This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Xo5LAw_30hWYz3kf-K4LjPGGC4g.roa File: Xo5LAw_30hWYz3kf-K4LjPGGC4g.roa (raw, json) Hash identifier: 6AVo2E69k8QvJbMv90NhSAw0SRMlpepuJYu8n9mfsBw= Subject key identifier: 5E:8E:4B:03:0F:F7:D2:15:98:CF:79:1F:F8:AE:0B:8C:F1:86:0B:88 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 3BBD Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Xo5LAw_30hWYz3kf-K4LjPGGC4g.roa Signing time: Mon 08 Apr 2024 05:52:33 +0000 ROA not before: Mon 08 Apr 2024 05:52:33 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.239.0.0/19 maxlen: 19 101.78.32.0/19 maxlen: 19 103.35.0.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 15293 (0x3bbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 8 05:52:33 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=5E8E4B030FF7D21598CF791FF8AE0B8CF1860B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:84:ee:82:fd:bc:1e:67:27:7e:3f:ad:cc:5c: 05:e0:04:2a:8a:e6:06:cb:00:ce:15:af:9e:87:14: 34:5a:78:d2:d0:a1:4e:10:37:d9:64:34:c5:f0:3d: 49:b1:ab:b0:f4:90:c5:c3:ab:b3:3c:49:e4:a7:1e: 5b:b0:1c:96:66:aa:92:1c:2f:13:c3:2a:19:9f:fd: 56:36:de:fb:64:46:49:11:82:d2:bc:88:ad:91:15: 85:8b:f5:7c:b9:af:77:43:fa:78:16:1d:d2:b1:98: b7:b7:ab:8b:d9:b8:bd:77:c4:12:e6:84:cd:20:10: 5b:8a:68:4b:d9:fc:ee:b1:39:ac:f8:b8:3f:b0:01: 87:26:27:57:c9:d2:ff:8c:52:b8:4e:33:b6:ed:c3: 42:10:5a:bd:c0:be:1c:65:6c:dd:1a:82:fb:63:8a: 64:4c:76:06:3c:97:12:4c:5a:d1:7b:8e:8b:a2:60: d8:7f:f6:8a:7f:04:34:65:fe:11:4c:be:2f:eb:8b: 43:0c:36:32:f8:7b:12:a3:2b:ad:04:7b:ab:b4:b5: b2:bb:85:d7:23:ae:f1:9a:50:42:c7:08:b5:c8:88: 89:f4:07:21:40:f3:84:a9:f8:31:35:c4:52:e1:b0: 20:b4:1e:78:22:35:f8:a9:81:10:99:1f:67:a8:39: 23:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8E:4B:03:0F:F7:D2:15:98:CF:79:1F:F8:AE:0B:8C:F1:86:0B:88 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Xo5LAw_30hWYz3kf-K4LjPGGC4g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.0.0/19 101.78.32.0/19 103.35.0.0/19 Signature Algorithm: sha256WithRSAEncryption 58:5a:08:61:06:99:7e:8d:38:31:32:21:07:5c:b4:c5:2e:45: 9d:cf:d7:aa:24:e0:03:57:77:8c:46:54:9a:06:7d:ca:49:06: c3:e0:ec:a4:0d:26:4b:d9:05:af:c0:ed:ea:37:1f:76:bc:96: 04:f3:0a:b8:07:bb:56:66:43:ee:cf:15:a5:8b:cb:d6:5e:6e: 1b:b4:da:20:ec:21:66:f5:4c:3b:35:be:08:5b:6b:00:95:d0: d5:b3:25:3a:a4:ff:0d:2b:0a:36:06:fc:24:53:ef:fa:3c:4b: e7:3b:1c:52:7c:84:f9:d0:4d:1b:5c:49:73:a1:21:2f:9e:b4: e6:cc:06:4d:f1:5d:97:0d:04:ea:63:1c:87:40:e1:5e:ea:4c: ab:d5:0a:f3:de:00:a5:47:15:0a:3d:b6:d2:65:53:e1:a5:79: 90:9f:64:ef:02:57:04:3e:1a:61:25:d3:f4:f2:55:98:c4:11: 72:62:97:98:88:8f:10:5d:b3:11:1f:6f:df:f8:0a:67:32:40: fc:01:db:28:06:f4:9a:f4:08:fc:6c:78:04:81:0a:e7:5c:8e: 4d:0a:90:03:9f:d2:67:44:60:5d:cf:a9:88:e6:0a:59:dc:12: 18:11:cd:c7:00:2d:54:c4:02:99:68:dc:aa:c9:ef:68:08:d7: cc:bb:00:72 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgICO70wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDgw NTUyMzNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVFOEU0QjAzMEZGN0Qy MTU5OENGNzkxRkY4QUUwQjhDRjE4NjBCODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPhO6C/bweZyd+P63MXAXgBCqK5gbLAM4Vr56HFDRaeNLQoU4Q N9lkNMXwPUmxq7D0kMXDq7M8SeSnHluwHJZmqpIcLxPDKhmf/VY23vtkRkkRgtK8 iK2RFYWL9Xy5r3dD+ngWHdKxmLe3q4vZuL13xBLmhM0gEFuKaEvZ/O6xOaz4uD+w AYcmJ1fJ0v+MUrhOM7btw0IQWr3AvhxlbN0agvtjimRMdgY8lxJMWtF7jouiYNh/ 9op/BDRl/hFMvi/ri0MMNjL4exKjK60Ee6u0tbK7hdcjrvGaUELHCLXIiIn0ByFA 84Sp+DE1xFLhsCC0HngiNfipgRCZH2eoOSNbAgMBAAGjggH9MIIB+TAdBgNVHQ4E FgQUXo5LAw/30hWYz3kf+K4LjPGGC4gwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1hvNUxBd18zMGhXWXoz a2YtSzRMalBHR0M0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAFhaCGEGmX6NODEy IQdctMUuRZ3P16ok4ANXd4xGVJoGfcpJBsPg7KQNJkvZBa/A7eo3H3a8lgTzCrgH u1ZmQ+7PFaWLy9Zebhu02iDsIWb1TDs1vghbawCV0NWzJTqk/w0rCjYG/CRT7/o8 S+c7HFJ8hPnQTRtcSXOhIS+etObMBk3xXZcNBOpjHIdA4V7qTKvVCvPeAKVHFQo9 ttJlU+GleZCfZO8CVwQ+GmEl0/TyVZjEEXJil5iIjxBdsxEfb9/4CmcyQPwB2ygG 9Jr0CPxseASBCudcjk0KkAOf0mdEYF3PqYjmClncEhgRzccALVTEAplo3KrJ72gI 18y7AHI= -----END CERTIFICATE-----Generated at Mon Jan 12 14:27:31 2026 by rpki-client