This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/t4KnWjXX-fjOboYdxfrBIdAbZMA.roa File: t4KnWjXX-fjOboYdxfrBIdAbZMA.roa (raw, json) Hash identifier: HjeFNrsGkKEWkfayOR8+jW+TYNPPge2jQYStISbraog= Subject key identifier: B7:82:A7:5A:35:D7:F9:F8:CE:6E:86:1D:C5:FA:C1:21:D0:1B:64:C0 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 417D Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/t4KnWjXX-fjOboYdxfrBIdAbZMA.roa Signing time: Mon 15 Apr 2024 21:53:20 +0000 ROA not before: Mon 15 Apr 2024 21:53:20 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.239.0.0/19 maxlen: 19 101.78.32.0/19 maxlen: 19 103.35.0.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 16765 (0x417d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 15 21:53:20 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=B782A75A35D7F9F8CE6E861DC5FAC121D01B64C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:19:6f:d9:41:90:27:02:20:b0:8a:11:f4:00: 8f:fb:72:49:b0:09:48:c1:76:c7:e8:72:c1:2a:85: cb:5b:4a:29:8b:4c:bc:5c:76:4c:c1:74:97:4a:26: 4f:43:2a:3f:83:40:48:5d:dc:70:da:da:1d:df:79: 24:18:c5:7e:2c:a2:77:0e:7b:3d:32:13:93:bb:bd: b1:24:b3:d6:c0:95:fc:1b:5f:ef:c0:7c:1e:df:bb: 8d:5c:2c:d5:14:a1:bb:14:cb:31:61:ac:8c:8b:e6: e1:67:a4:b9:38:61:17:4a:38:73:13:a3:8c:22:97: e1:64:d6:96:44:91:33:d7:b7:9c:d0:2a:e2:e1:de: 24:1e:59:74:38:29:f3:cc:11:39:a2:31:90:b7:f3: 84:57:8a:b5:2b:c3:e0:e9:33:1f:b0:81:96:4d:f2: b8:3a:79:65:e8:36:d3:00:b9:5d:3a:d6:f5:ab:c9: 90:bd:00:4d:a1:c7:d7:b5:39:83:6d:f4:d0:dd:29: f7:fe:e6:68:d1:bf:f3:bc:01:9e:fc:44:07:43:ab: 78:e9:89:5d:fe:d0:17:b7:46:93:b9:f5:3f:03:af: ff:cd:55:48:03:88:9f:0c:61:06:bb:59:25:70:0e: b9:49:bb:9f:cf:67:1b:12:a9:4d:bc:ac:db:d4:ed: a0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:82:A7:5A:35:D7:F9:F8:CE:6E:86:1D:C5:FA:C1:21:D0:1B:64:C0 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/t4KnWjXX-fjOboYdxfrBIdAbZMA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.0.0/19 101.78.32.0/19 103.35.0.0/19 Signature Algorithm: sha256WithRSAEncryption 26:75:fa:6f:a6:79:36:af:c9:5f:73:c1:4e:e8:51:0b:c9:74: 4d:c0:67:d4:79:4d:71:ca:cd:0b:31:86:ec:c0:3b:ca:f2:2e: 07:72:19:6f:c4:01:c3:3d:d8:e1:65:94:0b:35:47:de:5d:1b: c4:a3:0b:90:ed:a3:2c:24:82:22:3f:97:f6:0d:a8:bd:41:90: 7e:ea:8c:74:7a:87:af:bb:66:fe:7a:de:3a:72:60:1e:1a:b3: 9a:71:22:c3:11:36:2a:ec:1f:be:b3:34:3c:ec:f0:2a:80:a5: 15:20:37:1e:0a:40:93:27:7f:19:23:43:fb:a8:a3:06:a7:ee: 5b:87:f0:35:34:9d:fc:a8:0f:8c:91:46:c4:a2:ce:81:ac:f8: fc:fc:92:0e:d4:6f:d5:ab:a2:b4:6a:e5:7a:02:80:fd:d4:4d: 3a:e9:d4:31:43:8c:41:cb:af:ec:77:49:8e:46:fc:ac:d2:7b: 53:3a:20:bc:54:2d:0b:4a:af:1c:2c:40:ab:dc:3d:00:b8:63: 3a:5e:10:85:2c:d2:66:e5:5b:c8:67:de:8b:ab:71:7e:63:c6: 9c:05:1f:90:27:cb:f1:40:95:e9:fd:dd:6d:cf:2a:cf:2d:a7: 9a:39:65:06:d2:78:43:cb:4a:3e:b2:b7:4e:6e:a9:84:37:a0: c4:79:70:54 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgICQX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTUy MTUzMjBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEI3ODJBNzVBMzVEN0Y5 RjhDRTZFODYxREM1RkFDMTIxRDAxQjY0QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgGW/ZQZAnAiCwihH0AI/7ckmwCUjBdsfocsEqhctbSimLTLxc dkzBdJdKJk9DKj+DQEhd3HDa2h3feSQYxX4soncOez0yE5O7vbEks9bAlfwbX+/A fB7fu41cLNUUobsUyzFhrIyL5uFnpLk4YRdKOHMTo4wil+Fk1pZEkTPXt5zQKuLh 3iQeWXQ4KfPMETmiMZC384RXirUrw+DpMx+wgZZN8rg6eWXoNtMAuV061vWryZC9 AE2hx9e1OYNt9NDdKff+5mjRv/O8AZ78RAdDq3jpiV3+0Be3RpO59T8Dr//NVUgD iJ8MYQa7WSVwDrlJu5/PZxsSqU28rNvU7aDbAgMBAAGjggH9MIIB+TAdBgNVHQ4E FgQUt4KnWjXX+fjOboYdxfrBIdAbZMAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3Q0S25XalhYLWZqT2Jv WWR4ZnJCSWRBYlpNQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBACZ1+m+meTavyV9z wU7oUQvJdE3AZ9R5TXHKzQsxhuzAO8ryLgdyGW/EAcM92OFllAs1R95dG8SjC5Dt oywkgiI/l/YNqL1BkH7qjHR6h6+7Zv563jpyYB4as5pxIsMRNirsH76zNDzs8CqA pRUgNx4KQJMnfxkjQ/uoowan7luH8DU0nfyoD4yRRsSizoGs+Pz8kg7Ub9WrorRq 5XoCgP3UTTrp1DFDjEHLr+x3SY5G/KzSe1M6ILxULQtKrxwsQKvcPQC4YzpeEIUs 0mblW8hn3ourcX5jxpwFH5Any/FAlen93W3PKs8tp5o5ZQbSeEPLSj6yt05uqYQ3 oMR5cFQ= -----END CERTIFICATE-----Generated at Mon Jan 12 15:00:46 2026 by rpki-client