This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sBTr94iL0Z5bMAW6rie4yHi5Ruw.roa File: sBTr94iL0Z5bMAW6rie4yHi5Ruw.roa (raw, json) Hash identifier: ZLhLI6gGL2mCJu9WyHXfk1hctr4hf9kwl4DYMr8bNBw= Subject key identifier: B0:14:EB:F7:88:8B:D1:9E:5B:30:05:BA:AE:27:B8:C8:78:B9:46:EC Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 435A Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sBTr94iL0Z5bMAW6rie4yHi5Ruw.roa Signing time: Thu 18 Apr 2024 09:22:59 +0000 ROA not before: Thu 18 Apr 2024 09:22:59 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 17242 (0x435a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 18 09:22:59 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=B014EBF7888BD19E5B3005BAAE27B8C878B946EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a9:ad:22:c1:1a:48:f5:8e:ac:0d:a1:52:30: 9d:84:df:73:fd:bc:4f:c7:08:e8:69:2e:7b:7f:77: 2f:ef:ec:68:b2:02:98:f2:ca:a5:c1:71:fe:cc:ce: ac:cf:97:a5:d4:c3:db:fd:3f:14:ec:28:48:74:2f: eb:29:6f:3f:7f:02:3c:93:55:9f:95:a1:59:c1:0d: d4:f8:aa:37:41:39:9b:9b:44:71:0f:ab:d2:e8:37: 4a:95:45:5c:18:4b:67:e3:56:b0:c3:62:7c:ff:cd: 5f:4a:a8:bc:83:f2:ed:e8:88:47:15:c2:b2:d7:88: 54:19:dc:bb:db:14:99:37:9d:0e:93:8e:90:07:b7: 9c:ce:d6:7d:b0:c7:47:9c:f4:c3:75:21:a9:7a:f2: 6c:e9:70:68:d2:30:47:fd:bc:7b:98:92:f3:32:57: d9:0a:5c:7a:61:1b:2d:69:4f:44:38:7a:c9:26:12: b1:25:01:01:96:9e:ba:a7:2a:d8:02:c7:ff:9a:54: 8c:bf:1a:c1:ab:9d:b9:50:44:38:40:e6:6a:0d:d8: 8e:da:b5:d1:17:69:73:50:9a:b2:f1:2a:b1:c5:83: ab:eb:46:02:13:56:6f:ff:7c:55:f7:ed:71:a4:1d: a7:47:5d:6f:36:64:5c:41:0f:bd:08:90:f4:a0:b2: f5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:14:EB:F7:88:8B:D1:9E:5B:30:05:BA:AE:27:B8:C8:78:B9:46:EC X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sBTr94iL0Z5bMAW6rie4yHi5Ruw.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption a1:62:16:4c:fa:20:ab:d4:b9:d3:7c:5d:43:ef:f7:bc:62:a1: 97:4c:86:d3:ee:fc:0f:4c:99:94:87:64:87:d5:8f:9c:69:c8: 00:8d:29:5c:db:c7:90:3f:d6:fc:69:21:92:1f:29:4b:ca:d8: 47:21:c4:07:d2:a0:3c:0b:8b:fb:55:bc:d1:99:97:1c:c5:d4: 96:83:36:6f:e2:ce:9e:11:a9:1b:ff:78:ce:b1:d2:f3:35:cb: 1d:d2:ab:2d:a3:8f:57:c7:10:ed:dd:ab:68:8d:e4:27:0a:1e: b8:09:38:cd:34:ef:c6:f7:1e:b1:53:8b:f3:7d:d4:0f:79:60: 63:f0:f3:ae:bd:b6:cb:e8:fe:68:1a:fa:70:c6:e3:37:2b:47: df:af:59:7d:49:fa:3c:03:74:1c:3f:74:47:71:51:e5:da:75: 83:d0:2d:c9:fc:a8:51:de:67:4c:cd:e7:8d:06:cf:62:61:0e: c4:db:5d:7c:a8:fc:03:46:b6:5a:09:96:65:7b:be:9b:dd:ed: 78:50:9c:05:6c:a6:03:cb:6b:0e:9a:5e:60:41:4a:8d:55:44: 31:63:58:97:76:33:f7:c0:55:f8:29:5f:75:33:ca:8f:d0:cc: 33:8a:59:a5:44:13:ef:64:a7:62:7c:86:fb:28:6f:e6:86:19: 9c:1b:dd:0f -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICQ1owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTgw OTIyNTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEIwMTRFQkY3ODg4QkQx OUU1QjMwMDVCQUFFMjdCOEM4NzhCOTQ2RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCQqa0iwRpI9Y6sDaFSMJ2E33P9vE/HCOhpLnt/dy/v7GiyApjy yqXBcf7MzqzPl6XUw9v9PxTsKEh0L+spbz9/AjyTVZ+VoVnBDdT4qjdBOZubRHEP q9LoN0qVRVwYS2fjVrDDYnz/zV9KqLyD8u3oiEcVwrLXiFQZ3LvbFJk3nQ6TjpAH t5zO1n2wx0ec9MN1Ial68mzpcGjSMEf9vHuYkvMyV9kKXHphGy1pT0Q4eskmErEl AQGWnrqnKtgCx/+aVIy/GsGrnblQRDhA5moN2I7atdEXaXNQmrLxKrHFg6vrRgIT Vm//fFX37XGkHadHXW82ZFxBD70IkPSgsvXHAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUsBTr94iL0Z5bMAW6rie4yHi5RuwwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3NCVHI5NGlMMFo1Yk1B VzZyaWU0eUhpNVJ1dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAoWIWTPogq9S503xdQ+/3vGKhl0yG0+78 D0yZlIdkh9WPnGnIAI0pXNvHkD/W/Gkhkh8pS8rYRyHEB9KgPAuL+1W80ZmXHMXU loM2b+LOnhGpG/94zrHS8zXLHdKrLaOPV8cQ7d2raI3kJwoeuAk4zTTvxvcesVOL 833UD3lgY/Dzrr22y+j+aBr6cMbjNytH369ZfUn6PAN0HD90R3FR5dp1g9Atyfyo Ud5nTM3njQbPYmEOxNtdfKj8A0a2WgmWZXu+m93teFCcBWymA8trDppeYEFKjVVE MWNYl3Yz98BV+ClfdTPKj9DMM4pZpUQT72SnYnyG+yhv5oYZnBvdDw== -----END CERTIFICATE-----Generated at Wed Jan 7 22:15:17 2026 by rpki-client