This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QMBMSNkIeww_f8J0O6vEy5jekGc.roa File: QMBMSNkIeww_f8J0O6vEy5jekGc.roa (raw, json) Hash identifier: g4D+8ennbbrYU6+pA3Vl88tDk88iltxrJ/AY+H7JSK8= Subject key identifier: 40:C0:4C:48:D9:08:7B:0C:3F:7F:C2:74:3B:AB:C4:CB:98:DE:90:67 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 6B32 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QMBMSNkIeww_f8J0O6vEy5jekGc.roa Signing time: Thu 12 Jun 2025 22:42:22 +0000 ROA not before: Thu 12 Jun 2025 22:42:22 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 27442 (0x6b32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Jun 12 22:42:22 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=40C04C48D9087B0C3F7FC2743BABC4CB98DE9067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:8c:3e:8f:c3:50:80:4e:f8:0e:29:0b:42: 92:d2:0c:43:9b:99:c2:97:1d:8b:40:1d:38:67:e4: 5e:c4:a7:b5:05:0d:43:e9:63:61:df:35:4f:2e:6c: 30:bb:d4:4f:7a:8b:08:51:0c:af:ca:da:2d:b9:72: 84:08:db:3e:24:87:35:15:39:b9:b7:00:98:c4:ba: 67:e1:c9:bc:38:db:8a:24:bc:5c:f6:65:58:8b:ec: 5e:a4:91:d6:63:8f:bb:3f:31:f0:c2:15:b5:26:53: 95:04:21:be:e5:2c:78:ca:02:69:10:4b:ac:91:d9: 61:5c:25:6c:51:22:20:b6:e3:a6:b9:78:7b:0b:fd: 13:31:5c:44:e5:7d:2c:51:6c:db:2e:83:31:68:40: 24:f0:d9:55:89:5b:1c:ad:48:5f:e7:07:ae:97:22: eb:0c:95:b3:c9:4a:42:bb:44:76:4d:68:6f:f4:71: 08:3b:cf:0e:20:8a:b5:ce:10:87:cd:5e:f9:45:77: 25:5b:9e:90:78:23:8c:2d:a4:30:b0:37:2b:b5:11: 21:50:9b:29:9e:58:7b:88:6a:20:e7:0a:3b:e4:78: e2:a7:c8:da:01:0e:e1:4b:1e:26:12:37:83:14:c8: 6d:4d:eb:86:c8:b4:86:8d:b2:fe:ed:49:7b:f6:13: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C0:4C:48:D9:08:7B:0C:3F:7F:C2:74:3B:AB:C4:CB:98:DE:90:67 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QMBMSNkIeww_f8J0O6vEy5jekGc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 0f:cc:2e:09:a9:90:af:fb:dd:78:db:b1:da:8a:1e:cb:24:ae: 0c:a0:ac:d0:87:9d:d9:d7:dc:e3:da:da:fb:92:43:f5:fe:13: 8c:14:f9:8a:fa:80:41:4a:6c:1d:51:93:77:05:70:88:f2:6a: fe:97:2e:81:61:a9:ca:e6:c5:6c:05:af:a4:80:bc:df:4b:2e: 25:13:b6:2e:46:63:77:d6:1b:1b:b0:05:23:a9:4e:86:29:59: e6:a5:a6:38:a6:a8:fa:b8:73:66:6b:c1:1c:3e:d6:a3:4b:e8: fc:b7:d1:4e:b0:50:4d:1c:a0:d7:d4:86:56:a3:da:55:e9:7f: d3:34:05:58:28:33:2b:e0:97:02:bc:4f:f0:c0:46:35:91:5f: b4:89:6d:25:bb:ce:47:bc:f2:f3:79:f0:93:c0:db:41:32:89: fc:6f:c5:78:6d:c1:1d:e0:c4:df:9b:71:1f:c8:b9:04:1a:78: c2:ec:f2:0d:93:c3:08:60:ab:ac:91:5c:97:c0:73:de:83:17: d9:8c:59:cb:e7:9f:c5:b0:e2:29:f1:80:57:bc:71:3d:be:f3: a2:2a:99:b2:e5:53:38:92:1c:d7:3d:c4:1d:99:8d:16:4e:3f: e0:bf:c6:7e:6c:77:a1:22:36:bc:60:74:e5:3b:7a:f2:60:20: 50:c4:12:a9 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICazIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MTIy MjQyMjJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQwQzA0QzQ4RDkwODdC MEMzRjdGQzI3NDNCQUJDNENCOThERTkwNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/NYw+j8NQgE74DikLQpLSDEObmcKXHYtAHThn5F7Ep7UFDUPp Y2HfNU8ubDC71E96iwhRDK/K2i25coQI2z4khzUVObm3AJjEumfhybw424okvFz2 ZViL7F6kkdZjj7s/MfDCFbUmU5UEIb7lLHjKAmkQS6yR2WFcJWxRIiC246a5eHsL /RMxXETlfSxRbNsugzFoQCTw2VWJWxytSF/nB66XIusMlbPJSkK7RHZNaG/0cQg7 zw4girXOEIfNXvlFdyVbnpB4I4wtpDCwNyu1ESFQmymeWHuIaiDnCjvkeOKnyNoB DuFLHiYSN4MUyG1N64bItIaNsv7tSXv2EzbfAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUQMBMSNkIeww/f8J0O6vEy5jekGcwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1FNQk1TTmtJZXd3X2Y4 SjBPNnZFeTVqZWtHYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAPzC4J qZCv+91427Haih7LJK4MoKzQh53Z19zj2tr7kkP1/hOMFPmK+oBBSmwdUZN3BXCI 8mr+ly6BYanK5sVsBa+kgLzfSy4lE7YuRmN31hsbsAUjqU6GKVnmpaY4pqj6uHNm a8EcPtajS+j8t9FOsFBNHKDX1IZWo9pV6X/TNAVYKDMr4JcCvE/wwEY1kV+0iW0l u85HvPLzefCTwNtBMon8b8V4bcEd4MTfm3EfyLkEGnjC7PINk8MIYKuskVyXwHPe gxfZjFnL55/FsOIp8YBXvHE9vvOiKpmy5VM4khzXPcQdmY0WTj/gv8Z+bHehIja8 YHTlO3ryYCBQxBKp -----END CERTIFICATE-----Generated at Mon Jan 12 05:56:06 2026 by rpki-client