This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IZl_Q314Yn0FpZVeXqtO_4dxf1M.roa File: IZl_Q314Yn0FpZVeXqtO_4dxf1M.roa (raw, json) Hash identifier: kJcnZcB5DLgSWQwtCA+VkqoF8Gi+7UzTiIeGs8ubFtk= Subject key identifier: 21:99:7F:43:7D:78:62:7D:05:A5:95:5E:5E:AB:4E:FF:87:71:7F:53 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 6A6A Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IZl_Q314Yn0FpZVeXqtO_4dxf1M.roa Signing time: Tue 10 Jun 2025 20:42:11 +0000 ROA not before: Tue 10 Jun 2025 20:42:11 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 27242 (0x6a6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Jun 10 20:42:11 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=21997F437D78627D05A5955E5EAB4EFF87717F53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fd:20:8e:e0:7b:34:31:aa:be:35:4b:78:f4: b7:1c:c9:ea:93:0d:0b:cd:27:64:a5:80:21:a6:55: 3f:89:19:54:af:e9:a3:f2:34:d0:68:22:19:bc:9f: 2d:a0:df:b4:1b:86:24:09:d3:f5:b3:53:b1:77:47: 4a:2a:c7:9e:27:db:6e:28:1e:23:e5:cf:dc:b5:7f: d2:50:69:dd:16:a7:23:45:c7:5e:f6:56:03:dd:57: dc:3a:f2:53:fb:70:d4:13:d8:5e:89:12:66:21:48: db:13:ba:87:0c:82:97:82:74:ad:21:5d:72:c8:4a: 24:c9:f7:e7:75:ae:8e:22:e6:1e:0d:f3:23:e0:30: 49:f7:83:5d:7f:d8:3b:c5:0f:59:85:6d:ac:83:d7: 58:e7:a1:06:d2:31:83:35:86:c5:f7:24:8b:21:26: 7f:3d:85:b1:e8:ef:6b:0f:46:b9:55:a1:39:b9:6f: 69:e4:f1:35:d4:e1:1f:71:e4:bf:d3:3f:90:20:77: 14:da:bc:ec:22:f7:78:80:99:0b:09:7c:6b:4c:da: 6d:38:d1:33:a6:05:ed:3f:10:69:01:25:85:17:e0: 50:b1:67:f9:63:19:5d:bd:4e:f0:45:99:a5:49:ae: d8:18:3c:d9:83:18:6d:2c:fb:4d:9e:47:b3:7a:63: 05:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:99:7F:43:7D:78:62:7D:05:A5:95:5E:5E:AB:4E:FF:87:71:7F:53 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IZl_Q314Yn0FpZVeXqtO_4dxf1M.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 33:96:bf:62:2a:64:a7:cb:2c:2f:41:3e:fd:77:fd:b0:5c:1f: c7:df:e4:36:26:50:54:e9:a1:b7:96:41:37:a6:b0:55:21:fd: d1:db:c1:65:a0:96:b4:e0:0c:a9:14:1d:72:89:5a:7e:07:e8: f3:88:f2:31:1b:71:c8:ab:86:7c:3c:25:f3:7f:bb:a2:20:f1: eb:6e:0c:22:58:49:e6:52:9b:65:20:03:74:e6:a3:db:1d:dc: 40:4b:21:31:f8:9e:39:93:8a:30:21:82:c7:a8:45:ac:89:ce: 40:a7:45:22:ee:40:80:00:d3:ce:01:a9:a8:c9:b0:a9:7f:fd: db:79:d2:a5:57:c7:dd:e8:f6:b9:d3:59:d8:19:92:6e:ab:a6: cb:e3:0c:e0:d7:86:78:69:98:fe:4c:d2:ac:79:52:50:2f:83: 71:07:01:11:6b:b2:58:0b:4b:13:45:3d:f7:f0:00:c5:46:71: 9a:ad:6c:cd:8d:45:1e:95:66:81:cb:2e:89:98:80:7d:8c:5f: 6a:89:d8:e8:53:e6:95:76:f1:84:7e:36:d6:36:00:04:8c:5f: ab:29:5e:07:57:dc:c6:c1:0c:48:43:93:b7:ce:c2:9c:34:e7: ff:62:20:f7:20:75:b4:83:6a:37:35:b5:08:90:f1:b1:cd:1e: 45:47:be:37 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICamowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MTAy MDQyMTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIxOTk3RjQzN0Q3ODYy N0QwNUE1OTU1RTVFQUI0RUZGODc3MTdGNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCh/SCO4Hs0Maq+NUt49LccyeqTDQvNJ2SlgCGmVT+JGVSv6aPy NNBoIhm8ny2g37QbhiQJ0/WzU7F3R0oqx54n224oHiPlz9y1f9JQad0WpyNFx172 VgPdV9w68lP7cNQT2F6JEmYhSNsTuocMgpeCdK0hXXLISiTJ9+d1ro4i5h4N8yPg MEn3g11/2DvFD1mFbayD11jnoQbSMYM1hsX3JIshJn89hbHo72sPRrlVoTm5b2nk 8TXU4R9x5L/TP5AgdxTavOwi93iAmQsJfGtM2m040TOmBe0/EGkBJYUX4FCxZ/lj GV29TvBFmaVJrtgYPNmDGG0s+02eR7N6YwX5AgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUIZl/Q314Yn0FpZVeXqtO/4dxf1MwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0labF9RMzE0WW4wRnBa VmVYcXRPXzRkeGYxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAzlr9i KmSnyywvQT79d/2wXB/H3+Q2JlBU6aG3lkE3prBVIf3R28FloJa04AypFB1yiVp+ B+jziPIxG3HIq4Z8PCXzf7uiIPHrbgwiWEnmUptlIAN05qPbHdxASyEx+J45k4ow IYLHqEWsic5Ap0Ui7kCAANPOAamoybCpf/3bedKlV8fd6Pa501nYGZJuq6bL4wzg 14Z4aZj+TNKseVJQL4NxBwERa7JYC0sTRT338ADFRnGarWzNjUUelWaByy6JmIB9 jF9qidjoU+aVdvGEfjbWNgAEjF+rKV4HV9zGwQxIQ5O3zsKcNOf/YiD3IHW0g2o3 NbUIkPGxzR5FR743 -----END CERTIFICATE-----Generated at Mon Jan 12 08:10:20 2026 by rpki-client