This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pq15mEddywJamgtSzyamWoz4oag.roa File: pq15mEddywJamgtSzyamWoz4oag.roa (raw, json) Hash identifier: xpkSFxiizBcsmjC/wwYJA2+d8lanEt6MY7l94Dg0m7U= Subject key identifier: A6:AD:79:98:47:5D:CB:02:5A:9A:0B:52:CF:26:A6:5A:8C:F8:A1:A8 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 5796 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pq15mEddywJamgtSzyamWoz4oag.roa Signing time: Wed 15 May 2024 08:54:10 +0000 ROA not before: Wed 15 May 2024 08:54:10 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 22422 (0x5796) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 15 08:54:10 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=A6AD7998475DCB025A9A0B52CF26A65A8CF8A1A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:07:83:5c:18:81:ff:65:09:fc:cf:c2:66: 11:3e:30:09:e2:d9:04:33:94:7e:0a:3d:1f:11:38: 99:f8:a8:40:c1:f0:14:e2:2f:c1:1b:a3:6c:ae:d1: 14:b4:79:32:b4:cc:10:14:ca:de:f3:50:a0:29:c6: 2e:9e:31:90:c1:ae:1c:e6:12:d8:aa:40:48:59:1a: 0b:be:7d:39:42:b2:5a:b4:b8:14:e2:e8:c6:8b:a3: 19:8c:2f:af:41:47:39:9b:e9:31:8d:a5:58:99:42: f7:a7:15:2c:57:13:c2:05:02:0e:38:1f:67:be:01: b2:c7:09:e7:8b:56:4a:17:0c:4f:0b:5b:10:f0:87: 08:2e:19:17:fc:40:fd:c3:07:1b:a5:e3:96:e4:3c: c1:f5:dd:14:13:37:bc:4e:2f:ed:b5:67:dc:3c:92: 9e:32:d7:25:d2:0b:13:be:d6:59:84:11:04:ba:73: 5d:a0:77:7f:78:f1:10:f6:e1:5d:e5:00:8b:83:ed: e1:57:19:df:04:44:7a:d9:48:9e:f9:d4:41:98:bf: b1:df:e6:16:63:c2:38:8d:44:95:66:15:1e:8b:35: 41:52:a9:05:e0:a2:b9:46:f8:3f:ba:54:52:54:ee: 25:06:c9:0f:a2:3d:b6:3c:63:28:e8:6c:8b:bf:c1: 31:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AD:79:98:47:5D:CB:02:5A:9A:0B:52:CF:26:A6:5A:8C:F8:A1:A8 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pq15mEddywJamgtSzyamWoz4oag.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0e:c6:07:b0:ed:d7:f2:e2:5b:d9:c4:f9:bc:cc:5a:fb:7f:c4: 0f:d5:f6:56:1e:45:d2:94:db:ff:e8:5d:ef:a0:f4:3e:f8:80: a7:0d:24:b2:2a:2d:97:54:af:0f:9e:ad:bc:88:7b:28:9e:85: ea:71:2f:c8:19:9b:76:a6:8b:8b:e9:91:03:fd:b1:31:2c:d1: 63:74:88:42:31:1c:1d:79:2d:32:44:32:95:60:5f:d3:6c:9c: 69:4d:81:f1:e4:4d:5a:ea:00:8d:1d:ec:1a:07:13:1c:f8:57: a8:b1:7e:24:10:ba:0d:0c:d5:8e:01:67:00:ba:66:a0:b6:1f: 41:7f:c9:c7:bc:4a:8f:e5:72:d3:cf:64:eb:8c:57:2f:ba:ba: be:9b:ab:e5:57:d4:b8:bc:31:e3:f8:36:4b:f0:5f:6c:98:75: 72:d6:8a:ca:69:62:f5:6b:81:c3:f5:56:b9:0f:54:41:d7:ec: 6f:5c:71:a3:b5:d3:2e:2b:f3:bc:9b:21:c6:83:ae:e1:49:22: 02:4d:2d:2b:7c:e2:ec:ab:1a:ee:62:2b:34:c5:6c:a8:68:5d: 9c:ee:ca:b8:dc:47:33:c3:90:43:f3:c5:d7:18:4f:4f:26:5e: 35:98:91:f6:9f:9e:4a:9f:d4:0d:cf:5b:d7:9b:54:2f:a5:2a: 7b:aa:cd:af -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICV5YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTUw ODU0MTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE2QUQ3OTk4NDc1RENC MDI1QTlBMEI1MkNGMjZBNjVBOENGOEExQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSQAeDXBiB/2UJ/M/CZhE+MAni2QQzlH4KPR8ROJn4qEDB8BTi L8Ebo2yu0RS0eTK0zBAUyt7zUKApxi6eMZDBrhzmEtiqQEhZGgu+fTlCslq0uBTi 6MaLoxmML69BRzmb6TGNpViZQvenFSxXE8IFAg44H2e+AbLHCeeLVkoXDE8LWxDw hwguGRf8QP3DBxul45bkPMH13RQTN7xOL+21Z9w8kp4y1yXSCxO+1lmEEQS6c12g d3948RD24V3lAIuD7eFXGd8ERHrZSJ751EGYv7Hf5hZjwjiNRJVmFR6LNUFSqQXg orlG+D+6VFJU7iUGyQ+iPbY8YyjobIu/wTF5AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUpq15mEddywJamgtSzyamWoz4oagwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3BxMTVtRWRkeXdKYW1n dFN6eWFtV296NG9hZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEADsYHsO3X8uJb2cT5vMxa+3/ED9X2Vh5F 0pTb/+hd76D0PviApw0ksiotl1SvD56tvIh7KJ6F6nEvyBmbdqaLi+mRA/2xMSzR Y3SIQjEcHXktMkQylWBf02ycaU2B8eRNWuoAjR3sGgcTHPhXqLF+JBC6DQzVjgFn ALpmoLYfQX/Jx7xKj+Vy089k64xXL7q6vpur5VfUuLwx4/g2S/BfbJh1ctaKymli 9WuBw/VWuQ9UQdfsb1xxo7XTLivzvJshxoOu4UkiAk0tK3zi7Ksa7mIrNMVsqGhd nO7KuNxHM8OQQ/PF1xhPTyZeNZiR9p+eSp/UDc9b15tUL6Uqe6rNrw== -----END CERTIFICATE-----Generated at Mon Jan 12 10:31:41 2026 by rpki-client