This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/rWOzFJvojSy-P7SzALgCqEoA10w.roa File: rWOzFJvojSy-P7SzALgCqEoA10w.roa (raw, json) Hash identifier: 3SChKM1FqJmPclg1IB8EWL1S93C+RvP9CIRD2HM7czg= Subject key identifier: AD:63:B3:14:9B:E8:8D:2C:BE:3F:B4:B3:00:B8:02:A8:4A:00:D7:4C Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 338D Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rWOzFJvojSy-P7SzALgCqEoA10w.roa Signing time: Thu 28 Mar 2024 07:52:06 +0000 ROA not before: Thu 28 Mar 2024 07:52:06 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.239.0.0/19 maxlen: 19 101.78.32.0/19 maxlen: 19 103.35.0.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 13197 (0x338d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Mar 28 07:52:06 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=AD63B3149BE88D2CBE3FB4B300B802A84A00D74C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a2:0a:1f:52:13:9a:62:f8:ea:24:73:41:72: 5c:8c:46:7c:f6:e6:f8:fb:28:6d:d7:80:30:bb:e8: 87:04:9d:4f:b3:3e:25:3a:b1:a1:12:cc:d9:db:cb: d4:6c:5c:ed:e1:f2:3a:6c:4e:33:88:73:ba:25:5d: 87:6f:c6:36:3d:b9:1b:21:02:9a:12:b1:e8:d3:a0: 95:70:71:4b:e5:ba:71:20:04:ba:f3:52:df:1f:ae: 23:4b:47:89:c1:c1:80:ec:11:fa:ff:32:04:c4:67: de:d1:78:0e:60:f9:7d:65:64:56:22:5e:d7:03:e4: e2:c2:1a:df:4b:07:48:dd:a4:e9:74:5e:44:ed:4c: b1:f6:62:ea:89:97:45:64:3b:0d:db:9b:7b:d9:25: 8b:e1:4e:4a:9d:bf:c1:af:82:c8:8c:3a:91:0a:ea: 6d:bb:b6:27:21:45:f2:58:78:60:3f:bc:94:b5:d8: 34:3a:e4:3d:93:c4:68:1c:cf:7f:39:fa:cd:69:4b: a5:54:fd:90:03:23:b6:b4:1e:fb:d6:d8:51:10:8f: 2b:2d:8a:30:80:2b:df:b1:6d:cc:61:d9:57:40:20: 5f:08:9c:f9:b5:cb:25:44:84:a6:7a:ba:20:9c:dc: f2:38:42:29:ec:b5:ed:07:82:7d:41:d5:13:ec:36: a1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:63:B3:14:9B:E8:8D:2C:BE:3F:B4:B3:00:B8:02:A8:4A:00:D7:4C X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/rWOzFJvojSy-P7SzALgCqEoA10w.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.0.0/19 101.78.32.0/19 103.35.0.0/19 Signature Algorithm: sha256WithRSAEncryption 9a:1d:71:4c:a9:a3:6a:94:40:51:6b:58:4c:c9:f5:d5:9e:16: dc:02:98:cf:10:c2:ed:49:18:83:41:21:6e:e4:53:22:f2:fc: e9:d1:e9:cf:1d:2a:9d:62:43:8f:af:1a:1e:00:4a:f2:ae:15: 8b:30:91:79:ba:e3:ff:db:ea:5b:33:f3:ce:72:d7:56:2b:52: 19:14:ad:9d:09:be:49:0e:46:83:2c:d2:49:be:6e:ab:5a:23: 1e:bf:dd:53:cf:e1:78:27:15:08:9c:15:60:04:a9:c5:19:c2: a9:c3:87:33:a2:b2:d5:6b:5b:eb:c2:9a:15:fa:f3:38:9b:3b: cb:a7:08:7c:ea:fb:c3:ae:3a:fa:04:19:f4:cf:f2:66:d3:41: d8:b5:fa:65:ef:37:d8:3d:ff:7c:f4:90:48:3f:c9:16:2d:cd: 46:e2:69:17:3a:f0:92:01:69:79:7d:14:7f:33:a8:51:8e:28: 08:15:45:21:e5:ef:f5:7f:80:58:9f:d8:17:2b:74:40:18:d5: 6f:ad:71:0b:79:99:ab:77:11:61:fa:75:b5:0e:6f:d7:07:fb: 17:33:23:f2:d7:a4:61:de:c0:95:94:ac:72:e3:30:07:2f:b1: 36:88:f8:d6:cc:2a:ce:25:79:88:01:96:b4:b5:7a:56:3d:21: 10:3f:a8:3f -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgICM40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjgw NzUyMDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEFENjNCMzE0OUJFODhE MkNCRTNGQjRCMzAwQjgwMkE4NEEwMEQ3NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMogofUhOaYvjqJHNBclyMRnz25vj7KG3XgDC76IcEnU+zPiU6 saESzNnby9RsXO3h8jpsTjOIc7olXYdvxjY9uRshApoSsejToJVwcUvlunEgBLrz Ut8friNLR4nBwYDsEfr/MgTEZ97ReA5g+X1lZFYiXtcD5OLCGt9LB0jdpOl0XkTt TLH2YuqJl0VkOw3bm3vZJYvhTkqdv8GvgsiMOpEK6m27tichRfJYeGA/vJS12DQ6 5D2TxGgcz385+s1pS6VU/ZADI7a0HvvW2FEQjystijCAK9+xbcxh2VdAIF8InPm1 yyVEhKZ6uiCc3PI4Qinste0Hgn1B1RPsNqEzAgMBAAGjggH9MIIB+TAdBgNVHQ4E FgQUrWOzFJvojSy+P7SzALgCqEoA10wwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3JXT3pGSnZvalN5LVA3 U3pBTGdDcUVvQTEwdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAJodcUypo2qUQFFr WEzJ9dWeFtwCmM8Qwu1JGINBIW7kUyLy/OnR6c8dKp1iQ4+vGh4ASvKuFYswkXm6 4//b6lsz885y11YrUhkUrZ0JvkkORoMs0km+bqtaIx6/3VPP4XgnFQicFWAEqcUZ wqnDhzOistVrW+vCmhX68zibO8unCHzq+8OuOvoEGfTP8mbTQdi1+mXvN9g9/3z0 kEg/yRYtzUbiaRc68JIBaXl9FH8zqFGOKAgVRSHl7/V/gFif2BcrdEAY1W+tcQt5 mat3EWH6dbUOb9cH+xczI/LXpGHewJWUrHLjMAcvsTaI+NbMKs4leYgBlrS1elY9 IRA/qD8= -----END CERTIFICATE-----Generated at Mon Jan 12 09:41:06 2026 by rpki-client