This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/lxlkLsVpQPUUob81Mo60hW8fHrA.roa File: lxlkLsVpQPUUob81Mo60hW8fHrA.roa (raw, json) Hash identifier: 48w0BDmHpuObweRNVK5UlGtG3QMhrkIwuWw9B3dTaHQ= Subject key identifier: 97:19:64:2E:C5:69:40:F5:14:A1:BF:35:32:8E:B4:85:6F:1F:1E:B0 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 3D13 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lxlkLsVpQPUUob81Mo60hW8fHrA.roa Signing time: Wed 10 Apr 2024 00:22:38 +0000 ROA not before: Wed 10 Apr 2024 00:22:38 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 36.0.64.0/18 maxlen: 18 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 15635 (0x3d13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 10 00:22:38 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=9719642EC56940F514A1BF35328EB4856F1F1EB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:1a:be:3e:54:4b:c3:27:c3:8f:e7:86:60: cd:1d:6a:90:0d:48:f9:0f:93:5d:29:b7:af:73:a9: 20:4c:38:90:4a:93:74:ac:48:43:38:ae:5b:1c:ab: 9a:0a:c6:84:1c:4c:f0:24:97:e1:f6:6e:8f:dc:9d: 2b:f1:2b:2a:a1:67:01:19:ba:f9:9d:31:98:f5:81: 3d:70:48:5a:3a:70:27:ea:36:3d:be:21:e4:e8:49: 43:a2:83:cc:73:f5:00:44:18:58:a6:31:8a:6f:64: 4b:1b:0b:bf:f4:1b:aa:f9:2a:8b:47:c0:4a:2e:ce: 12:e2:79:fe:c8:b4:3b:4a:7d:f9:76:7e:53:f6:d0: 77:a7:dd:95:ac:2a:d0:50:74:25:44:39:2c:60:58: 00:9d:58:6a:1b:2d:5a:be:6a:8d:84:6a:bf:13:66: 32:2a:50:e3:f2:30:5c:67:38:52:be:ef:5e:06:77: ec:47:9d:3f:fb:ee:28:aa:cd:11:7b:4b:d6:68:e3: 49:f7:8a:06:cc:22:0f:89:3d:75:d2:7a:58:92:1d: 12:84:e6:f6:79:d9:1e:ff:d8:f4:7c:61:ce:bc:10: c5:a7:17:06:64:8b:d7:7c:03:b5:96:46:43:3c:21: 1d:d3:93:cf:9e:59:05:b0:f0:db:19:65:5d:1a:37: 40:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:19:64:2E:C5:69:40:F5:14:A1:BF:35:32:8E:B4:85:6F:1F:1E:B0 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/lxlkLsVpQPUUob81Mo60hW8fHrA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption 27:de:59:2f:46:ba:8f:dd:90:e5:9a:c5:41:2a:d1:8e:3c:08: f9:07:ae:fe:97:93:c5:5f:81:2f:af:30:0a:14:0e:80:ba:b9: d6:aa:ab:1b:df:d4:1a:35:bc:4c:fb:54:54:bd:69:f8:5b:4d: 44:f2:85:c5:be:de:72:2f:c4:cb:aa:f9:b2:7e:35:22:fc:b0: 53:e8:5c:7f:6c:eb:67:e6:fa:7b:5d:6e:1d:81:f4:7c:a3:0d: 50:e1:67:34:93:66:18:8c:cf:af:b9:89:d3:6f:63:54:68:23: d5:bd:1f:62:59:f4:47:87:f1:55:69:10:25:b9:67:ad:0a:20: 23:4e:9f:ed:f8:c1:04:ba:f4:5a:ba:4e:89:ee:6f:5e:38:79: 3c:e0:43:52:f9:0e:f8:d8:03:fb:8c:1f:2b:df:23:79:ee:64: f2:66:e8:c2:08:3a:55:a3:35:ba:9b:a6:dd:3f:e1:a0:35:3f: 38:3e:5a:c9:70:6c:30:b0:e7:bb:c6:b4:da:25:f5:8d:aa:a7: 50:2c:23:6c:64:4e:93:bd:25:c3:21:bd:52:3d:1d:76:b0:8c: 28:aa:a8:53:c1:a8:21:e4:4b:f6:6d:b1:9f:1b:f6:85:ac:fe: 37:ec:cb:f0:53:a2:fb:7e:90:4e:c4:1b:0c:e1:99:5c:c5:8f: 37:92:82:cf -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICPRMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTAw MDIyMzhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDk3MTk2NDJFQzU2OTQw RjUxNEExQkYzNTMyOEVCNDg1NkYxRjFFQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5Vxq+PlRLwyfDj+eGYM0dapANSPkPk10pt69zqSBMOJBKk3Ss SEM4rlscq5oKxoQcTPAkl+H2bo/cnSvxKyqhZwEZuvmdMZj1gT1wSFo6cCfqNj2+ IeToSUOig8xz9QBEGFimMYpvZEsbC7/0G6r5KotHwEouzhLief7ItDtKffl2flP2 0Hen3ZWsKtBQdCVEOSxgWACdWGobLVq+ao2Ear8TZjIqUOPyMFxnOFK+714Gd+xH nT/77iiqzRF7S9Zo40n3igbMIg+JPXXSeliSHRKE5vZ52R7/2PR8Yc68EMWnFwZk i9d8A7WWRkM8IR3Tk8+eWQWw8NsZZV0aN0CRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUlxlkLsVpQPUUob81Mo60hW8fHrAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2x4bGtMc1ZwUVBVVW9i ODFNbzYwaFc4ZkhyQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYkAEAwDQYJKoZIhvcNAQELBQADggEBACfeWS9Guo/dkOWaxUEq0Y48CPkHrv6X k8VfgS+vMAoUDoC6udaqqxvf1Bo1vEz7VFS9afhbTUTyhcW+3nIvxMuq+bJ+NSL8 sFPoXH9s62fm+ntdbh2B9HyjDVDhZzSTZhiMz6+5idNvY1RoI9W9H2JZ9EeH8VVp ECW5Z60KICNOn+34wQS69Fq6Tonub144eTzgQ1L5DvjYA/uMHyvfI3nuZPJm6MII OlWjNbqbpt0/4aA1Pzg+WslwbDCw57vGtNol9Y2qp1AsI2xkTpO9JcMhvVI9HXaw jCiqqFPBqCHkS/ZtsZ8b9oWs/jfsy/BTovt+kE7EGwzhmVzFjzeSgs8= -----END CERTIFICATE-----Generated at Mon Jan 12 01:24:01 2026 by rpki-client