This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sGC2NhcO0Dmpd2ei31yKJUl3gww.roa File: sGC2NhcO0Dmpd2ei31yKJUl3gww.roa (raw, json) Hash identifier: VX1RQtUlwxG5S7XqwEB7ld/Jajg+vHYcJ3aoup/KxCo= Subject key identifier: B0:60:B6:36:17:0E:D0:39:A9:77:67:A2:DF:5C:8A:25:49:77:83:0C Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 425B Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sGC2NhcO0Dmpd2ei31yKJUl3gww.roa Signing time: Wed 17 Apr 2024 01:23:16 +0000 ROA not before: Wed 17 Apr 2024 01:23:16 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 36.0.64.0/18 maxlen: 18 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 16987 (0x425b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 17 01:23:16 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=B060B636170ED039A97767A2DF5C8A254977830C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:22:a7:65:e8:0b:10:0f:b3:a9:44:a8:b1:97: d4:93:ea:ee:cc:e5:32:36:87:ae:66:fb:38:7f:7e: 19:36:fc:9d:ee:93:3d:3e:3e:1c:23:d9:24:5c:19: 3f:a2:35:07:7d:de:b7:66:6a:dc:9d:16:dd:40:b9: 1b:78:39:9a:6b:31:2c:f6:c8:60:54:fb:05:46:cd: 98:46:01:c5:95:2f:00:45:c1:c9:61:76:b3:f5:ed: 59:4b:b4:10:90:3b:85:f7:db:8b:00:32:3d:c1:64: 96:14:77:68:ae:88:f6:36:d2:69:6f:47:a8:cc:af: 35:b8:f1:39:4d:de:4f:2d:79:13:a3:7a:b9:11:f5: 86:e3:17:0f:ad:45:d5:5f:8e:90:76:64:a1:32:a1: d4:8f:ba:82:5a:37:5a:a3:01:4e:29:ae:ac:33:84: d7:80:9f:1c:70:14:4c:a5:3e:cb:72:43:20:c8:c3: 50:c4:ae:73:b9:4d:66:1f:5b:90:4b:ed:58:61:6e: e7:e3:6c:6e:80:c9:8c:0d:50:85:6b:23:81:de:3d: 10:37:2b:d6:93:ff:e5:43:11:7b:40:1a:2e:83:86: 8b:8c:5d:d7:46:bb:bf:fa:d8:d4:52:13:a0:9e:1c: 17:64:4e:34:f3:ef:bd:43:e6:e8:f5:83:ef:6a:b2: 2e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:60:B6:36:17:0E:D0:39:A9:77:67:A2:DF:5C:8A:25:49:77:83:0C X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sGC2NhcO0Dmpd2ei31yKJUl3gww.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption 5c:ad:d5:d7:8a:4c:2b:4c:c1:5b:8a:0f:cb:e0:f6:37:8d:52: b2:db:bd:37:ec:02:60:54:56:06:c2:cc:c5:8c:59:56:4c:7d: 27:b4:a6:0b:ae:17:ba:28:4d:70:fe:29:da:4b:72:81:b5:46: a9:c0:23:31:ba:2b:26:d5:4c:c4:da:9b:58:c9:cc:84:f7:12: 88:99:84:fb:c7:37:ae:00:ae:d4:84:10:6b:cf:c2:4e:cb:89: 1c:80:eb:f4:ec:bc:0f:2a:4a:5f:eb:58:7d:dd:34:43:1a:1b: 4b:e4:bc:ea:f7:1f:83:ea:f2:6a:3f:03:e4:9d:d7:40:e6:b6: c7:3a:77:af:9d:60:55:f6:fa:a7:85:a2:1d:e9:06:76:96:7b: 46:10:e7:b7:07:c4:28:8d:ce:e5:f7:e5:2a:b3:4d:50:90:38: 92:6e:d0:2a:ea:81:b1:88:cb:d9:44:9e:07:87:15:8f:45:9e: f2:7d:3c:82:c9:ec:d3:df:c2:0c:14:80:9e:6a:f5:8b:d4:55: de:51:b7:49:82:06:4e:64:ea:d3:01:72:e9:dc:90:2a:5f:1d: 67:74:56:70:c0:f6:56:94:21:e2:83:f7:24:2e:25:99:f6:cc: d2:d8:f2:6f:d6:e5:8b:4e:7f:8c:18:1b:28:7d:47:60:3f:03: 4e:7f:3d:f8 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICQlswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTcw MTIzMTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEIwNjBCNjM2MTcwRUQw MzlBOTc3NjdBMkRGNUM4QTI1NDk3NzgzMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD+Iqdl6AsQD7OpRKixl9ST6u7M5TI2h65m+zh/fhk2/J3ukz0+ Phwj2SRcGT+iNQd93rdmatydFt1AuRt4OZprMSz2yGBU+wVGzZhGAcWVLwBFwclh drP17VlLtBCQO4X324sAMj3BZJYUd2iuiPY20mlvR6jMrzW48TlN3k8teROjerkR 9YbjFw+tRdVfjpB2ZKEyodSPuoJaN1qjAU4prqwzhNeAnxxwFEylPstyQyDIw1DE rnO5TWYfW5BL7VhhbufjbG6AyYwNUIVrI4HePRA3K9aT/+VDEXtAGi6DhouMXddG u7/62NRSE6CeHBdkTjTz771D5uj1g+9qsi4TAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUsGC2NhcO0Dmpd2ei31yKJUl3gwwwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3NHQzJOaGNPMERtcGQy ZWkzMXlLSlVsM2d3dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAFyt1deKTCtMwVuKD8vg9jeNUrLbvTfs AmBUVgbCzMWMWVZMfSe0pguuF7ooTXD+KdpLcoG1RqnAIzG6KybVTMTam1jJzIT3 EoiZhPvHN64ArtSEEGvPwk7LiRyA6/TsvA8qSl/rWH3dNEMaG0vkvOr3H4Pq8mo/ A+Sd10Dmtsc6d6+dYFX2+qeFoh3pBnaWe0YQ57cHxCiNzuX35SqzTVCQOJJu0Crq gbGIy9lEngeHFY9FnvJ9PILJ7NPfwgwUgJ5q9YvUVd5Rt0mCBk5k6tMBcunckCpf HWd0VnDA9laUIeKD9yQuJZn2zNLY8m/W5YtOf4wYGyh9R2A/A05/Pfg= -----END CERTIFICATE-----Generated at Sun Jan 11 19:19:05 2026 by rpki-client