This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vDYDdu8izpwNUaYSoEfXvld-wQg.roa File: vDYDdu8izpwNUaYSoEfXvld-wQg.roa (raw, json) Hash identifier: 4o2I6BW7DxeWq/PdiZKaIU5tGLH+YXzOMl1CiokhtPE= Subject key identifier: BC:36:03:76:EF:22:CE:9C:0D:51:A6:12:A0:47:D7:BE:57:7E:C1:08 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 4DBF Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vDYDdu8izpwNUaYSoEfXvld-wQg.roa Signing time: Thu 02 May 2024 05:53:43 +0000 ROA not before: Thu 02 May 2024 05:53:43 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 36.0.64.0/18 maxlen: 18 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 19903 (0x4dbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 2 05:53:43 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=BC360376EF22CE9C0D51A612A047D7BE577EC108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:df:7a:00:09:89:e9:ff:12:d0:27:df:51: 1d:0e:9c:be:41:98:44:9c:4c:59:fe:a3:68:8d:43: 8c:7b:e7:ad:1a:37:86:19:d8:12:af:2d:bc:69:05: 19:e3:4f:a5:91:ec:e8:c1:c5:a4:30:1c:54:21:55: 11:e7:35:1c:bd:fa:30:f1:3a:c9:02:e1:4d:d8:70: 26:3e:8d:82:2d:66:87:7a:91:0e:37:c7:35:c0:58: fd:55:28:f3:62:d6:96:ea:12:32:97:ab:df:50:71: a2:78:7b:6f:04:b6:7f:e3:cf:14:03:f2:b8:5e:14: 06:01:4d:0b:0b:bc:4e:73:ed:a2:7a:ad:f3:6f:75: da:57:02:d0:70:a6:8a:3a:8d:a6:14:1f:9b:cc:07: cc:df:32:26:55:37:d2:c2:a3:9a:3a:8f:7d:35:b6: b8:8e:6e:30:65:25:ab:37:7d:37:05:5e:3e:f9:d3: 36:f0:0c:91:41:a6:d1:4c:e2:d7:e3:3f:df:e4:e0: 74:37:bf:f3:0a:c6:be:ba:17:d6:8b:80:5d:f9:1c: eb:93:a1:49:f3:00:a9:2c:bf:79:9f:3b:5a:24:df: 1f:26:5b:09:d1:dd:64:69:c4:b0:fd:83:71:98:3c: d4:03:9d:47:30:c2:15:d7:15:18:d5:f6:fd:90:d2: 57:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:36:03:76:EF:22:CE:9C:0D:51:A6:12:A0:47:D7:BE:57:7E:C1:08 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vDYDdu8izpwNUaYSoEfXvld-wQg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption 19:e6:fe:97:42:91:40:7d:ac:e9:84:24:08:de:6a:6e:54:f7: 7f:9f:f2:49:52:75:22:73:a1:bd:0c:c2:a3:bc:67:ce:0f:df: c2:33:a8:d8:08:82:79:05:65:47:f2:3f:91:b3:66:40:45:26: 1b:f1:c2:39:9c:27:f6:04:ef:d6:c1:4b:f9:28:16:7b:c5:43: b0:72:53:ca:21:29:af:d2:36:55:2d:4d:dc:07:91:30:10:7a: ef:f8:23:7f:c2:ef:aa:7f:43:bb:15:ab:a3:80:5d:29:68:75: ab:77:cb:81:cb:91:5e:99:42:f9:fb:74:30:09:c4:de:8c:99: 1c:6b:6e:94:13:0a:68:f8:c6:10:bc:fa:a2:74:8b:ef:85:1e: e2:f0:69:19:6d:b7:a3:a9:9d:13:d7:9e:7a:34:cf:a9:ff:19: 1f:ff:c1:be:92:7c:88:21:28:08:cd:5d:5c:85:d7:b1:79:5b: eb:af:97:d9:06:12:9c:69:6b:44:f8:e1:c5:c6:f1:dc:b7:58: 74:0a:68:71:30:ca:46:d7:2b:80:42:75:b1:49:b5:1b:9f:81: f6:97:1f:99:89:0f:a0:14:c2:a4:af:f6:2f:f9:d6:76:66:ac: d2:9b:42:ef:6a:c6:24:43:ea:18:6b:43:32:e9:0a:c0:c2:d9: eb:b3:e9:33 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICTb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDIw NTUzNDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJDMzYwMzc2RUYyMkNF OUMwRDUxQTYxMkEwNDdEN0JFNTc3RUMxMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK2N96AAmJ6f8S0CffUR0OnL5BmEScTFn+o2iNQ4x7560aN4YZ 2BKvLbxpBRnjT6WR7OjBxaQwHFQhVRHnNRy9+jDxOskC4U3YcCY+jYItZod6kQ43 xzXAWP1VKPNi1pbqEjKXq99QcaJ4e28Etn/jzxQD8rheFAYBTQsLvE5z7aJ6rfNv ddpXAtBwpoo6jaYUH5vMB8zfMiZVN9LCo5o6j301triObjBlJas3fTcFXj750zbw DJFBptFM4tfjP9/k4HQ3v/MKxr66F9aLgF35HOuToUnzAKksv3mfO1ok3x8mWwnR 3WRpxLD9g3GYPNQDnUcwwhXXFRjV9v2Q0lfJAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUvDYDdu8izpwNUaYSoEfXvld+wQgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZEWURkdThpenB3TlVh WVNvRWZYdmxkLXdRZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAYkAEAwDQYJKoZIhvcNAQELBQADggEBABnm/pdCkUB9rOmEJAjeam5U93+f8klS dSJzob0MwqO8Z84P38IzqNgIgnkFZUfyP5GzZkBFJhvxwjmcJ/YE79bBS/koFnvF Q7ByU8ohKa/SNlUtTdwHkTAQeu/4I3/C76p/Q7sVq6OAXSlodat3y4HLkV6ZQvn7 dDAJxN6MmRxrbpQTCmj4xhC8+qJ0i++FHuLwaRltt6OpnRPXnno0z6n/GR//wb6S fIghKAjNXVyF17F5W+uvl9kGEpxpa0T44cXG8dy3WHQKaHEwykbXK4BCdbFJtRuf gfaXH5mJD6AUwqSv9i/51nZmrNKbQu9qxiRD6hhrQzLpCsDC2euz6TM= -----END CERTIFICATE-----Generated at Sun Jan 11 20:22:10 2026 by rpki-client