This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PNOBKVwN0O8rrNYs8-IDePmtp3c.roa File: PNOBKVwN0O8rrNYs8-IDePmtp3c.roa (raw, json) Hash identifier: hJgI9Rf3SN5493yiwfCVOBKQ2c2xYoPxgBA2/lLxgQ0= Subject key identifier: 3C:D3:81:29:5C:0D:D0:EF:2B:AC:D6:2C:F3:E2:03:78:F9:AD:A7:77 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 6084 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PNOBKVwN0O8rrNYs8-IDePmtp3c.roa Signing time: Thu 15 May 2025 11:10:27 +0000 ROA not before: Thu 15 May 2025 11:10:27 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 24708 (0x6084) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 15 11:10:27 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=3CD381295C0DD0EF2BACD62CF3E20378F9ADA777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:bf:54:a5:47:74:7d:60:a6:15:01:f5:e8: ef:1b:b1:17:8e:48:43:9e:48:9f:5c:0b:86:05:f6: 60:9f:29:e6:93:64:41:3c:64:13:fa:ca:c3:74:12: 0e:63:2b:bb:b5:1b:f6:48:20:aa:26:11:be:8a:a3: dc:38:50:18:7b:fa:94:e3:11:20:4d:be:a5:68:4f: 56:1f:5f:b3:4d:c4:f1:48:7b:b8:2f:78:bd:cf:04: 9f:ec:3a:89:8b:18:7c:f4:c3:94:b9:b9:8f:21:3d: 22:04:f0:81:51:a4:c8:9a:0d:53:a2:ab:a5:e9:8c: 98:71:4b:8a:85:94:5f:91:57:e8:5b:3c:22:f7:7c: 98:a3:b1:ee:b1:eb:45:52:94:80:b9:1e:0f:f8:59: a4:b2:33:0a:0c:e9:b7:41:3c:45:a2:7e:f8:99:c1: 83:35:34:d5:d0:51:7a:39:50:9c:10:ce:1b:06:36: 23:df:ba:01:91:54:7b:be:b5:a5:8d:8d:81:8c:cd: 21:12:8b:20:1d:81:05:b6:14:6b:c8:d4:35:47:7c: 69:1c:14:fe:40:29:2a:3e:cb:5f:70:ea:0a:0c:fc: 63:37:56:2c:ec:8a:69:ed:26:55:9c:10:9c:f6:f7: 2c:39:10:32:ba:40:95:a8:85:dc:a2:e3:49:a2:e7: 0e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D3:81:29:5C:0D:D0:EF:2B:AC:D6:2C:F3:E2:03:78:F9:AD:A7:77 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PNOBKVwN0O8rrNYs8-IDePmtp3c.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 77:fc:6c:e2:f4:02:b1:f7:dd:45:6d:96:fb:b4:e7:d4:e7:5c: ad:96:f7:0d:7f:d6:f7:40:8a:b8:7f:09:17:fe:bc:b7:5e:55: cf:83:a7:67:15:fc:c7:27:d8:ad:ce:d5:52:9f:30:bf:dc:6d: 7b:00:49:44:b1:1d:32:6c:d6:6d:0b:85:b3:da:0b:85:79:bc: bb:53:4f:65:2b:66:70:36:3d:01:8a:18:f7:6d:a2:44:b6:3f: e6:83:23:17:23:59:c2:10:c3:ac:41:a5:64:db:37:03:fd:29: 37:50:b3:96:2f:d0:94:4f:bd:ef:92:2c:73:f9:1b:c6:ae:fa: eb:2e:3f:2e:ec:be:15:53:f8:fd:01:ea:fd:eb:62:a1:8c:8c: 31:b9:a1:5c:9e:fa:88:eb:27:cd:93:0a:c4:b1:44:0c:14:36: da:b6:11:0c:8a:05:e8:e7:2b:0e:5a:cb:f4:a4:ec:1c:c4:72: 2c:96:04:ae:52:a8:08:d6:e1:3f:aa:7d:fc:55:75:77:20:a7: 0b:22:83:2a:1f:8b:6e:10:9b:1e:01:e9:ef:a2:31:9c:dd:69: 15:b2:6b:d5:48:23:a9:88:60:51:2f:99:9a:14:d0:78:65:8c: 20:74:47:8a:49:aa:ce:3d:3f:36:61:fa:ee:84:1c:c2:fc:32: 44:92:1d:69 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICYIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTUx MTEwMjdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDNDRDM4MTI5NUMwREQw RUYyQkFDRDYyQ0YzRTIwMzc4RjlBREE3NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxFb9UpUd0fWCmFQH16O8bsReOSEOeSJ9cC4YF9mCfKeaTZEE8 ZBP6ysN0Eg5jK7u1G/ZIIKomEb6Ko9w4UBh7+pTjESBNvqVoT1YfX7NNxPFIe7gv eL3PBJ/sOomLGHz0w5S5uY8hPSIE8IFRpMiaDVOiq6XpjJhxS4qFlF+RV+hbPCL3 fJijse6x60VSlIC5Hg/4WaSyMwoM6bdBPEWifviZwYM1NNXQUXo5UJwQzhsGNiPf ugGRVHu+taWNjYGMzSESiyAdgQW2FGvI1DVHfGkcFP5AKSo+y19w6goM/GM3Vizs imntJlWcEJz29yw5EDK6QJWohdyi40mi5w6pAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUPNOBKVwN0O8rrNYs8+IDePmtp3cwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1BOT0JLVndOME84cnJO WXM4LUlEZVBtdHAzYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQB3/Gzi 9AKx991FbZb7tOfU51ytlvcNf9b3QIq4fwkX/ry3XlXPg6dnFfzHJ9itztVSnzC/ 3G17AElEsR0ybNZtC4Wz2guFeby7U09lK2ZwNj0Bihj3baJEtj/mgyMXI1nCEMOs QaVk2zcD/Sk3ULOWL9CUT73vkixz+RvGrvrrLj8u7L4VU/j9Aer962KhjIwxuaFc nvqI6yfNkwrEsUQMFDbathEMigXo5ysOWsv0pOwcxHIslgSuUqgI1uE/qn38VXV3 IKcLIoMqH4tuEJseAenvojGc3WkVsmvVSCOpiGBRL5maFNB4ZYwgdEeKSarOPT82 YfruhBzC/DJEkh1p -----END CERTIFICATE-----Generated at Fri Jan 9 16:31:45 2026 by rpki-client