This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/HX9pUHYITlfk6VplA8UaTfPQJks.roa File: HX9pUHYITlfk6VplA8UaTfPQJks.roa (raw, json) Hash identifier: 9WAQRIEe9zQnVnnCxYaHzONyxEY9Ug/DGp+f1aK3yDA= Subject key identifier: 1D:7F:69:50:76:08:4E:57:E4:E9:5A:65:03:C5:1A:4D:F3:D0:26:4B Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 5F64 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HX9pUHYITlfk6VplA8UaTfPQJks.roa Signing time: Mon 12 May 2025 11:10:13 +0000 ROA not before: Mon 12 May 2025 11:10:13 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 24420 (0x5f64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 12 11:10:13 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1D7F695076084E57E4E95A6503C51A4DF3D0264B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:35:92:cc:72:9a:5d:b1:fd:4a:de:5a:dc: b3:13:be:29:e2:9b:dc:a5:fb:ab:58:67:43:69:34: 0e:52:8d:1d:39:12:57:96:8a:83:3c:65:ab:95:8e: c3:02:ea:89:08:79:4f:35:d4:3c:83:45:26:96:6d: 3f:32:3a:c5:e4:31:08:bf:91:09:af:18:95:fc:c5: ba:b2:5a:9c:18:33:f0:3f:9d:d5:99:1c:85:e8:3b: af:01:22:d2:8c:1d:37:c3:c2:f3:d9:3b:3e:f2:ec: 48:2d:5d:f8:f4:78:57:90:07:22:ef:8a:60:98:7e: 91:8e:1e:ac:ab:a8:69:c0:7a:70:f3:66:c7:38:4c: 0a:37:6d:bd:3b:3e:e1:50:3f:6e:77:40:e2:c4:7b: 55:fa:8f:2a:74:7a:72:6d:a7:a6:b4:2d:89:c1:3f: be:4e:6b:da:ca:d9:3a:56:a0:00:1c:f7:b2:7c:73: 89:6e:27:9f:e5:65:ee:67:30:a2:ab:fe:fa:29:a6: 32:1c:5e:e2:9f:be:71:cc:77:6d:d1:45:31:00:6f: dd:6e:99:d7:2a:08:cc:d7:93:1f:9b:4b:e0:c4:30: 54:c4:82:5f:fc:b5:c1:34:02:20:12:b1:d7:65:36: ae:39:04:7c:80:a6:01:8b:23:58:76:f4:13:37:b7: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7F:69:50:76:08:4E:57:E4:E9:5A:65:03:C5:1A:4D:F3:D0:26:4B X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HX9pUHYITlfk6VplA8UaTfPQJks.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 6a:b2:14:b0:f3:e2:93:c6:88:b2:3e:3f:f9:93:92:8b:5f:a3: ec:92:46:36:48:17:37:7a:fb:b4:d1:b8:54:6a:45:d7:2a:5b: 16:b6:de:fd:d5:3c:f2:b8:dc:59:16:d1:1f:c9:c3:02:bf:8f: d5:ed:be:f2:d7:f8:75:bb:31:75:aa:34:51:06:b4:72:52:6c: 11:d4:fe:6f:a1:5e:cd:18:95:c8:5b:d8:41:88:47:f6:c9:79: 89:7b:cc:15:35:b3:b4:64:f1:9e:a8:c1:04:34:b6:84:b3:0c: 68:3d:9a:8b:69:2e:40:d4:e2:22:83:5f:37:c8:06:79:50:15: a7:9f:81:90:44:62:45:da:24:43:ba:54:1d:9b:bc:9a:0c:63: 34:ff:47:54:c2:14:05:61:81:50:ce:98:2d:8c:4c:1a:e2:14: 85:db:fb:b1:81:3e:4e:44:ea:62:1c:f6:be:b1:c6:cf:6a:1f: ee:8a:4b:8c:57:eb:29:9d:4e:29:06:a1:ba:55:cc:76:be:02: e7:cd:9b:02:bf:e8:dc:42:ba:bf:7c:69:c3:e7:86:df:f1:a6: 38:c6:d4:ef:36:00:db:15:b3:6d:2e:75:04:aa:e7:93:e0:3f: e6:13:be:6d:bc:5b:cc:90:ea:4b:9b:80:a2:98:92:88:4e:a6: 58:e1:be:7f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICX2QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTIx MTEwMTNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFEN0Y2OTUwNzYwODRF NTdFNEU5NUE2NTAzQzUxQTRERjNEMDI2NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiLDWSzHKaXbH9St5a3LMTvinim9yl+6tYZ0NpNA5SjR05EleW ioM8ZauVjsMC6okIeU811DyDRSaWbT8yOsXkMQi/kQmvGJX8xbqyWpwYM/A/ndWZ HIXoO68BItKMHTfDwvPZOz7y7EgtXfj0eFeQByLvimCYfpGOHqyrqGnAenDzZsc4 TAo3bb07PuFQP253QOLEe1X6jyp0enJtp6a0LYnBP75Oa9rK2TpWoAAc97J8c4lu J5/lZe5nMKKr/voppjIcXuKfvnHMd23RRTEAb91umdcqCMzXkx+bS+DEMFTEgl/8 tcE0AiASsddlNq45BHyApgGLI1h29BM3t7spAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUHX9pUHYITlfk6VplA8UaTfPQJkswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0hYOXBVSFlJVGxmazZW cGxBOFVhVGZQUUprcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBqshSw 8+KTxoiyPj/5k5KLX6PskkY2SBc3evu00bhUakXXKlsWtt791TzyuNxZFtEfycMC v4/V7b7y1/h1uzF1qjRRBrRyUmwR1P5voV7NGJXIW9hBiEf2yXmJe8wVNbO0ZPGe qMEENLaEswxoPZqLaS5A1OIig183yAZ5UBWnn4GQRGJF2iRDulQdm7yaDGM0/0dU whQFYYFQzpgtjEwa4hSF2/uxgT5OROpiHPa+scbPah/uikuMV+spnU4pBqG6Vcx2 vgLnzZsCv+jcQrq/fGnD54bf8aY4xtTvNgDbFbNtLnUEqueT4D/mE75tvFvMkOpL m4CimJKITqZY4b5/ -----END CERTIFICATE-----Generated at Mon Jan 12 02:00:19 2026 by rpki-client