This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xMbf6aQWwm2Na-RsbaTnU-OxRNM.roa File: xMbf6aQWwm2Na-RsbaTnU-OxRNM.roa (raw, json) Hash identifier: PsjBup0L7s2RfOSb6LBMjvAp8GpE7/7OIDIS/6J+9A8= Subject key identifier: C4:C6:DF:E9:A4:16:C2:6D:8D:6B:E4:6C:6D:A4:E7:53:E3:B1:44:D3 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 638E Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xMbf6aQWwm2Na-RsbaTnU-OxRNM.roa Signing time: Fri 23 May 2025 13:41:48 +0000 ROA not before: Fri 23 May 2025 13:41:48 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 25486 (0x638e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 23 13:41:48 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=C4C6DFE9A416C26D8D6BE46C6DA4E753E3B144D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:08:48:80:b1:e2:61:77:01:63:38:1a:6a: f6:3d:12:d0:6c:d0:a0:6c:17:91:d0:6a:b0:05:ef: 92:9c:41:c6:25:21:de:80:e0:9a:e2:21:0e:00:7e: 52:8a:1d:f1:c7:c8:61:33:b7:65:94:e7:88:b1:e8: 57:37:db:0d:4c:b1:f4:1e:3f:67:14:35:35:2d:f5: 67:52:84:14:86:1a:d3:0a:4b:f9:ed:56:82:cf:49: 60:6a:16:da:79:47:a2:24:03:a8:3e:38:39:9f:59: 6d:14:4a:37:18:77:39:ec:1d:3d:f2:c2:a6:a5:ff: c2:99:84:66:40:a7:c8:81:f2:76:56:38:3c:f8:de: 9f:76:3c:08:ed:0c:e2:23:5e:5d:26:90:f8:b1:23: c9:b3:90:a0:85:1b:25:07:1f:55:0a:b1:ea:ba:9a: f3:70:41:35:37:f8:89:36:8b:13:76:fd:47:64:bc: 65:24:99:27:50:0e:1b:ad:09:2f:8b:33:8f:7a:f8: 34:86:0e:04:8c:67:52:d7:45:9c:92:f5:f3:e1:d2: b7:d0:70:17:c9:d9:80:e0:8f:7e:23:a3:6e:32:d8: b5:68:ef:2b:4d:5c:18:c9:b5:b7:39:2f:b1:10:81: 07:96:d4:b0:3f:65:20:78:97:e5:5e:73:49:3f:ab: ab:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C6:DF:E9:A4:16:C2:6D:8D:6B:E4:6C:6D:A4:E7:53:E3:B1:44:D3 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xMbf6aQWwm2Na-RsbaTnU-OxRNM.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 3d:63:3f:cc:c8:ee:8b:0b:0b:01:11:7a:3b:94:65:5b:54:f0: a5:e7:09:c3:06:2f:bf:63:0c:a5:32:f2:ed:60:2c:f0:ac:5f: b2:a2:69:66:8e:be:b0:d2:86:e9:bd:7a:f3:a4:13:76:2c:61: 68:85:e2:bd:f1:91:d4:40:80:99:f8:e3:df:b7:3b:31:68:cd: 3f:8f:61:39:d6:13:8a:8f:a4:0f:9f:42:d4:6c:04:2a:6f:de: 9f:1e:9c:18:1c:b7:0c:57:d1:0f:5a:4d:d9:df:0e:82:bc:43: 45:d4:6a:bd:0f:bd:53:b5:f2:e8:97:a3:56:e9:dc:36:6a:f6: 85:13:9e:93:9a:e9:75:ca:e8:d9:61:b0:7f:7a:da:26:aa:f6: a1:ce:1a:23:af:0b:55:14:38:da:52:23:e0:9b:85:18:81:5d: c8:12:4a:2b:2b:d9:1f:ae:23:24:4f:e8:a3:ea:2e:30:97:34: 42:96:ef:49:0e:0e:d9:38:dc:83:25:3d:b7:74:d6:c5:ac:65: d6:34:d4:82:1e:da:40:a8:0f:5f:93:b7:8b:71:ff:03:bf:af: 22:2f:9f:67:4a:37:5a:ab:29:06:4b:bc:96:10:39:3e:d9:2c: 0b:f6:8f:e0:aa:ab:0e:60:45:b3:5a:7f:8b:16:7e:a1:01:aa: 03:b9:e7:60 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICY44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjMx MzQxNDhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEM0QzZERkU5QTQxNkMy NkQ4RDZCRTQ2QzZEQTRFNzUzRTNCMTQ0RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy8ghIgLHiYXcBYzgaavY9EtBs0KBsF5HQarAF75KcQcYlId6A 4JriIQ4AflKKHfHHyGEzt2WU54ix6Fc32w1MsfQeP2cUNTUt9WdShBSGGtMKS/nt VoLPSWBqFtp5R6IkA6g+ODmfWW0USjcYdznsHT3ywqal/8KZhGZAp8iB8nZWODz4 3p92PAjtDOIjXl0mkPixI8mzkKCFGyUHH1UKseq6mvNwQTU3+Ik2ixN2/UdkvGUk mSdQDhutCS+LM496+DSGDgSMZ1LXRZyS9fPh0rfQcBfJ2YDgj34jo24y2LVo7ytN XBjJtbc5L7EQgQeW1LA/ZSB4l+Vec0k/q6vtAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUxMbf6aQWwm2Na+RsbaTnU+OxRNMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3hNYmY2YVFXd20yTmEt UnNiYVRuVS1PeFJOTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQA9Yz/M yO6LCwsBEXo7lGVbVPCl5wnDBi+/YwylMvLtYCzwrF+yomlmjr6w0obpvXrzpBN2 LGFoheK98ZHUQICZ+OPftzsxaM0/j2E51hOKj6QPn0LUbAQqb96fHpwYHLcMV9EP Wk3Z3w6CvENF1Gq9D71TtfLol6NW6dw2avaFE56Tmul1yujZYbB/etomqvahzhoj rwtVFDjaUiPgm4UYgV3IEkorK9kfriMkT+ij6i4wlzRClu9JDg7ZONyDJT23dNbF rGXWNNSCHtpAqA9fk7eLcf8Dv68iL59nSjdaqykGS7yWEDk+2SwL9o/gqqsOYEWz Wn+LFn6hAaoDuedg -----END CERTIFICATE-----Generated at Mon Jan 12 07:42:36 2026 by rpki-client