This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kVsgfAcL6uww4_1E6RKdBhYDS58.roa File: kVsgfAcL6uww4_1E6RKdBhYDS58.roa (raw, json) Hash identifier: MFAxpBCjjF7GUAY4rAuLQDzQfWE89/AuFtOZ/x+vrqc= Subject key identifier: 91:5B:20:7C:07:0B:EA:EC:30:E3:FD:44:E9:12:9D:06:16:03:4B:9F Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 3E9A Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kVsgfAcL6uww4_1E6RKdBhYDS58.roa Signing time: Fri 12 Apr 2024 01:22:51 +0000 ROA not before: Fri 12 Apr 2024 01:22:51 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 16026 (0x3e9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 12 01:22:51 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=915B207C070BEAEC30E3FD44E9129D0616034B9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ac:cd:65:30:40:e6:17:9e:27:64:0a:38:c9: 60:4c:06:5e:7e:09:45:13:ff:e2:e5:b8:34:43:7c: 0a:f0:f6:bb:be:0c:b7:ec:bf:a6:26:77:b0:50:1f: 2d:7c:76:e6:04:28:b5:54:1e:14:5b:ac:64:71:de: 6e:7b:ed:6e:a1:60:3d:d6:35:5b:0a:b0:f2:a3:6a: 61:95:49:56:b1:ac:84:86:f4:5f:73:02:f7:8e:d3: c2:31:da:b3:15:78:f7:5d:04:84:2c:33:03:69:29: 91:50:38:06:d5:52:0e:b7:6a:43:8b:6a:a5:72:ab: 89:a1:f8:f6:4e:05:32:94:d9:5d:2b:4d:73:29:b5: 92:da:07:04:b3:18:76:4b:b6:74:de:b4:a5:c6:ef: d0:d3:ee:1c:8d:c8:f0:da:90:49:25:0f:7e:25:11: 87:c7:98:dd:d3:d3:e1:be:f7:fa:8e:9a:f0:dd:38: a5:dd:56:34:5e:cb:a8:e1:12:50:7a:fb:6e:81:70: 1b:66:19:5d:3d:a0:5c:3b:66:2a:4e:4c:21:5f:6b: 68:5e:98:67:ee:e7:e6:f9:74:a7:fc:3c:a2:f1:ae: 68:c6:ab:e1:12:ff:aa:22:b8:aa:a2:91:bc:07:89: 89:1e:89:bd:00:d2:0d:ae:47:b2:de:b6:10:15:33: 66:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5B:20:7C:07:0B:EA:EC:30:E3:FD:44:E9:12:9D:06:16:03:4B:9F X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kVsgfAcL6uww4_1E6RKdBhYDS58.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1a:13:67:2e:c8:21:c2:6f:ed:44:df:74:d5:ab:30:64:47:7e: 91:ea:fa:4d:81:26:c4:3a:24:9d:98:13:6d:33:1b:ce:70:ff: 76:6f:58:03:d7:6b:e8:58:5e:33:9f:39:c5:04:3b:a4:34:94: 90:14:da:a4:23:55:fe:6d:a3:db:72:f6:d9:0c:6b:7f:51:8b: 2c:e9:b4:37:40:07:69:77:20:6a:ad:eb:ca:5c:ac:9d:d4:4a: dc:03:e6:29:a0:b1:42:74:20:65:52:23:8d:e3:89:d3:9e:73: 12:a0:1b:8d:c7:bf:d0:e9:89:34:4d:a6:2e:c3:e9:83:fb:e2: 0b:6b:7b:04:64:62:94:10:b0:05:5e:e1:d7:9a:36:e7:81:6f: 65:3a:ab:7e:f7:f9:06:cc:b7:55:9e:ea:ea:46:42:ba:72:1b: 81:f9:75:8a:94:9a:e0:44:66:46:bc:c3:91:64:34:e1:19:c0: f2:2d:a5:50:62:43:4a:91:e9:90:12:e5:f4:92:52:08:04:35: 6d:31:a9:50:4e:28:9a:eb:bc:ed:21:aa:f1:a9:54:f0:a2:98: 14:16:c3:57:ed:62:4f:fd:bf:79:b1:54:eb:43:35:74:4e:c8: dc:7e:3a:7d:f0:60:e8:7b:a5:c9:4d:1b:44:0d:ee:9a:ea:3d: 01:a8:a0:d9 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICPpowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTIw MTIyNTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDkxNUIyMDdDMDcwQkVB RUMzMEUzRkQ0NEU5MTI5RDA2MTYwMzRCOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRrM1lMEDmF54nZAo4yWBMBl5+CUUT/+LluDRDfArw9ru+DLfs v6Ymd7BQHy18duYEKLVUHhRbrGRx3m577W6hYD3WNVsKsPKjamGVSVaxrISG9F9z AveO08Ix2rMVePddBIQsMwNpKZFQOAbVUg63akOLaqVyq4mh+PZOBTKU2V0rTXMp tZLaBwSzGHZLtnTetKXG79DT7hyNyPDakEklD34lEYfHmN3T0+G+9/qOmvDdOKXd VjRey6jhElB6+26BcBtmGV09oFw7ZipOTCFfa2hemGfu5+b5dKf8PKLxrmjGq+ES /6oiuKqikbwHiYkeib0A0g2uR7LethAVM2Z5AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUkVsgfAcL6uww4/1E6RKdBhYDS58wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2tWc2dmQWNMNnV3dzRf MUU2UktkQmhZRFM1OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAGhNnLsghwm/tRN901aswZEd+ker6TYEm xDoknZgTbTMbznD/dm9YA9dr6FheM585xQQ7pDSUkBTapCNV/m2j23L22Qxrf1GL LOm0N0AHaXcgaq3rylysndRK3APmKaCxQnQgZVIjjeOJ055zEqAbjce/0OmJNE2m LsPpg/viC2t7BGRilBCwBV7h15o254FvZTqrfvf5Bsy3VZ7q6kZCunIbgfl1ipSa 4ERmRrzDkWQ04RnA8i2lUGJDSpHpkBLl9JJSCAQ1bTGpUE4omuu87SGq8alU8KKY FBbDV+1iT/2/ebFU60M1dE7I3H46ffBg6HulyU0bRA3umuo9Aaig2Q== -----END CERTIFICATE-----Generated at Sun Jan 11 23:40:06 2026 by rpki-client