This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/UAKaI_2rjRIeIpXIOpGF7jww1mo.roa File: UAKaI_2rjRIeIpXIOpGF7jww1mo.roa (raw, json) Hash identifier: xdOoXQ+ayXlSHMwWr9ra6FAjcrmtgz/6g3XFIyq0ALQ= Subject key identifier: 50:02:9A:23:FD:AB:8D:12:1E:22:95:C8:3A:91:85:EE:3C:30:D6:6A Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 626A Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UAKaI_2rjRIeIpXIOpGF7jww1mo.roa Signing time: Tue 20 May 2025 12:40:46 +0000 ROA not before: Tue 20 May 2025 12:40:46 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 25194 (0x626a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 20 12:40:46 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=50029A23FDAB8D121E2295C83A9185EE3C30D66A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d4:1c:e5:3c:d2:c7:f3:27:a7:45:1e:e6:c1: a2:36:d3:1a:1b:16:c7:04:be:08:d0:c6:07:5a:85: 1d:59:30:30:f4:91:d0:27:6e:d5:ff:42:af:89:ac: 48:00:46:29:6a:74:82:df:e8:87:23:d8:ec:86:5f: b5:69:6a:c5:13:b3:77:98:a6:43:8f:6e:f8:ef:88: 8d:11:ef:4e:b8:69:a8:4e:12:2c:7c:49:8a:c7:68: ed:8f:a7:ca:d0:15:8d:0c:59:f1:5c:ec:16:60:9f: af:cc:02:99:82:2f:f3:8d:a3:70:67:b6:5b:ce:1e: e9:bd:23:ef:67:84:ef:f4:52:bd:62:d9:2a:cc:58: 86:8b:e5:fd:65:bc:9d:ef:79:ed:ba:89:40:04:52: ad:b8:9a:67:ba:af:2e:95:16:83:32:59:67:04:65: ab:9c:b5:0b:f5:12:15:90:6b:0e:5f:c1:55:64:de: f1:89:a7:8f:d3:fa:0e:52:77:6e:61:4f:05:90:94: 42:17:7f:a9:ec:46:e5:95:15:18:ca:08:74:93:f4: c4:e3:05:e3:f6:06:bb:d2:56:a3:21:94:e2:f5:fe: 1d:10:59:e3:1d:10:89:e0:7c:88:94:7a:ea:81:76: e5:2c:5f:53:4f:f6:fe:c3:97:0d:50:31:b2:e0:8c: ff:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:02:9A:23:FD:AB:8D:12:1E:22:95:C8:3A:91:85:EE:3C:30:D6:6A X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UAKaI_2rjRIeIpXIOpGF7jww1mo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption b6:c7:b1:38:83:61:f6:93:28:47:ac:95:91:51:b6:93:2b:e0: 34:b0:99:4d:3a:11:a5:cb:f3:03:4d:01:67:66:8c:98:27:e2: 72:56:2d:1e:6f:8d:1e:dc:40:44:07:5d:fa:f5:3f:f9:2e:4d: b1:22:dd:47:44:28:49:64:fe:e4:ba:4a:5c:da:05:61:58:5f: 94:3d:b8:6e:70:a4:f2:98:81:42:da:19:b3:ae:e5:c9:64:4c: a4:39:33:3e:a2:7f:8a:83:5a:1f:0e:6d:b6:05:49:ef:6b:30: f7:52:75:01:7a:12:a6:e4:eb:b0:eb:ed:0f:97:1a:02:39:fd: 94:64:6c:44:6e:d0:56:d2:91:13:7e:ac:d3:09:8b:76:a4:77: 1d:e7:b1:81:1a:3a:7b:aa:d3:69:3d:77:28:24:2a:e3:12:da: 69:18:27:51:2e:7e:9e:d0:40:97:0b:9f:05:c7:dd:d8:a0:2e: 37:75:e6:2c:3e:74:07:d0:f2:6f:86:26:88:f2:03:31:4b:4b: f6:4d:49:64:99:3c:bd:f8:66:02:fc:db:12:24:ba:29:a7:71: a4:d3:82:08:e7:37:10:9e:79:9c:da:33:aa:c4:96:48:b2:9f: cc:9e:fd:4b:98:0d:30:fa:bb:ac:8b:13:c8:0d:7a:23:8c:b9: f1:26:01:ac -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICYmowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjAx MjQwNDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDUwMDI5QTIzRkRBQjhE MTIxRTIyOTVDODNBOTE4NUVFM0MzMEQ2NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo1BzlPNLH8yenRR7mwaI20xobFscEvgjQxgdahR1ZMDD0kdAn btX/Qq+JrEgARilqdILf6Icj2OyGX7VpasUTs3eYpkOPbvjviI0R7064aahOEix8 SYrHaO2Pp8rQFY0MWfFc7BZgn6/MApmCL/ONo3BntlvOHum9I+9nhO/0Ur1i2SrM WIaL5f1lvJ3vee26iUAEUq24mme6ry6VFoMyWWcEZauctQv1EhWQaw5fwVVk3vGJ p4/T+g5Sd25hTwWQlEIXf6nsRuWVFRjKCHST9MTjBeP2BrvSVqMhlOL1/h0QWeMd EIngfIiUeuqBduUsX1NP9v7Dlw1QMbLgjP+/AgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUUAKaI/2rjRIeIpXIOpGF7jww1mowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1VBS2FJXzJyalJJZUlw WElPcEdGN2p3dzFtby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQC2x7E4 g2H2kyhHrJWRUbaTK+A0sJlNOhGly/MDTQFnZoyYJ+JyVi0eb40e3EBEB1369T/5 Lk2xIt1HRChJZP7kukpc2gVhWF+UPbhucKTymIFC2hmzruXJZEykOTM+on+Kg1of Dm22BUnvazD3UnUBehKm5Ouw6+0PlxoCOf2UZGxEbtBW0pETfqzTCYt2pHcd57GB Gjp7qtNpPXcoJCrjEtppGCdRLn6e0ECXC58Fx93YoC43deYsPnQH0PJvhiaI8gMx S0v2TUlkmTy9+GYC/NsSJLopp3Gk04II5zcQnnmc2jOqxJZIsp/Mnv1LmA0w+rus ixPIDXojjLnxJgGs -----END CERTIFICATE-----Generated at Mon Jan 12 05:54:35 2026 by rpki-client