This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wjY1KH0H1QpXPSiUMd0spN-bsYg.roa File: wjY1KH0H1QpXPSiUMd0spN-bsYg.roa (raw, json) Hash identifier: 57/ND8aLyIbGnzZPDPd2hKBlLF26S44wp9q23I87nFM= Subject key identifier: C2:36:35:28:7D:07:D5:0A:57:3D:28:94:31:DD:2C:A4:DF:9B:B1:88 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 6032 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wjY1KH0H1QpXPSiUMd0spN-bsYg.roa Signing time: Wed 14 May 2025 14:40:29 +0000 ROA not before: Wed 14 May 2025 14:40:29 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 24626 (0x6032) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 14 14:40:29 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C23635287D07D50A573D289431DD2CA4DF9BB188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:58:21:a7:5b:46:56:bb:be:1c:ae:79:d2: c0:3b:79:16:79:43:06:79:80:05:bd:e6:d5:41:41: 09:ea:ef:a2:8f:87:ba:23:ab:36:d7:4e:79:d8:2c: 0a:03:53:87:b9:7f:ae:35:a7:ca:f4:1e:6f:62:bd: c3:45:e6:50:44:57:39:f5:d4:83:a7:eb:ac:a0:11: 7f:0d:98:39:18:56:1e:d2:7a:98:7e:e6:3b:47:8b: 44:c0:00:7c:50:fb:69:78:30:12:f1:f7:a4:0f:af: 5f:64:f3:9a:7a:f8:49:63:7a:b2:a6:ff:4b:0c:45: 21:22:99:e7:81:3e:a5:7a:47:91:80:45:a2:cd:15: 51:8f:69:ec:c7:2d:0c:e8:4a:8d:ad:4b:36:a6:a4: 1a:a8:54:24:b9:a9:7f:40:7d:66:70:2f:89:ec:da: f8:26:43:3d:3b:52:05:55:65:7b:c8:3d:18:f3:a9: 5a:79:aa:1c:6a:cd:9c:f3:93:ef:4b:0a:4e:9e:9e: 6b:01:23:a0:20:74:c3:8d:5b:1b:99:6d:c9:de:a3: 4b:d6:5d:ee:6a:e6:f6:c5:f2:c1:86:48:24:b8:d8: 78:1a:72:d0:1d:2f:c1:d6:39:02:be:f7:eb:f4:88: 26:21:44:f3:9c:0e:0b:18:e9:49:5a:7c:15:98:bf: e2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:36:35:28:7D:07:D5:0A:57:3D:28:94:31:DD:2C:A4:DF:9B:B1:88 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wjY1KH0H1QpXPSiUMd0spN-bsYg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 3c:73:b0:75:e8:4d:ba:20:c3:ca:8d:6a:47:1b:86:9e:59:10: d0:ab:14:6a:d7:ec:1e:f0:a6:d4:59:1b:15:54:02:78:6b:3f: fc:a7:b5:ab:23:cc:84:6d:d4:74:f8:de:e1:96:42:0f:7c:61: 0e:61:cb:10:9d:24:ea:96:86:5a:7f:8a:fb:68:8c:8c:9a:86: d6:77:16:37:a1:71:81:cf:9f:a9:f0:94:0d:95:ce:08:a2:d5: ed:e8:20:8e:ca:ea:b2:06:a3:59:5b:ea:9d:a9:06:e1:f2:2f: 32:4d:5e:8d:0b:c6:a1:56:c5:b5:2a:99:a6:89:ca:44:ab:37: 99:fa:b6:95:89:f5:96:ce:e5:31:35:0b:13:24:68:06:fd:dd: db:3a:71:ef:77:55:0e:db:fb:92:2f:8f:49:6c:68:8c:d9:ba: 44:a7:b2:fb:ca:ed:ff:29:f6:70:42:c1:22:20:fd:e2:4e:00: 4e:b3:7f:79:81:88:2b:6d:78:f6:0e:61:af:65:de:ca:0d:8d: ab:34:07:9e:ab:cb:4d:67:5b:41:db:dc:f8:85:28:09:fb:6e: 17:8c:0e:11:9e:d2:99:1d:58:03:c3:0d:29:bb:4d:ff:fe:30: d4:d7:ce:86:9c:55:76:cc:d0:95:78:67:ba:22:83:80:59:85: d1:d7:48:13 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICYDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MTQx NDQwMjlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEMyMzYzNTI4N0QwN0Q1 MEE1NzNEMjg5NDMxREQyQ0E0REY5QkIxODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCL1ghp1tGVru+HK550sA7eRZ5QwZ5gAW95tVBQQnq76KPh7oj qzbXTnnYLAoDU4e5f641p8r0Hm9ivcNF5lBEVzn11IOn66ygEX8NmDkYVh7Seph+ 5jtHi0TAAHxQ+2l4MBLx96QPr19k85p6+EljerKm/0sMRSEimeeBPqV6R5GARaLN FVGPaezHLQzoSo2tSzampBqoVCS5qX9AfWZwL4ns2vgmQz07UgVVZXvIPRjzqVp5 qhxqzZzzk+9LCk6enmsBI6AgdMONWxuZbcneo0vWXe5q5vbF8sGGSCS42HgactAd L8HWOQK+9+v0iCYhRPOcDgsY6UlafBWYv+InAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUwjY1KH0H1QpXPSiUMd0spN+bsYgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3dqWTFLSDBIMVFwWFBT aVVNZDBzcE4tYnNZZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQA8c7B1 6E26IMPKjWpHG4aeWRDQqxRq1+we8KbUWRsVVAJ4az/8p7WrI8yEbdR0+N7hlkIP fGEOYcsQnSTqloZaf4r7aIyMmobWdxY3oXGBz5+p8JQNlc4IotXt6CCOyuqyBqNZ W+qdqQbh8i8yTV6NC8ahVsW1KpmmicpEqzeZ+raVifWWzuUxNQsTJGgG/d3bOnHv d1UO2/uSL49JbGiM2bpEp7L7yu3/KfZwQsEiIP3iTgBOs395gYgrbXj2DmGvZd7K DY2rNAeeq8tNZ1tB29z4hSgJ+24XjA4RntKZHVgDww0pu03//jDU186GnFV2zNCV eGe6IoOAWYXR10gT -----END CERTIFICATE-----Generated at Mon Jan 12 06:14:15 2026 by rpki-client