This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/r8RWeHH7546q3a2hs2dt_1VYhV8.roa File: r8RWeHH7546q3a2hs2dt_1VYhV8.roa (raw, json) Hash identifier: 5XVYhPzRhGJjtMqtXgOkC7gaSoKSPy6qp6b/tjnd3nM= Subject key identifier: AF:C4:56:78:71:FB:E7:8E:AA:DD:AD:A1:B3:67:6D:FF:55:58:85:5F Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 600A Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/r8RWeHH7546q3a2hs2dt_1VYhV8.roa Signing time: Wed 14 May 2025 04:40:31 +0000 ROA not before: Wed 14 May 2025 04:40:31 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 24586 (0x600a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 14 04:40:31 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=AFC4567871FBE78EAADDADA1B3676DFF5558855F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:51:dd:4f:6d:61:eb:b7:a8:7d:2b:b8:48: 63:3a:96:1e:62:13:0b:85:24:ad:fe:94:51:03:06: 4f:2b:3b:05:03:f4:47:49:07:f9:d5:a4:36:ec:a0: e4:2c:dd:52:ea:d7:75:ec:5a:0a:ef:37:91:27:9a: ab:88:2e:0a:5c:43:22:8c:12:e5:dd:ec:13:b2:73: af:5b:f4:9b:2c:c5:a2:84:57:86:15:3f:c6:72:a9: 00:a9:d5:ec:02:64:b5:49:33:6f:b5:a6:47:93:df: a4:02:a3:d0:45:93:c8:20:c5:da:17:4e:97:a0:9e: cc:1b:6a:48:91:6a:72:60:75:5d:8d:b8:c8:5d:1f: f5:64:de:55:b1:bb:3f:15:0c:c5:63:91:85:39:8f: 85:52:63:54:52:b0:54:fe:ba:a8:45:a9:e6:a8:87: 98:aa:7b:cc:70:0d:82:be:10:30:87:68:22:e3:20: 8c:35:35:f2:42:72:65:f7:f1:86:41:9b:4a:39:f6: cf:03:e8:8a:17:9d:85:bc:fe:a0:73:0c:34:05:17: 5d:ca:b4:e5:92:67:c2:ce:d9:c0:25:a0:c7:bd:75: a3:c9:6a:f9:c2:48:e4:7f:8e:6f:dd:0c:9a:13:70: e6:fa:53:a5:c2:1a:78:98:f1:c5:4a:ac:13:cb:55: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C4:56:78:71:FB:E7:8E:AA:DD:AD:A1:B3:67:6D:FF:55:58:85:5F X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/r8RWeHH7546q3a2hs2dt_1VYhV8.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 24:0b:e9:09:3b:1f:4b:fb:d1:9c:44:5b:4c:f2:40:a8:cc:15: d0:e7:f0:4c:b4:61:89:0e:48:a0:27:7f:28:bd:df:83:9f:dd: ce:01:79:c7:3d:c8:f0:06:9e:af:5d:09:a8:28:84:90:85:96: 66:72:25:3d:82:b1:07:43:60:8e:b8:dc:89:33:81:df:eb:21: b0:c9:e3:f4:f5:f1:71:1b:7e:d0:39:7c:66:8c:aa:87:2c:ed: 37:c6:bb:cd:70:36:55:e0:80:53:3f:a2:3c:f1:a9:1c:2f:5e: ab:5b:66:6c:72:8b:ea:5b:08:7c:89:2c:33:74:ee:fb:07:95: 15:6f:46:05:3b:ea:98:cd:ed:d5:f7:d8:d1:42:ff:54:95:fd: f6:82:5b:98:d9:ff:dd:94:65:cf:92:76:0c:c4:91:ad:ad:f9: c0:94:02:b6:89:8b:94:f0:97:0a:3a:a8:3d:3a:6a:1f:61:92: ee:2b:8d:82:9c:94:b1:23:76:a0:ff:18:e3:62:95:79:93:b1: c0:ea:7b:ec:98:8c:c2:01:af:7f:7e:5b:09:80:81:dd:3c:5c: dd:a4:71:ff:71:c5:c4:bb:e9:ae:ef:b3:81:9f:f9:46:97:6d: 32:61:7a:ae:d6:3a:66:88:e3:ed:21:25:28:bf:b1:5e:25:96: c4:9f:c7:79 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICYAowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTQw NDQwMzFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEFGQzQ1Njc4NzFGQkU3 OEVBQUREQURBMUIzNjc2REZGNTU1ODg1NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClDFHdT21h67eofSu4SGM6lh5iEwuFJK3+lFEDBk8rOwUD9EdJ B/nVpDbsoOQs3VLq13XsWgrvN5EnmquILgpcQyKMEuXd7BOyc69b9JssxaKEV4YV P8ZyqQCp1ewCZLVJM2+1pkeT36QCo9BFk8ggxdoXTpegnswbakiRanJgdV2NuMhd H/Vk3lWxuz8VDMVjkYU5j4VSY1RSsFT+uqhFqeaoh5iqe8xwDYK+EDCHaCLjIIw1 NfJCcmX38YZBm0o59s8D6IoXnYW8/qBzDDQFF13KtOWSZ8LO2cAloMe9daPJavnC SOR/jm/dDJoTcOb6U6XCGniY8cVKrBPLVRiFAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUr8RWeHH7546q3a2hs2dt/1VYhV8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3I4UldlSEg3NTQ2cTNh MmhzMmR0XzFWWWhWOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAkC+kJ Ox9L+9GcRFtM8kCozBXQ5/BMtGGJDkigJ38ovd+Dn93OAXnHPcjwBp6vXQmoKISQ hZZmciU9grEHQ2COuNyJM4Hf6yGwyeP09fFxG37QOXxmjKqHLO03xrvNcDZV4IBT P6I88akcL16rW2ZscovqWwh8iSwzdO77B5UVb0YFO+qYze3V99jRQv9Ulf32gluY 2f/dlGXPknYMxJGtrfnAlAK2iYuU8JcKOqg9OmofYZLuK42CnJSxI3ag/xjjYpV5 k7HA6nvsmIzCAa9/flsJgIHdPFzdpHH/ccXEu+mu77OBn/lGl20yYXqu1jpmiOPt ISUov7FeJZbEn8d5 -----END CERTIFICATE-----Generated at Mon Jan 12 13:44:06 2026 by rpki-client