This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/WhZKPKe1lI8xHJVL0UKX5YdxKnM.roa File: WhZKPKe1lI8xHJVL0UKX5YdxKnM.roa (raw, json) Hash identifier: +14pFLxONS8mHzXd9RD0dsYW6iumnsKvtTxueC0d3Mo= Subject key identifier: 5A:16:4A:3C:A7:B5:94:8F:31:1C:95:4B:D1:42:97:E5:87:71:2A:73 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 432A Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WhZKPKe1lI8xHJVL0UKX5YdxKnM.roa Signing time: Thu 18 Apr 2024 03:22:58 +0000 ROA not before: Thu 18 Apr 2024 03:22:58 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 17194 (0x432a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 18 03:22:58 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=5A164A3CA7B5948F311C954BD14297E587712A73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:de:e6:1d:0d:1b:45:0c:6d:33:0b:5c:ef:ee: 76:35:e7:16:08:c5:bc:97:5f:68:6d:3f:01:e5:19: d3:0a:cd:39:ab:46:ae:09:60:0d:c1:cf:0a:d9:1e: c6:72:ef:60:57:5d:19:8f:4a:55:b9:33:87:f1:63: 30:c2:c1:c0:5e:e8:0b:49:95:17:45:f7:50:f5:99: 0a:83:ef:23:79:a0:06:81:b4:57:77:3d:cb:5f:e3: ff:2a:7f:4d:01:f8:e1:96:68:b7:88:b1:db:28:27: 31:fe:a6:33:dc:c6:98:3a:3a:df:7e:08:64:18:5c: 6f:40:58:64:30:5b:c1:cf:4f:e6:f5:6b:92:75:36: f2:3d:ad:66:b7:68:cc:b6:88:12:a3:c5:df:1e:01: 0d:bf:21:0d:f2:7a:c9:e5:99:7e:42:b6:67:ff:75: 02:58:8a:3c:bb:22:61:a5:c3:0b:dc:0e:1b:9f:09: 34:d5:49:2b:03:fb:56:f9:1c:c6:5e:0e:51:91:98: 0a:bb:c1:44:aa:92:c7:13:1a:85:6d:e5:db:69:6c: f6:b6:b5:75:09:b3:96:14:08:9d:13:69:7e:46:fc: c5:90:d3:38:2f:cf:78:72:3f:2a:59:88:3f:9c:4d: 73:32:5c:0a:ed:27:fb:54:c4:35:21:3d:99:c0:fb: b5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:16:4A:3C:A7:B5:94:8F:31:1C:95:4B:D1:42:97:E5:87:71:2A:73 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/WhZKPKe1lI8xHJVL0UKX5YdxKnM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption 71:11:53:46:6f:22:2d:b2:03:27:61:e9:2a:37:4b:d0:84:b1: 86:d7:d3:a9:46:9a:1d:38:ec:cf:14:6f:36:6c:ed:32:a4:86: 69:c6:41:a8:0a:78:61:ff:ba:79:23:c6:3b:78:9b:60:c7:9d: 37:a3:81:b3:52:8e:77:2c:47:c4:81:18:4d:36:d5:e6:d1:e8: 8d:e7:38:68:73:cf:61:19:b0:6b:e8:69:11:16:44:cb:d4:5d: e8:05:0f:81:89:e9:87:2f:7e:de:fb:22:18:2f:0c:32:a5:0e: 45:ca:77:60:66:4c:1d:f8:59:ee:ac:74:a8:07:bc:a9:dd:dd: eb:f9:b5:ca:01:0c:fa:01:34:d1:76:d3:63:68:40:76:bc:27: 64:1f:22:a2:7e:47:27:89:dc:1a:50:fe:8d:e0:f5:25:3d:2b: 63:4f:3c:ce:0e:3f:a7:ec:3c:e3:a9:9d:cd:8a:60:7d:f5:49: cf:74:70:92:5b:f7:bf:a8:ff:38:74:ea:0a:33:ca:d9:e8:57: ae:43:ee:32:52:f7:14:b3:44:ad:dd:b5:0b:1c:20:15:35:ca: 18:35:3b:16:8c:f6:c8:e1:0c:3c:63:d4:c6:dc:5d:ea:67:b4: e2:7e:5b:61:f2:3b:c8:62:3d:b2:eb:b4:76:84:da:f1:25:f6: 47:5b:f2:0f -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICQyowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTgw MzIyNThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVBMTY0QTNDQTdCNTk0 OEYzMTFDOTU0QkQxNDI5N0U1ODc3MTJBNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD63uYdDRtFDG0zC1zv7nY15xYIxbyXX2htPwHlGdMKzTmrRq4J YA3BzwrZHsZy72BXXRmPSlW5M4fxYzDCwcBe6AtJlRdF91D1mQqD7yN5oAaBtFd3 Pctf4/8qf00B+OGWaLeIsdsoJzH+pjPcxpg6Ot9+CGQYXG9AWGQwW8HPT+b1a5J1 NvI9rWa3aMy2iBKjxd8eAQ2/IQ3yesnlmX5Ctmf/dQJYijy7ImGlwwvcDhufCTTV SSsD+1b5HMZeDlGRmAq7wUSqkscTGoVt5dtpbPa2tXUJs5YUCJ0TaX5G/MWQ0zgv z3hyPypZiD+cTXMyXArtJ/tUxDUhPZnA+7VZAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUWhZKPKe1lI8xHJVL0UKX5YdxKnMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1doWktQS2UxbEk4eEhK VkwwVUtYNVlkeEtuTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAcRFTRm8iLbIDJ2HpKjdL0ISxhtfTqUaa HTjszxRvNmztMqSGacZBqAp4Yf+6eSPGO3ibYMedN6OBs1KOdyxHxIEYTTbV5tHo jec4aHPPYRmwa+hpERZEy9Rd6AUPgYnphy9+3vsiGC8MMqUORcp3YGZMHfhZ7qx0 qAe8qd3d6/m1ygEM+gE00XbTY2hAdrwnZB8ion5HJ4ncGlD+jeD1JT0rY088zg4/ p+w846mdzYpgffVJz3Rwklv3v6j/OHTqCjPK2ehXrkPuMlL3FLNErd21CxwgFTXK GDU7Foz2yOEMPGPUxtxd6me04n5bYfI7yGI9suu0doTa8SX2R1vyDw== -----END CERTIFICATE-----Generated at Mon Jan 12 13:44:30 2026 by rpki-client