This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/bFeZH6TZSWtoXjpdp8zQN-IUQ3U.roa File: bFeZH6TZSWtoXjpdp8zQN-IUQ3U.roa (raw, json) Hash identifier: LJDRqgPD9y1BBIkDXnEIq/Ins5FkVb40j62Ol2+ZpRI= Subject key identifier: 6C:57:99:1F:A4:D9:49:6B:68:5E:3A:5D:A7:CC:D0:37:E2:14:43:75 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 3D12 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bFeZH6TZSWtoXjpdp8zQN-IUQ3U.roa Signing time: Wed 10 Apr 2024 00:22:38 +0000 ROA not before: Wed 10 Apr 2024 00:22:38 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 15634 (0x3d12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 10 00:22:38 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=6C57991FA4D9496B685E3A5DA7CCD037E2144375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:57:97:99:59:b0:05:b5:83:68:ad:19:7f:9a: 9a:54:95:e5:fb:ae:2a:83:02:a1:1c:82:f1:98:d3: c2:f4:60:68:ef:0e:e7:6c:dd:39:7a:dc:20:ab:b2: f4:b3:64:ed:67:0f:4b:e2:f4:4c:0b:0d:c9:d8:e4: 71:09:4a:1f:05:75:3f:66:53:26:75:9b:96:c2:40: d1:97:be:3a:11:c3:b4:4c:9e:78:43:5b:3f:9c:a3: f7:73:b0:5a:48:94:16:00:f7:12:37:6a:bd:43:01: 34:94:33:10:cc:c8:7a:96:6f:14:88:84:51:1c:ac: e8:f9:cf:45:e7:21:b4:91:8e:3f:36:11:44:8d:c8: 57:a5:04:be:f7:09:7d:18:b5:75:63:1d:bb:b9:6f: b9:3d:4c:c2:6b:5a:48:4e:07:da:70:0e:7a:9b:63: 20:0c:8c:87:0e:b0:e0:06:09:db:56:16:41:be:f1: 69:fb:d2:bc:f3:fb:6f:63:4f:97:38:24:e0:06:5e: e7:5d:2e:c0:ba:c8:63:50:b7:fd:af:14:20:86:76: 35:a1:c4:96:43:61:ff:31:d4:9f:41:14:67:25:14: 40:62:5d:fe:97:8c:fc:80:8a:42:b3:fc:71:7e:e7: c7:c7:d3:cb:e3:30:be:92:6f:ea:16:27:1e:71:30: 7d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:57:99:1F:A4:D9:49:6B:68:5E:3A:5D:A7:CC:D0:37:E2:14:43:75 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/bFeZH6TZSWtoXjpdp8zQN-IUQ3U.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption b2:75:8c:26:ac:cc:98:14:96:ac:fb:52:8b:0d:d8:3b:a7:54: cf:ee:27:86:86:a5:b7:c9:88:c1:ce:16:da:26:48:c5:49:85: bf:a4:8e:e9:9f:e1:5d:cd:3a:b1:e6:28:f4:49:bb:58:6f:a0: 3a:9f:0d:2e:8f:45:b6:0c:a7:da:6e:e9:2c:0f:bf:ec:a1:f8: 58:7b:69:dd:0b:1a:5f:a5:8b:31:bf:df:88:d7:78:2d:d8:d5: 9e:87:94:8b:b8:96:3d:7b:e6:c8:54:e6:71:63:27:39:18:94: a9:8e:64:d7:7b:cc:59:b7:3d:c4:2f:54:b6:77:9a:62:45:44: dc:fd:15:06:e1:44:e0:5a:b2:fd:16:12:8b:9f:7e:36:24:b1: 7f:f2:44:35:b0:85:e4:4f:af:0e:40:52:91:ff:60:72:c1:c8: fa:ac:bc:17:5c:82:f4:9e:55:9b:05:97:3f:42:6d:43:32:22: f5:e9:e6:37:f5:e8:b7:e7:a6:7d:60:07:09:cc:9a:6a:76:24: 96:6e:ca:fd:48:55:53:03:16:c0:07:0c:9b:92:b2:83:7f:d3: 1f:47:99:f2:4f:fb:51:ce:90:6e:8e:cf:1b:20:2c:b7:6d:1c: 1c:2a:88:ce:10:a9:d9:a0:48:13:55:f2:ca:64:98:1c:04:da: ad:8a:c7:fc -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICPRIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTAw MDIyMzhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZDNTc5OTFGQTREOTQ5 NkI2ODVFM0E1REE3Q0NEMDM3RTIxNDQzNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnV5eZWbAFtYNorRl/mppUleX7riqDAqEcgvGY08L0YGjvDuds 3Tl63CCrsvSzZO1nD0vi9EwLDcnY5HEJSh8FdT9mUyZ1m5bCQNGXvjoRw7RMnnhD Wz+co/dzsFpIlBYA9xI3ar1DATSUMxDMyHqWbxSIhFEcrOj5z0XnIbSRjj82EUSN yFelBL73CX0YtXVjHbu5b7k9TMJrWkhOB9pwDnqbYyAMjIcOsOAGCdtWFkG+8Wn7 0rzz+29jT5c4JOAGXuddLsC6yGNQt/2vFCCGdjWhxJZDYf8x1J9BFGclFEBiXf6X jPyAikKz/HF+58fH08vjML6Sb+oWJx5xMH39AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUbFeZH6TZSWtoXjpdp8zQN+IUQ3UwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2JGZVpINlRaU1d0b1hq cGRwOHpRTi1JVVEzVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAsnWMJqzMmBSWrPtSiw3YO6dUz+4nhoal t8mIwc4W2iZIxUmFv6SO6Z/hXc06seYo9Em7WG+gOp8NLo9Ftgyn2m7pLA+/7KH4 WHtp3QsaX6WLMb/fiNd4LdjVnoeUi7iWPXvmyFTmcWMnORiUqY5k13vMWbc9xC9U tneaYkVE3P0VBuFE4Fqy/RYSi59+NiSxf/JENbCF5E+vDkBSkf9gcsHI+qy8F1yC 9J5VmwWXP0JtQzIi9enmN/Xot+emfWAHCcyaanYklm7K/UhVUwMWwAcMm5Kyg3/T H0eZ8k/7Uc6Qbo7PGyAst20cHCqIzhCp2aBIE1XyymSYHATarYrH/A== -----END CERTIFICATE-----Generated at Thu Jan 8 23:55:01 2026 by rpki-client