This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VDp0azGyl45ID2r39Da4_r-jJvA.roa File: VDp0azGyl45ID2r39Da4_r-jJvA.roa (raw, json) Hash identifier: 48MVuW3DMaqEGB0GLXei2t84/JywyZ5P7/bhCKP09bE= Subject key identifier: 54:3A:74:6B:31:B2:97:8E:48:0F:6A:F7:F4:36:B8:FE:BF:A3:26:F0 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 57AA Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VDp0azGyl45ID2r39Da4_r-jJvA.roa Signing time: Wed 15 May 2024 11:24:18 +0000 ROA not before: Wed 15 May 2024 11:24:18 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 22442 (0x57aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 15 11:24:18 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=543A746B31B2978E480F6AF7F436B8FEBFA326F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:1d:7b:72:15:23:31:6a:58:b4:fd:f5:0b: 35:9d:1c:f3:5b:9a:a6:d3:29:d3:ab:84:59:ef:70: b2:db:96:5e:e1:56:2a:8e:4c:61:fa:12:b0:2a:fa: 50:8a:c3:89:a0:79:2d:21:a0:b5:89:8a:e2:73:fd: 67:e2:5f:18:b7:1c:c6:98:94:c4:52:99:b6:ac:3a: b8:b1:e9:dc:f5:ce:66:51:09:90:54:5a:43:ed:e4: c5:aa:e9:c0:2c:56:ce:a6:b4:52:dd:1b:8a:8a:aa: 9a:62:88:0c:16:cb:80:72:4e:52:d3:04:4f:2a:c1: 92:5a:6c:cd:fa:08:2f:0b:ed:2a:71:c5:e9:3c:50: e1:d9:08:74:d1:39:64:48:cf:8b:c7:c8:d5:2f:ac: 2e:97:9b:18:7d:3b:73:4d:d4:40:14:e4:b5:d1:5a: 75:56:9b:70:5d:f8:01:53:d7:50:8e:dc:fd:a2:1a: 9c:98:98:d1:05:7e:be:7c:cd:da:d2:ff:ac:66:8f: a7:04:60:c1:4e:76:f0:17:9b:ed:33:66:da:81:f3: 94:d7:4c:4b:c9:02:62:68:4c:c9:2e:31:f5:b1:13: a6:6d:cc:35:82:b9:95:66:7b:a2:aa:bc:c4:4d:8a: b8:14:2f:3c:c4:bc:00:50:5c:95:2f:10:61:34:0b: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3A:74:6B:31:B2:97:8E:48:0F:6A:F7:F4:36:B8:FE:BF:A3:26:F0 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VDp0azGyl45ID2r39Da4_r-jJvA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6d:b1:27:a2:45:b8:e9:04:ca:e6:72:d1:a4:a0:19:63:65:82: cf:b7:f9:66:b0:d4:bb:e3:d4:21:c6:49:63:53:63:1d:73:f9: 9c:e0:b0:0b:db:ad:74:4a:73:a0:3a:42:1c:f5:d8:66:c0:01: 2f:89:b4:de:9c:3f:33:c1:b2:a0:ac:44:96:9f:83:49:93:2f: ef:2d:99:4c:61:0e:ed:36:30:e6:3b:ad:5e:20:43:52:ea:85: 19:79:e8:a1:97:27:d6:f7:3b:2d:cf:72:7f:a7:d5:41:3b:cb: 21:47:02:e8:b0:20:19:98:de:4a:5f:37:2d:79:06:22:9f:59: a3:a8:73:3e:62:66:1a:04:f5:32:02:0c:b1:a6:52:8d:7c:93: 41:0b:ea:34:0c:83:09:51:20:40:3a:e8:54:ac:6c:1e:3f:e6: 17:cc:7b:e5:cb:f8:e4:37:2d:26:3c:6f:42:6e:84:e5:91:8a: 3c:60:52:f9:a2:f3:f4:03:3c:97:aa:6a:e2:bb:fe:52:6f:75: 23:73:b5:20:f0:6d:af:51:f6:a2:0e:27:0d:9b:58:d6:50:08: bb:4c:fc:2c:26:73:bf:95:f7:f3:74:6d:e4:f2:e4:b0:2f:6b: 2b:e6:68:a1:8b:b0:9b:e3:24:38:31:34:cc:4a:33:46:e4:d6: 43:4e:52:6a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICV6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTUx MTI0MThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDU0M0E3NDZCMzFCMjk3 OEU0ODBGNkFGN0Y0MzZCOEZFQkZBMzI2RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp4h17chUjMWpYtP31CzWdHPNbmqbTKdOrhFnvcLLbll7hViqO TGH6ErAq+lCKw4mgeS0hoLWJiuJz/WfiXxi3HMaYlMRSmbasOrix6dz1zmZRCZBU WkPt5MWq6cAsVs6mtFLdG4qKqppiiAwWy4ByTlLTBE8qwZJabM36CC8L7Spxxek8 UOHZCHTROWRIz4vHyNUvrC6Xmxh9O3NN1EAU5LXRWnVWm3Bd+AFT11CO3P2iGpyY mNEFfr58zdrS/6xmj6cEYMFOdvAXm+0zZtqB85TXTEvJAmJoTMkuMfWxE6ZtzDWC uZVme6KqvMRNirgULzzEvABQXJUvEGE0C1hDAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUVDp0azGyl45ID2r39Da4/r+jJvAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1ZEcDBhekd5bDQ1SUQy cjM5RGE0X3Itakp2QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAbbEnokW46QTK5nLRpKAZY2WCz7f5ZrDU u+PUIcZJY1NjHXP5nOCwC9utdEpzoDpCHPXYZsABL4m03pw/M8GyoKxElp+DSZMv 7y2ZTGEO7TYw5jutXiBDUuqFGXnooZcn1vc7Lc9yf6fVQTvLIUcC6LAgGZjeSl83 LXkGIp9Zo6hzPmJmGgT1MgIMsaZSjXyTQQvqNAyDCVEgQDroVKxsHj/mF8x75cv4 5DctJjxvQm6E5ZGKPGBS+aLz9AM8l6pq4rv+Um91I3O1IPBtr1H2og4nDZtY1lAI u0z8LCZzv5X383Rt5PLksC9rK+ZooYuwm+MkODE0zEozRuTWQ05Sag== -----END CERTIFICATE-----Generated at Sun Jan 11 23:04:06 2026 by rpki-client