This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/XRky-1o4dSRqq4JZHM8zkvDlfAw.roa File: XRky-1o4dSRqq4JZHM8zkvDlfAw.roa (raw, json) Hash identifier: gEU1BGTVwmCr8fzpD5nojpie3Kema+I+tVh1uxRtNfo= Subject key identifier: 5D:19:32:FB:5A:38:75:24:6A:AB:82:59:1C:CF:33:92:F0:E5:7C:0C Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 610C Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XRky-1o4dSRqq4JZHM8zkvDlfAw.roa Signing time: Fri 16 May 2025 21:10:39 +0000 ROA not before: Fri 16 May 2025 21:10:39 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 24844 (0x610c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 16 21:10:39 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=5D1932FB5A3875246AAB82591CCF3392F0E57C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:86:32:a0:d8:e2:eb:95:ff:00:30:11:67:1a: 81:da:ff:b0:94:99:f6:6e:ca:d5:3b:f7:74:95:0f: f7:02:3c:7e:86:b8:d3:2c:65:72:ce:6f:87:41:d2: 92:b8:fc:db:09:d7:ff:d8:bd:92:25:86:46:8f:d2: c2:7b:50:a7:72:1d:e1:2f:f7:30:79:93:7f:fe:0f: 72:fb:4b:cc:53:ba:2d:2c:a4:a9:d1:ea:c2:b0:fb: fd:b9:72:00:bd:95:e2:8d:4f:4f:a7:2e:10:23:56: cb:45:07:a5:8b:21:bc:a6:42:3e:e5:61:b9:35:99: 12:5a:00:96:fb:1c:42:39:7c:38:3b:e5:51:e2:79: 1c:30:ff:b4:b6:9a:02:76:ea:f6:cc:8b:7c:97:55: d7:9e:27:69:6d:1a:bb:64:d3:c5:a4:6a:f5:5e:2c: f8:8c:b9:bf:d9:a8:9b:de:3c:73:10:ee:36:aa:25: 2f:b6:c8:44:67:93:f1:29:84:e9:5b:b8:31:ac:81: 6f:9e:02:b7:73:b8:99:5a:a9:ec:7f:cb:47:71:01: 34:ef:ed:39:f7:09:d7:5b:2c:ef:e4:c3:33:a9:f1: f4:db:39:75:e5:58:ec:9f:5b:77:f7:1c:d1:a8:06: 70:9b:c7:67:b0:1c:30:bb:b7:6b:e8:7e:8b:ca:28: e2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:19:32:FB:5A:38:75:24:6A:AB:82:59:1C:CF:33:92:F0:E5:7C:0C X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XRky-1o4dSRqq4JZHM8zkvDlfAw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 99:3a:96:bc:01:a7:23:e2:53:6c:1c:65:44:fd:bb:3c:de:b4: ec:5b:7a:b0:d2:2f:a6:f1:6f:7b:e0:e9:e0:54:fe:c9:66:38: b2:bb:9d:b5:3a:46:b6:69:03:36:c5:44:d0:1a:1a:1b:97:78: b6:79:7a:cd:12:e1:98:93:d0:fb:a3:fa:c0:84:55:18:b0:de: ad:93:eb:78:36:4c:f2:ac:47:94:5d:9d:f1:cc:70:3d:27:a0: b2:d4:4c:03:8d:d9:c2:d1:5e:73:14:37:6c:e7:0a:13:00:5a: 88:d3:82:72:bb:67:b9:96:93:e6:22:7e:ba:e0:ff:2a:77:fd: ef:2f:08:56:50:a7:64:15:bd:bc:20:df:24:fa:e5:53:ba:f0: fe:65:5f:13:76:02:a5:04:33:9e:80:89:0e:e1:a9:14:20:2b: fe:b3:3b:b8:63:08:f6:2f:c3:7a:df:8b:61:83:e8:7b:82:ce: 8a:7d:af:ff:00:37:22:d3:43:38:7b:77:f9:01:49:f5:73:a8: 05:39:dd:6e:13:3b:31:fe:fc:69:d5:86:3b:56:de:d4:9e:93: c5:59:8a:e3:1a:d6:2e:b8:e2:9c:76:6d:62:72:0b:4c:c4:78: 51:41:66:29:90:b5:fc:bc:16:7c:9b:90:6b:85:b1:55:3f:07: dc:6b:99:54 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICYQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTYy MTEwMzlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDVEMTkzMkZCNUEzODc1 MjQ2QUFCODI1OTFDQ0YzMzkyRjBFNTdDMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzhjKg2OLrlf8AMBFnGoHa/7CUmfZuytU793SVD/cCPH6GuNMs ZXLOb4dB0pK4/NsJ1//YvZIlhkaP0sJ7UKdyHeEv9zB5k3/+D3L7S8xTui0spKnR 6sKw+/25cgC9leKNT0+nLhAjVstFB6WLIbymQj7lYbk1mRJaAJb7HEI5fDg75VHi eRww/7S2mgJ26vbMi3yXVdeeJ2ltGrtk08WkavVeLPiMub/ZqJvePHMQ7jaqJS+2 yERnk/EphOlbuDGsgW+eArdzuJlaqex/y0dxATTv7Tn3CddbLO/kwzOp8fTbOXXl WOyfW3f3HNGoBnCbx2ewHDC7t2vofovKKOJnAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUXRky+1o4dSRqq4JZHM8zkvDlfAwwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1hSa3ktMW80ZFNScXE0 SlpITTh6a3ZEbGZBdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCZOpa8 Aacj4lNsHGVE/bs83rTsW3qw0i+m8W974OngVP7JZjiyu521Oka2aQM2xUTQGhob l3i2eXrNEuGYk9D7o/rAhFUYsN6tk+t4NkzyrEeUXZ3xzHA9J6Cy1EwDjdnC0V5z FDds5woTAFqI04Jyu2e5lpPmIn664P8qd/3vLwhWUKdkFb28IN8k+uVTuvD+ZV8T dgKlBDOegIkO4akUICv+szu4Ywj2L8N634thg+h7gs6Kfa//ADci00M4e3f5AUn1 c6gFOd1uEzsx/vxp1YY7Vt7UnpPFWYrjGtYuuOKcdm1icgtMxHhRQWYpkLX8vBZ8 m5BrhbFVPwfca5lU -----END CERTIFICATE-----Generated at Thu Jan 1 03:50:34 2026 by rpki-client