This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/fmpXUJeXraEBYJGyEME5ERz4l4g.roa File: fmpXUJeXraEBYJGyEME5ERz4l4g.roa (raw, json) Hash identifier: I9W6A7DyVbVsIfgVJTygeH1w9VMqo6b2Bt4BJq2AKlo= Subject key identifier: 7E:6A:57:50:97:97:AD:A1:01:60:91:B2:10:C1:39:11:1C:F8:97:88 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 483E Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fmpXUJeXraEBYJGyEME5ERz4l4g.roa Signing time: Wed 24 Apr 2024 21:53:20 +0000 ROA not before: Wed 24 Apr 2024 21:53:20 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 18494 (0x483e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 24 21:53:20 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=7E6A57509797ADA1016091B210C139111CF89788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1f:23:51:a0:cd:cd:f2:6f:36:fb:d7:e8:b4: d1:25:e8:a9:89:e7:3e:d9:3d:cb:49:7b:4a:3b:69: bf:56:ab:15:96:c3:24:68:a8:a6:9c:68:f7:c9:2f: 7b:f0:d4:65:95:71:34:9e:8b:7a:66:5f:b5:4b:83: 1e:59:d6:d7:96:15:22:42:d8:ac:db:a7:a9:52:63: 21:a4:9a:10:17:9d:2f:e8:44:34:59:bb:48:19:f7: 16:29:62:2b:e7:47:42:11:1a:87:f5:10:65:76:f8: fd:3e:0d:bf:99:c8:6d:bc:c4:ae:1a:0a:62:dd:07: 0a:9a:24:55:c1:20:2e:95:4b:df:a8:83:4f:a3:a6: 1d:dd:ee:0a:c7:8c:0f:a9:b4:0d:fb:39:15:f5:4d: f3:85:03:0c:32:4f:1a:3a:a9:e1:e6:82:90:a0:a9: 9f:18:0f:74:50:a2:a2:62:45:4d:e5:b5:ff:b1:0d: e8:bb:34:17:8b:b9:be:4b:2d:99:09:df:53:b8:c8: 92:d8:01:70:af:4d:a4:74:28:bd:b6:77:39:c0:9b: c6:71:d9:f9:5f:4e:e2:17:c5:a3:45:82:4f:e5:f4: 5b:93:c5:c5:b5:84:6b:a9:a8:da:8b:50:01:46:f5: d3:b7:e6:13:ff:42:b2:68:bb:54:e0:2a:1c:6f:fb: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6A:57:50:97:97:AD:A1:01:60:91:B2:10:C1:39:11:1C:F8:97:88 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fmpXUJeXraEBYJGyEME5ERz4l4g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption 22:ef:3b:a4:5d:36:43:0b:88:b3:6e:4e:d2:6d:24:6d:ed:0f: e0:94:6e:81:a9:fa:8c:2c:aa:bb:46:e7:8d:4e:55:0c:20:50: 94:53:74:e3:fe:71:5d:92:67:35:de:07:8e:43:70:be:df:6b: d3:90:b0:ea:cf:40:2b:41:ae:23:d1:df:ae:a1:2e:6d:c8:9b: 1c:fa:92:d3:28:02:3c:7d:90:e7:48:45:c4:35:fb:57:58:4e: d5:d2:28:63:13:49:97:cc:60:ff:fb:67:c7:c0:07:fa:be:db: bf:49:50:54:4e:87:59:18:11:7a:88:da:60:a7:4d:43:14:db: a8:5a:5a:41:92:84:8c:78:b9:73:b0:67:10:d3:de:11:d3:cc: 97:f3:f3:ab:d5:75:1f:f6:4d:19:a8:f2:69:6c:86:23:d0:27: 19:1d:75:69:90:84:fa:e2:d1:bb:da:12:5d:47:d1:b4:55:3c: 61:71:f5:7c:fa:c2:b2:4f:1f:c7:b6:7d:0f:bf:ce:7b:e7:32: f9:9d:05:79:8a:18:ee:7e:ec:a2:fb:07:6e:df:33:d4:ef:14: 9d:5e:c5:c5:c4:03:47:ce:c0:e4:d0:b0:00:dc:a3:e3:f3:91: c3:46:cf:1a:c4:6a:05:d3:1c:a4:c9:fb:a6:8a:f1:16:97:6f: 49:40:35:29 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICSD4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjQy MTUzMjBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDdFNkE1NzUwOTc5N0FE QTEwMTYwOTFCMjEwQzEzOTExMUNGODk3ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjHyNRoM3N8m82+9fotNEl6KmJ5z7ZPctJe0o7ab9WqxWWwyRo qKacaPfJL3vw1GWVcTSei3pmX7VLgx5Z1teWFSJC2Kzbp6lSYyGkmhAXnS/oRDRZ u0gZ9xYpYivnR0IRGof1EGV2+P0+Db+ZyG28xK4aCmLdBwqaJFXBIC6VS9+og0+j ph3d7grHjA+ptA37ORX1TfOFAwwyTxo6qeHmgpCgqZ8YD3RQoqJiRU3ltf+xDei7 NBeLub5LLZkJ31O4yJLYAXCvTaR0KL22dznAm8Zx2flfTuIXxaNFgk/l9FuTxcW1 hGupqNqLUAFG9dO35hP/QrJou1TgKhxv+za9AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUfmpXUJeXraEBYJGyEME5ERz4l4gwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2ZtcFhVSmVYcmFFQllK R3lFTUU1RVJ6NGw0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAIu87pF02QwuIs25O0m0kbe0P4JRugan6 jCyqu0bnjU5VDCBQlFN04/5xXZJnNd4HjkNwvt9r05Cw6s9AK0GuI9HfrqEubcib HPqS0ygCPH2Q50hFxDX7V1hO1dIoYxNJl8xg//tnx8AH+r7bv0lQVE6HWRgReoja YKdNQxTbqFpaQZKEjHi5c7BnENPeEdPMl/Pzq9V1H/ZNGajyaWyGI9AnGR11aZCE +uLRu9oSXUfRtFU8YXH1fPrCsk8fx7Z9D7/Oe+cy+Z0FeYoY7n7sovsHbt8z1O8U nV7FxcQDR87A5NCwANyj4/ORw0bPGsRqBdMcpMn7porxFpdvSUA1KQ== -----END CERTIFICATE-----Generated at Mon Jan 12 02:32:40 2026 by rpki-client