This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/eUIwn72-tZ_v6wpAeRZu98rTfeI.roa File: eUIwn72-tZ_v6wpAeRZu98rTfeI.roa (raw, json) Hash identifier: t1LGQe0I3j6z5lf9AXRjRFBy7Wsm5dvKODwbwZsvX+0= Subject key identifier: 79:42:30:9F:BD:BE:B5:9F:EF:EB:0A:40:79:16:6E:F7:CA:D3:7D:E2 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 6B44 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eUIwn72-tZ_v6wpAeRZu98rTfeI.roa Signing time: Fri 13 Jun 2025 03:34:54 +0000 ROA not before: Fri 13 Jun 2025 03:34:54 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 27460 (0x6b44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Jun 13 03:34:54 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7942309FBDBEB59FEFEB0A4079166EF7CAD37DE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:30:ab:e4:ff:4e:c1:ea:cf:09:88:2c:ec:21: 3d:14:20:3e:89:50:61:1b:58:49:36:99:f0:96:cd: 7c:b2:ad:86:03:08:89:ec:76:92:99:5d:9d:91:d3: 38:e4:67:6c:7c:a1:b1:1b:b5:db:cb:59:71:e1:36: 0b:22:33:09:bd:fa:e3:9f:09:ba:97:d5:73:fc:2f: cd:6f:db:b7:a2:3d:69:02:0f:ab:8f:d5:8f:97:8d: 93:76:06:11:05:f9:86:80:ed:15:62:3a:7e:71:70: 0a:bc:a4:30:74:5b:46:03:79:66:9c:19:42:59:b2: 06:5b:e4:e6:69:7b:bf:1d:8c:9d:4e:6b:e3:46:0f: 11:fb:a7:8b:48:42:8f:d3:5e:39:04:88:51:18:8c: b2:a5:88:0d:bf:53:da:45:6b:d4:10:af:64:43:b0: 25:65:da:43:2b:91:31:52:08:fb:12:28:74:04:1f: 40:f9:31:99:3d:2f:e3:e7:0d:25:ff:01:06:16:b1: 90:ff:0b:72:54:8c:fd:a5:98:64:8c:43:eb:b3:50: a5:e1:7d:03:75:63:8d:21:b2:d0:1a:c0:d6:12:56: 3a:97:5b:d8:13:12:b0:97:dd:67:05:6a:cb:4e:8d: e2:72:de:d7:66:90:91:03:62:51:68:21:79:d5:7d: 1e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:42:30:9F:BD:BE:B5:9F:EF:EB:0A:40:79:16:6E:F7:CA:D3:7D:E2 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/eUIwn72-tZ_v6wpAeRZu98rTfeI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 67:ec:ab:15:de:74:81:6c:70:24:61:fd:ac:5a:2b:f3:40:1a: d4:49:b0:38:60:97:49:ae:98:20:e9:40:ac:ac:c2:29:cd:58: db:a6:b2:e3:a8:4f:81:2f:18:5c:9e:02:af:a7:de:91:5d:a9: 77:20:0e:7d:83:ca:e4:fd:dd:8b:a2:f4:7a:09:93:c8:f3:00: f3:23:4d:a4:05:38:e1:42:06:a6:89:5e:af:a1:80:86:e6:20: 41:4e:8e:de:4e:f3:f3:a8:08:af:16:6c:c8:79:77:9a:bc:61: 31:ce:84:48:ce:55:0a:5a:0a:7e:bd:b1:81:96:57:de:3a:d1: 69:af:54:cb:0d:b2:a1:5c:35:76:44:4f:86:0d:91:0e:84:a6: cb:6f:0e:95:93:a6:44:bb:4b:08:ee:c2:27:a9:0a:c7:a9:76: cc:aa:54:8b:61:22:b8:05:7c:35:38:2f:77:2b:ab:c8:11:10: de:ca:56:ed:f5:9a:4e:13:62:67:17:cf:fd:db:54:dd:7b:52: be:61:3f:12:bb:b6:98:a5:a5:fb:87:55:e9:39:71:04:cb:ef: c0:c2:c8:42:d8:e8:28:fa:a8:47:53:7b:3b:a5:04:fe:cc:3b: 22:f4:dd:7d:5b:a6:e7:79:78:9b:8a:74:76:26:de:83:10:8f: e9:e8:f2:09 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICa0QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MTMw MzM0NTRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc5NDIzMDlGQkRCRUI1 OUZFRkVCMEE0MDc5MTY2RUY3Q0FEMzdERTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrMKvk/07B6s8JiCzsIT0UID6JUGEbWEk2mfCWzXyyrYYDCIns dpKZXZ2R0zjkZ2x8obEbtdvLWXHhNgsiMwm9+uOfCbqX1XP8L81v27eiPWkCD6uP 1Y+XjZN2BhEF+YaA7RViOn5xcAq8pDB0W0YDeWacGUJZsgZb5OZpe78djJ1Oa+NG DxH7p4tIQo/TXjkEiFEYjLKliA2/U9pFa9QQr2RDsCVl2kMrkTFSCPsSKHQEH0D5 MZk9L+PnDSX/AQYWsZD/C3JUjP2lmGSMQ+uzUKXhfQN1Y40hstAawNYSVjqXW9gT ErCX3WcFastOjeJy3tdmkJEDYlFoIXnVfR4BAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUeUIwn72+tZ/v6wpAeRZu98rTfeIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2VVSXduNzItdFpfdjZ3 cEFlUlp1OThyVGZlSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBn7KsV 3nSBbHAkYf2sWivzQBrUSbA4YJdJrpgg6UCsrMIpzVjbprLjqE+BLxhcngKvp96R Xal3IA59g8rk/d2LovR6CZPI8wDzI02kBTjhQgamiV6voYCG5iBBTo7eTvPzqAiv FmzIeXeavGExzoRIzlUKWgp+vbGBllfeOtFpr1TLDbKhXDV2RE+GDZEOhKbLbw6V k6ZEu0sI7sInqQrHqXbMqlSLYSK4BXw1OC93K6vIERDeylbt9ZpOE2JnF8/921Td e1K+YT8Su7aYpaX7h1XpOXEEy+/AwshC2Ogo+qhHU3s7pQT+zDsi9N19W6bneXib inR2Jt6DEI/p6PIJ -----END CERTIFICATE-----Generated at Sun Jan 11 19:04:29 2026 by rpki-client