This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/HQhNBcnab8ZHWMdE3DFqFCPQCdw.roa File: HQhNBcnab8ZHWMdE3DFqFCPQCdw.roa (raw, json) Hash identifier: SZ8vL420TyPK0DK/o5TtJz+tYuQsXYOELrPNfcCcwz0= Subject key identifier: 1D:08:4D:05:C9:DA:6F:C6:47:58:C7:44:DC:31:6A:14:23:D0:09:DC Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 6102 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HQhNBcnab8ZHWMdE3DFqFCPQCdw.roa Signing time: Fri 16 May 2025 18:40:28 +0000 ROA not before: Fri 16 May 2025 18:40:28 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 24834 (0x6102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 16 18:40:28 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1D084D05C9DA6FC64758C744DC316A1423D009DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:19:43:3a:c5:09:e4:dc:6f:fc:bf:28:f9: de:ae:07:f8:06:8d:29:ac:36:4c:f9:e1:87:9a:14: cd:ef:b5:c8:5e:3e:de:1b:bd:bb:d4:52:f9:5a:3e: 63:b3:b7:8d:b0:53:77:6c:a8:f5:d0:cc:a2:6f:b4: 3d:fc:66:41:5c:9c:70:8a:da:3c:84:c1:74:65:e4: e5:da:b0:8a:5a:80:40:da:8d:6b:1f:d1:ea:ee:3b: c7:05:5c:eb:c8:38:7a:e9:d2:00:48:28:58:57:48: 64:50:bd:fb:97:87:2e:35:12:c2:4b:e6:ce:ec:45: 82:18:7f:1b:99:41:04:bb:a7:22:cd:73:bb:6d:e0: 54:4a:03:9a:64:73:2a:a2:18:fc:03:9e:84:b9:ff: b6:ac:af:33:8a:64:00:41:c1:17:f2:be:22:74:da: 63:55:8c:15:f4:d2:4e:9b:40:19:aa:18:5b:59:9c: 5d:f1:9c:44:6c:cf:9d:f5:0c:db:9a:da:fa:b9:db: 4a:eb:78:8b:b7:88:0a:96:59:19:b4:06:bf:80:c8: f0:ea:f6:b8:96:df:27:b2:96:78:d7:44:d1:60:49: 40:62:37:b2:ee:6e:ed:f2:4a:7b:d7:7c:22:cf:a5: b4:f0:19:ea:6a:1b:ea:29:0a:95:30:2b:c7:4b:ed: 13:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:08:4D:05:C9:DA:6F:C6:47:58:C7:44:DC:31:6A:14:23:D0:09:DC X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HQhNBcnab8ZHWMdE3DFqFCPQCdw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption a1:75:49:a0:b4:68:5c:9d:68:6b:11:93:59:52:e1:32:be:fe: 05:dd:78:1c:30:a2:c0:c9:c5:02:5e:ca:5c:e9:ec:9d:c5:d8: 59:8a:9b:27:c1:63:65:85:b4:b4:fb:40:e3:a8:3d:f2:13:20: 7c:8f:b5:46:58:22:34:7b:50:59:d0:0b:8a:07:5e:95:cc:5a: 41:e5:20:be:7a:20:57:3e:cb:00:3e:25:00:42:00:61:6f:1f: 16:0d:78:a7:73:ca:6c:57:b8:b3:f5:48:4e:fe:23:6d:17:07: cc:87:02:a1:22:4d:e9:13:6c:39:27:da:e9:1f:1b:bc:ba:d7: ea:19:69:a7:cb:1c:3e:d4:97:8a:54:e0:e9:2c:e9:4a:74:ca: 74:51:12:f8:b3:20:78:d6:8e:e0:19:54:b8:37:c2:4a:8e:0a: 9d:dd:a8:9e:cd:de:ab:0a:70:28:e9:e7:8a:56:e2:c7:a7:fa: ce:70:90:03:69:db:2c:4f:97:fe:e7:f6:a6:59:fe:c4:c6:e1: fe:20:f9:fc:10:02:5a:18:1a:d6:f5:7c:85:ce:32:15:0e:aa: ee:a1:fe:e9:d8:ad:79:46:36:7f:4e:33:bc:70:c2:38:ed:b2: c7:43:17:e2:04:d7:a3:5e:ba:f6:39:08:95:3d:01:7f:96:91: 10:a4:08:f6 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICYQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTYx ODQwMjhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFEMDg0RDA1QzlEQTZG QzY0NzU4Qzc0NERDMzE2QTE0MjNEMDA5REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7SxlDOsUJ5Nxv/L8o+d6uB/gGjSmsNkz54YeaFM3vtchePt4b vbvUUvlaPmOzt42wU3dsqPXQzKJvtD38ZkFcnHCK2jyEwXRl5OXasIpagEDajWsf 0eruO8cFXOvIOHrp0gBIKFhXSGRQvfuXhy41EsJL5s7sRYIYfxuZQQS7pyLNc7tt 4FRKA5pkcyqiGPwDnoS5/7asrzOKZABBwRfyviJ02mNVjBX00k6bQBmqGFtZnF3x nERsz531DNua2vq520rreIu3iAqWWRm0Br+AyPDq9riW3yeylnjXRNFgSUBiN7Lu bu3ySnvXfCLPpbTwGepqG+opCpUwK8dL7RMNAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUHQhNBcnab8ZHWMdE3DFqFCPQCdwwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0hRaE5CY25hYjhaSFdN ZEUzREZxRkNQUUNkdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQChdUmg tGhcnWhrEZNZUuEyvv4F3XgcMKLAycUCXspc6eydxdhZipsnwWNlhbS0+0DjqD3y EyB8j7VGWCI0e1BZ0AuKB16VzFpB5SC+eiBXPssAPiUAQgBhbx8WDXinc8psV7iz 9UhO/iNtFwfMhwKhIk3pE2w5J9rpHxu8utfqGWmnyxw+1JeKVODpLOlKdMp0URL4 syB41o7gGVS4N8JKjgqd3aiezd6rCnAo6eeKVuLHp/rOcJADadssT5f+5/amWf7E xuH+IPn8EAJaGBrW9XyFzjIVDqruof7p2K15RjZ/TjO8cMI47bLHQxfiBNejXrr2 OQiVPQF/lpEQpAj2 -----END CERTIFICATE-----Generated at Sun Jan 11 14:37:55 2026 by rpki-client