:67:36:37:bc:31:0d:61:46: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:35:85:20:4D:7E:1A:7C:7E:23:04:60:15:9C:73:BE:C5:2B:E9:34 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FzWFIE1-Gnx-IwRgFZxzvsUr6TQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption a4:f8:a7:fa:92:d6:11:bc:bc:bf:e3:6d:60:4b:18:02:34:52: 45:62:d7:55:dd:13:06:56:8f:9d:bb:c1:bc:ca:39:1a:bb:d5: 16:64:56:60:fe:c0:33:51:d8:a0:4c:22:8f:c4:ac:65:1b:50: 86:9b:b7:19:cd:30:b3:2a:12:cb:77:93:18:d0:6d:ac:16:71: 24:d4:bb:a2:a6:ed:81:a5:24:68:d1:80:c4:32:b6:53:a7:10: 57:d7:18:cd:c5:7b:ac:e3:cc:53:3e:3a:15:f8:4b:f5:f2:c1: f4:03:cc:1c:ab:b2:99:a9:97:66:2e:fd:a5:ff:c2:8e:f1:35: fd:31:d9:b5:7a:fb:f6:f8:06:46:c7:50:00:ae:0a:0b:be:59: b2:39:73:9b:0b:95:c3:ab:26:e7:04:50:e2:91:f1:c3:2a:f3: c4:94:13:a0:a2:d5:50:d1:76:b5:87:a3:de:b7:84:1c:0b:cb: 92:7d:ac:c2:5f:9e:7a:29:d9:aa:b6:0a:3b:da:38:1e:8c:f2: 69:70:93:50:b4:e0:2a:a8:7d:24:e7:3b:4b:3a:8a:b1:aa:7d: 96:37:7c:08:51:5f:0b:02:2f:64:85:e4:d7:8e:9f:de:5c:79: cd:3f:41:e5:4c:41:14:11:de:c3:c9:ba:73:78:3f:5e:3b:6b: f7:9c:bb:77 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICUNMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDYw ODIzNTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE3MzU4NTIwNEQ3RTFB N0M3RTIzMDQ2MDE1OUM3M0JFQzUyQkU5MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5HSs6IvQLTaznp3zuIR4EUNG8ljatHsMsum1OIYKOLCUjiby5 LUI1geyS7K4MWGfyIP05rkbf2pEvPmauNcitDBouIZ2RZEuULE3eiu8MSf4YAuOV 9gSVNl69L3vskM47X27zAbvGAPU1+kkAMUedojnFnoOEeVgWV5DNOPfq4AYccTzj k5DAxP2T75TQ4EOaNiGJ67Gfmg6E8lU8QyTfVmJRXFek0Ck+FNNFNJNvp0B+BCm8 svwjbc4NheEzNoK3T9qTb4ORURpat+4/1vYh/D7+me2dsJbZI1kb2OVzycTTv/FY wtvPGvhBMtsa0cVgDg8T5+5nNje8MQ1hRr2FAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUFzWFIE1+Gnx+IwRgFZxzvsUr6TQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0Z6V0ZJRTEtR254LUl3 UmdGWnh6dnNVcjZUUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAKT4p/qS1hG8vL/jbWBLGAI0UkVi11Xd EwZWj527wbzKORq71RZkVmD+wDNR2KBMIo/ErGUbUIabtxnNMLMqEst3kxjQbawW cSTUu6Km7YGlJGjRgMQytlOnEFfXGM3Fe6zjzFM+OhX4S/XywfQDzByrspmpl2Yu /aX/wo7xNf0x2bV6+/b4BkbHUACuCgu+WbI5c5sLlcOrJucEUOKR8cMq88SUE6Ci 1VDRdrWHo963hBwLy5J9rMJfnnop2aq2CjvaOB6M8mlwk1C04CqofSTnO0s6irGq fZY3fAhRXwsCL2SF5NeOn95cec0/QeVMQRQR3sPJunN4P147a/ecu3c= -----END CERTIFICATE-----Generated at Sun Jan 11 14:43:29 2026 by rpki-client