This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QqGYqisPMALRytHuDJLRlUWaEVM.roa File: QqGYqisPMALRytHuDJLRlUWaEVM.roa (raw, json) Hash identifier: yvgWNTI7RsvQ3BeoCEYrRE+278KZBq52V8g3hhVm1C8= Subject key identifier: 42:A1:98:AA:2B:0F:30:02:D1:CA:D1:EE:0C:92:D1:95:45:9A:11:53 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 63CA Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QqGYqisPMALRytHuDJLRlUWaEVM.roa Signing time: Sat 24 May 2025 04:42:16 +0000 ROA not before: Sat 24 May 2025 04:42:16 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 25546 (0x63ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 24 04:42:16 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=42A198AA2B0F3002D1CAD1EE0C92D195459A1153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:cd:42:f6:ea:c7:dc:1e:ca:f9:77:fa:3b: 1c:2a:05:d0:cc:83:2a:dc:d9:b2:72:3d:e9:91:a5: b0:7c:6b:38:00:4f:62:99:02:ff:78:f2:03:04:f6: 4c:cd:07:af:86:a3:e3:69:12:f3:0c:95:f9:97:43: de:3c:50:3d:7b:26:dd:1c:d0:9a:a3:a2:54:7f:e3: da:81:f4:94:89:0c:fd:ff:11:29:54:dd:0a:2a:3e: 94:fa:f9:2d:d5:d4:01:98:28:8b:0c:d3:0b:ef:5d: 1c:88:19:fd:15:21:c9:0f:ab:81:00:ca:d1:d0:32: ef:8c:e3:4e:28:e3:80:ea:f0:8e:50:0c:42:2f:fc: 1b:89:ce:e3:07:cb:6a:26:32:79:6c:a9:b0:e4:90: 9a:c8:43:0a:e1:11:65:61:42:10:58:c3:1e:e2:c5: d9:2c:65:89:55:d0:6c:5b:c4:c0:4d:6d:bb:82:8e: 7a:4f:d4:51:50:bb:07:25:5c:7f:e4:ee:4a:ec:22: 41:a5:8a:63:c1:76:8e:8b:04:4f:fd:d1:68:e5:26: f6:b6:0b:70:37:bc:6d:9e:c0:f1:ce:dc:a8:20:26: f9:af:3a:cc:cf:68:46:05:68:4c:2a:12:a1:53:4d: 6c:a0:c5:03:c5:41:bb:9e:63:2f:f4:16:0c:8d:2c: 9a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A1:98:AA:2B:0F:30:02:D1:CA:D1:EE:0C:92:D1:95:45:9A:11:53 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QqGYqisPMALRytHuDJLRlUWaEVM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 5e:9a:6d:cb:d5:79:b3:da:30:9b:cd:cc:16:c2:27:a0:ab:fc: 17:09:f7:58:c9:f8:2e:49:34:fa:2a:99:b3:65:38:43:c0:0b: eb:1c:7b:45:8c:be:bd:bd:d8:72:6f:78:37:6e:9f:a9:1e:cf: b1:b6:16:c6:b1:4c:f9:4b:52:ba:0e:10:e3:ae:51:47:54:d8: d8:e8:7e:40:f1:9c:48:0f:39:bc:ce:cb:d7:1d:89:46:f1:26: c2:90:bd:d7:36:42:58:29:f9:a2:cd:7e:cc:ac:84:a3:af:fb: 5a:99:77:6d:ef:59:75:2a:88:28:26:50:ce:c6:1a:8a:98:8e: 87:41:c3:d0:74:a7:ca:e8:cd:0b:7a:8a:42:d2:fb:53:c6:a1: b7:08:17:7b:80:6b:93:73:33:49:a6:bf:81:8f:15:f3:d1:f4: 81:86:a7:8d:38:ae:38:34:08:50:57:d9:89:1a:d0:db:18:90: 9b:52:72:c1:72:20:0d:1c:92:c2:c9:cd:72:74:ee:8a:ed:63: e0:3f:a2:01:24:9f:c0:0e:9d:6c:d7:61:68:6f:6a:ed:a6:b7: c6:03:c2:0a:86:0c:ad:28:b3:24:e2:1a:10:c9:27:88:ee:47: 5e:43:6b:97:d0:fe:8b:6f:31:3f:c1:54:d9:7b:1b:c9:f0:2a: b2:f2:28:a4 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICY8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjQw NDQyMTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQyQTE5OEFBMkIwRjMw MDJEMUNBRDFFRTBDOTJEMTk1NDU5QTExNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuHc1C9urH3B7K+Xf6OxwqBdDMgyrc2bJyPemRpbB8azgAT2KZ Av948gME9kzNB6+Go+NpEvMMlfmXQ948UD17Jt0c0JqjolR/49qB9JSJDP3/ESlU 3QoqPpT6+S3V1AGYKIsM0wvvXRyIGf0VIckPq4EAytHQMu+M404o44Dq8I5QDEIv /BuJzuMHy2omMnlsqbDkkJrIQwrhEWVhQhBYwx7ixdksZYlV0GxbxMBNbbuCjnpP 1FFQuwclXH/k7krsIkGlimPBdo6LBE/90WjlJva2C3A3vG2ewPHO3KggJvmvOszP aEYFaEwqEqFTTWygxQPFQbueYy/0FgyNLJrJAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUQqGYqisPMALRytHuDJLRlUWaEVMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1FxR1lxaXNQTUFMUnl0 SHVESkxSbFVXYUVWTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBemm3L 1Xmz2jCbzcwWwiegq/wXCfdYyfguSTT6KpmzZThDwAvrHHtFjL69vdhyb3g3bp+p Hs+xthbGsUz5S1K6DhDjrlFHVNjY6H5A8ZxIDzm8zsvXHYlG8SbCkL3XNkJYKfmi zX7MrISjr/tamXdt71l1KogoJlDOxhqKmI6HQcPQdKfK6M0LeopC0vtTxqG3CBd7 gGuTczNJpr+BjxXz0fSBhqeNOK44NAhQV9mJGtDbGJCbUnLBciANHJLCyc1ydO6K 7WPgP6IBJJ/ADp1s12Fob2rtprfGA8IKhgytKLMk4hoQySeI7kdeQ2uX0P6LbzE/ wVTZexvJ8Cqy8iik -----END CERTIFICATE-----Generated at Mon Jan 12 07:57:02 2026 by rpki-client