This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oc9xq4UJQhxsLj9Ze2_BVtcGdWI.roa File: oc9xq4UJQhxsLj9Ze2_BVtcGdWI.roa (raw, json) Hash identifier: LjiVTGHVsR4aMQC6C9IQMOW/QwtzLZnXkmeYsOXb6Bw= Subject key identifier: A1:CF:71:AB:85:09:42:1C:6C:2E:3F:59:7B:6F:C1:56:D7:06:75:62 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 3ADF Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oc9xq4UJQhxsLj9Ze2_BVtcGdWI.roa Signing time: Sun 07 Apr 2024 01:52:30 +0000 ROA not before: Sun 07 Apr 2024 01:52:30 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 36.0.64.0/18 maxlen: 18 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 15071 (0x3adf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 7 01:52:30 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=A1CF71AB8509421C6C2E3F597B6FC156D7067562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:11:bd:fd:b5:fd:52:9c:06:82:fb:7a:54:76: f3:9b:f4:c5:d3:fb:8a:70:ca:10:35:94:70:79:37: 5f:49:f0:5a:ec:be:fa:bb:13:23:05:d2:b5:6b:48: bb:34:1b:a3:14:8a:d8:f8:de:5e:61:09:e9:17:37: 1e:d8:99:10:14:10:53:c0:29:4a:61:9e:58:25:ec: ed:ae:0a:69:2e:db:47:bc:ca:04:56:dc:7b:c0:98: c7:af:24:d5:93:ce:d3:61:e2:24:b1:62:50:bc:2f: 7a:47:ea:a9:c8:8b:53:31:8e:90:38:f2:4c:c5:cf: ac:28:cf:e4:36:c8:57:bd:51:7b:41:02:92:63:4f: cb:ee:52:05:4c:fa:2d:a7:9c:1a:b1:90:92:65:f5: 3d:4e:3d:01:39:85:df:e4:7a:12:c2:45:8f:cb:03: b4:67:3e:72:6b:a7:5b:15:cd:79:7f:d0:52:ca:e8: c0:26:67:63:b8:e3:b7:2d:7c:ea:94:c0:4d:53:49: 31:88:e9:e1:ed:0f:52:43:37:be:fb:69:9a:8b:a5: de:14:b5:25:67:90:06:21:ef:44:27:66:97:df:41: 56:a0:be:c8:c8:66:07:15:dd:90:cd:2d:3b:cc:e5: 71:0f:36:4b:95:c9:a8:58:7e:f6:c6:44:a4:8c:35: ed:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CF:71:AB:85:09:42:1C:6C:2E:3F:59:7B:6F:C1:56:D7:06:75:62 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oc9xq4UJQhxsLj9Ze2_BVtcGdWI.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption 94:73:e1:2c:60:c7:b6:84:7b:3b:cf:65:ea:6a:ec:5a:66:75: 42:2e:9d:3b:06:5f:65:82:2f:f3:68:9d:78:a3:14:e7:d6:6d: 0d:6a:55:7d:e3:73:89:45:7f:16:52:55:85:f7:cc:81:8e:33: a3:11:8e:d8:c7:32:95:78:f5:83:17:85:50:05:f4:90:52:ee: ba:13:ef:f7:16:b2:31:8d:fd:e0:73:da:4d:0a:39:82:82:8e: 6a:a2:90:53:21:86:32:f8:0d:28:02:c5:55:09:80:80:70:5d: d7:44:d3:3f:14:be:bd:71:76:63:17:ae:7a:0c:3f:0e:d5:33: 8c:2f:e4:85:29:2e:73:a5:21:2a:64:1c:97:4a:d0:6a:19:8d: 61:da:76:16:2f:c5:9f:89:e8:05:80:95:2a:be:92:b6:d3:95: f6:41:89:df:c8:dd:9f:5a:03:03:86:aa:55:ea:2d:40:10:67: 3e:c6:2c:69:63:0e:b4:f4:fd:4b:e9:2c:14:6f:fc:09:d0:b8: f6:81:ed:09:71:40:10:fe:a2:91:ee:f8:f3:60:01:9a:54:b3: d4:65:fe:dd:7b:7d:b3:e3:5a:71:75:01:17:35:2d:f4:bd:75: 6f:fd:f3:c7:18:64:ba:a9:c7:e5:07:16:66:7f:90:e4:83:0b: a1:11:55:c0 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICOt8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDcw MTUyMzBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEExQ0Y3MUFCODUwOTQy MUM2QzJFM0Y1OTdCNkZDMTU2RDcwNjc1NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeEb39tf1SnAaC+3pUdvOb9MXT+4pwyhA1lHB5N19J8Frsvvq7 EyMF0rVrSLs0G6MUitj43l5hCekXNx7YmRAUEFPAKUphnlgl7O2uCmku20e8ygRW 3HvAmMevJNWTztNh4iSxYlC8L3pH6qnIi1MxjpA48kzFz6woz+Q2yFe9UXtBApJj T8vuUgVM+i2nnBqxkJJl9T1OPQE5hd/kehLCRY/LA7RnPnJrp1sVzXl/0FLK6MAm Z2O447ctfOqUwE1TSTGI6eHtD1JDN777aZqLpd4UtSVnkAYh70QnZpffQVagvsjI ZgcV3ZDNLTvM5XEPNkuVyahYfvbGRKSMNe2DAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUoc9xq4UJQhxsLj9Ze2/BVtcGdWIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L29jOXhxNFVKUWh4c0xq OVplMl9CVnRjR2RXSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAJRz4Sxgx7aEezvPZepq7FpmdUIunTsG X2WCL/NonXijFOfWbQ1qVX3jc4lFfxZSVYX3zIGOM6MRjtjHMpV49YMXhVAF9JBS 7roT7/cWsjGN/eBz2k0KOYKCjmqikFMhhjL4DSgCxVUJgIBwXddE0z8Uvr1xdmMX rnoMPw7VM4wv5IUpLnOlISpkHJdK0GoZjWHadhYvxZ+J6AWAlSq+krbTlfZBid/I 3Z9aAwOGqlXqLUAQZz7GLGljDrT0/UvpLBRv/AnQuPaB7QlxQBD+opHu+PNgAZpU s9Rl/t17fbPjWnF1ARc1LfS9dW/988cYZLqpx+UHFmZ/kOSDC6ERVcA= -----END CERTIFICATE-----Generated at Mon Jan 12 06:30:54 2026 by rpki-client