This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Ym8fa-7W-fn0UEwJ29LMI-jhxGo.roa File: Ym8fa-7W-fn0UEwJ29LMI-jhxGo.roa (raw, json) Hash identifier: PyYBxpZAs8TTn1Rgn4Z/LhxvyFzUPEMeiKGUHq7CrXs= Subject key identifier: 62:6F:1F:6B:EE:D6:F9:F9:F4:50:4C:09:DB:D2:CC:23:E8:E1:C4:6A Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 62D4 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ym8fa-7W-fn0UEwJ29LMI-jhxGo.roa Signing time: Wed 21 May 2025 15:11:01 +0000 ROA not before: Wed 21 May 2025 15:11:01 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 25300 (0x62d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 21 15:11:01 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=626F1F6BEED6F9F9F4504C09DBD2CC23E8E1C46A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0a:45:37:b1:5f:c3:46:e5:32:ef:18:d5:79: 8a:2b:eb:db:4d:15:9e:c3:c9:41:82:ca:9f:8a:a3: 6e:54:66:46:38:55:3d:33:41:9f:e0:03:11:76:39: 3b:0e:de:28:bd:81:04:3e:14:9d:c8:d6:30:d1:18: 9d:f4:a0:1f:97:a1:01:32:cd:b3:3d:ba:b9:be:fa: 35:4c:de:17:1b:1c:e6:e9:b0:97:1d:5b:17:fb:ed: 79:f5:fb:42:a7:7c:1b:4e:eb:37:be:c5:8a:45:05: 26:cb:a9:bd:20:29:f5:0a:e3:dc:11:b5:1c:ce:d5: 9d:ea:c4:50:ca:c3:11:88:d6:5a:ef:89:56:d2:3f: 48:60:f4:03:20:36:0a:89:b5:de:bf:19:9a:6e:8e: ec:47:e7:29:d6:9c:06:64:0f:97:49:43:ad:43:16: 9d:9b:4a:dd:ea:eb:80:f3:9c:3f:92:3d:9d:79:c9: 14:6c:e1:1c:2e:e2:d1:b0:10:9c:18:47:01:51:02: 86:2b:a6:60:1f:34:12:a0:36:5e:85:eb:47:e5:3e: 09:91:de:9c:1d:a7:67:a8:ab:cf:13:78:1b:45:84: 25:f4:b4:b3:65:19:e2:44:23:f3:d6:4a:35:cb:c4: cf:53:fe:ae:3a:50:40:b4:80:2e:37:02:5e:f6:4f: 56:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6F:1F:6B:EE:D6:F9:F9:F4:50:4C:09:DB:D2:CC:23:E8:E1:C4:6A X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Ym8fa-7W-fn0UEwJ29LMI-jhxGo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption af:27:c4:65:3f:30:e8:53:c6:54:fc:98:99:fe:ae:61:ec:3c: 27:ac:c6:10:be:80:3d:39:26:5a:6c:f9:45:fc:16:d3:88:4a: 64:a6:5e:bb:e2:81:f7:f2:75:94:c2:13:b5:74:a7:9f:f2:31: ec:2c:9a:02:b3:50:6f:bf:aa:01:50:52:5b:a9:81:22:4e:f2: 39:ba:b7:e3:59:89:de:b2:07:27:bf:db:44:0f:12:b8:d4:94: 55:38:5b:10:e0:cf:8f:6d:9c:83:05:f6:01:20:96:bd:e2:6b: a1:ed:91:5e:2f:13:8e:86:62:a5:64:17:57:cc:25:d0:b6:31: 66:38:78:65:63:55:0b:e1:7b:90:17:8b:13:94:af:b6:a7:0d: ad:6c:85:80:5f:66:f2:dc:9b:bd:fb:1d:ff:36:0f:64:17:39: 15:41:4c:f6:bd:d3:97:12:e5:f2:17:aa:1a:09:e6:96:24:a7: 80:12:73:59:73:30:17:88:63:0c:28:9d:4a:23:f5:f3:b7:6a: 78:03:f6:ee:d1:f6:49:be:ad:81:cf:13:bb:37:dc:72:da:21: 91:a0:95:d5:65:ed:20:55:03:1e:8b:4d:62:47:fd:de:b1:fc: d8:8c:ca:95:77:a3:2d:a3:cd:d1:6b:32:62:a5:9f:dc:3b:79: 5f:3d:66:14 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICYtQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjEx NTExMDFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYyNkYxRjZCRUVENkY5 RjlGNDUwNEMwOURCRDJDQzIzRThFMUM0NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlCkU3sV/DRuUy7xjVeYor69tNFZ7DyUGCyp+Ko25UZkY4VT0z QZ/gAxF2OTsO3ii9gQQ+FJ3I1jDRGJ30oB+XoQEyzbM9urm++jVM3hcbHObpsJcd Wxf77Xn1+0KnfBtO6ze+xYpFBSbLqb0gKfUK49wRtRzO1Z3qxFDKwxGI1lrviVbS P0hg9AMgNgqJtd6/GZpujuxH5ynWnAZkD5dJQ61DFp2bSt3q64DznD+SPZ15yRRs 4Rwu4tGwEJwYRwFRAoYrpmAfNBKgNl6F60flPgmR3pwdp2eoq88TeBtFhCX0tLNl GeJEI/PWSjXLxM9T/q46UEC0gC43Al72T1YBAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUYm8fa+7W+fn0UEwJ29LMI+jhxGowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1ltOGZhLTdXLWZuMFVF d0oyOUxNSS1qaHhHby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCvJ8Rl PzDoU8ZU/JiZ/q5h7DwnrMYQvoA9OSZabPlF/BbTiEpkpl674oH38nWUwhO1dKef 8jHsLJoCs1Bvv6oBUFJbqYEiTvI5urfjWYnesgcnv9tEDxK41JRVOFsQ4M+PbZyD BfYBIJa94muh7ZFeLxOOhmKlZBdXzCXQtjFmOHhlY1UL4XuQF4sTlK+2pw2tbIWA X2by3Ju9+x3/Ng9kFzkVQUz2vdOXEuXyF6oaCeaWJKeAEnNZczAXiGMMKJ1KI/Xz t2p4A/bu0fZJvq2BzxO7N9xy2iGRoJXVZe0gVQMei01iR/3esfzYjMqVd6Mto83R azJipZ/cO3lfPWYU -----END CERTIFICATE-----Generated at Mon Jan 12 06:31:01 2026 by rpki-client