This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lDYFgpLl-VRHuqautLkLv-N6bgE.roa File: lDYFgpLl-VRHuqautLkLv-N6bgE.roa (raw, json) Hash identifier: 5oikaVYvVIn9jeOL6RHBqED06cHP3rPL4F77pajQq2U= Subject key identifier: 94:36:05:82:92:E5:F9:54:47:BA:A6:AE:B4:B9:0B:BF:E3:7A:6E:01 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 538B Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lDYFgpLl-VRHuqautLkLv-N6bgE.roa Signing time: Thu 09 May 2024 23:23:59 +0000 ROA not before: Thu 09 May 2024 23:23:59 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 36.0.64.0/18 maxlen: 18 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 21387 (0x538b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 9 23:23:59 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=9436058292E5F95447BAA6AEB4B90BBFE37A6E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8b:6c:de:ad:c1:67:ae:aa:6d:3e:aa:32:0d: d9:61:10:96:df:c6:7a:dd:c6:28:0a:bf:dd:85:8e: d2:4b:7c:ae:16:0a:14:88:11:4d:5f:b1:ff:ab:87: e3:e8:9e:7d:83:b8:93:cd:56:7a:28:cb:82:77:fc: 86:37:88:74:0a:18:11:b1:44:a7:9b:fa:c4:17:6a: d1:a6:c3:ea:39:9a:ca:34:66:a4:3c:9f:63:54:8f: 3b:72:9e:db:8b:26:d4:56:c1:52:13:e3:21:53:51: 7a:18:c2:7e:c0:a4:53:91:82:8f:9b:b7:d9:19:8b: 0e:13:08:c8:04:9b:12:e1:5d:f7:f5:7a:8f:67:07: ce:a0:10:55:37:ab:84:05:75:3d:a7:d3:75:6a:00: ef:ab:27:18:5a:49:00:9f:82:f6:6c:9d:cb:c5:5c: e1:b7:13:7d:9b:43:1b:e2:be:f1:a7:bd:86:62:10: 13:8f:c4:40:3a:ec:48:e5:4c:ee:e5:e6:0f:44:29: 05:be:73:3c:43:99:c0:71:9e:31:13:79:96:7e:c3: 75:9c:91:9f:58:11:1d:57:56:53:3c:bd:21:48:11: 4e:a7:a3:16:ae:5e:91:be:cf:27:62:0c:74:e6:3e: e8:b2:69:61:b8:d0:a4:69:c4:ad:01:f5:37:04:fc: 62:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:36:05:82:92:E5:F9:54:47:BA:A6:AE:B4:B9:0B:BF:E3:7A:6E:01 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lDYFgpLl-VRHuqautLkLv-N6bgE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption 73:ee:0b:1d:79:b3:94:b0:9e:fd:39:38:e5:0f:6b:ea:ce:72: 5d:83:62:f2:9b:4d:77:9d:04:50:d0:12:5d:89:df:40:bb:1e: 0a:e7:c4:b1:c4:bd:f8:54:ae:9f:61:a9:f6:0e:4a:be:17:c7: 23:db:36:f1:f6:24:32:60:33:d0:be:50:fc:be:5f:75:ab:e2: 27:34:92:14:4e:f1:85:1e:0e:40:17:9d:3f:0d:5c:d4:91:bf: e1:b5:eb:90:b2:9a:18:03:28:4b:99:8c:b1:a8:fc:80:6a:d3: 61:da:fe:e7:5e:65:06:12:9c:ff:16:a3:be:70:88:54:e1:7d: 7b:3b:f1:2f:48:ef:f1:fa:19:e0:b2:bd:54:88:39:ec:fd:97: a1:c5:63:bb:c1:8c:94:13:5a:42:4d:f7:4c:8c:c0:8b:6d:a6: c9:69:57:a4:3d:83:c7:fe:8c:29:20:64:26:62:03:51:c8:ab: 0e:49:4c:21:fc:ab:1e:f8:d5:6b:35:78:54:28:15:bc:37:93: 04:ed:01:80:d5:84:cb:68:0b:7d:db:e6:86:bc:d7:9e:ba:0d: 45:3a:f3:e8:87:45:7d:6d:27:4c:90:ab:98:34:d6:3a:82:3c: f8:b9:b4:c8:2c:29:cd:82:dc:b9:c1:3f:b7:27:4a:3a:80:24: 6a:03:b5:b6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICU4swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDky MzIzNTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDk0MzYwNTgyOTJFNUY5 NTQ0N0JBQTZBRUI0QjkwQkJGRTM3QTZFMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDti2zercFnrqptPqoyDdlhEJbfxnrdxigKv92FjtJLfK4WChSI EU1fsf+rh+Ponn2DuJPNVnooy4J3/IY3iHQKGBGxRKeb+sQXatGmw+o5mso0ZqQ8 n2NUjztyntuLJtRWwVIT4yFTUXoYwn7ApFORgo+bt9kZiw4TCMgEmxLhXff1eo9n B86gEFU3q4QFdT2n03VqAO+rJxhaSQCfgvZsncvFXOG3E32bQxvivvGnvYZiEBOP xEA67EjlTO7l5g9EKQW+czxDmcBxnjETeZZ+w3WckZ9YER1XVlM8vSFIEU6noxau XpG+zydiDHTmPuiyaWG40KRpxK0B9TcE/GI/AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUlDYFgpLl+VRHuqautLkLv+N6bgEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2xEWUZncExsLVZSSHVx YXV0TGtMdi1ONmJnRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAHPuCx15s5Swnv05OOUPa+rOcl2DYvKb TXedBFDQEl2J30C7HgrnxLHEvfhUrp9hqfYOSr4XxyPbNvH2JDJgM9C+UPy+X3Wr 4ic0khRO8YUeDkAXnT8NXNSRv+G165CymhgDKEuZjLGo/IBq02Ha/udeZQYSnP8W o75wiFThfXs78S9I7/H6GeCyvVSIOez9l6HFY7vBjJQTWkJN90yMwIttpslpV6Q9 g8f+jCkgZCZiA1HIqw5JTCH8qx741Ws1eFQoFbw3kwTtAYDVhMtoC33b5oa81566 DUU68+iHRX1tJ0yQq5g01jqCPPi5tMgsKc2C3LnBP7cnSjqAJGoDtbY= -----END CERTIFICATE-----Generated at Tue Jan 6 20:29:39 2026 by rpki-client