This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/y3A0E3h8FS5aSXI2gy6uovjh6ac.roa File: y3A0E3h8FS5aSXI2gy6uovjh6ac.roa (raw, json) Hash identifier: UXH0YY5L0QF8QtIyGNacGg0Qm5PtZ/eEblE78MOZmdI= Subject key identifier: CB:70:34:13:78:7C:15:2E:5A:49:72:36:83:2E:AE:A2:F8:E1:E9:A7 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 41EE Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/y3A0E3h8FS5aSXI2gy6uovjh6ac.roa Signing time: Tue 16 Apr 2024 11:53:25 +0000 ROA not before: Tue 16 Apr 2024 11:53:25 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.236.0.0/16 maxlen: 16 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 16878 (0x41ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 16 11:53:25 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=CB703413787C152E5A497236832EAEA2F8E1E9A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:9b:0b:2d:c3:c6:88:84:10:fb:15:9d:86: d6:ef:e0:71:cb:32:81:76:83:0e:0b:02:4a:35:ae: ee:67:28:74:54:8c:5e:a3:98:ab:02:bd:4c:00:9a: 0a:04:7b:6a:2b:81:91:b6:6a:53:ed:b9:af:c8:af: 69:ec:fc:08:ce:12:cf:a0:2c:74:2f:66:06:19:36: ef:58:82:0a:d0:c6:5e:3a:5b:17:2d:6d:28:d9:2c: 9d:6f:3c:cb:9d:ac:d3:61:65:ac:4e:ce:0c:61:54: 07:a6:f6:87:c7:c0:cf:3d:b6:74:30:5f:5b:73:9f: 34:35:10:06:db:8e:6f:8f:11:de:d4:37:88:f1:cb: c2:07:6f:82:d8:8c:f0:70:a9:6f:66:24:c6:b9:b5: 3d:20:57:18:88:38:bf:41:08:c6:04:de:d3:e8:d6: 9a:cb:be:3b:4a:29:02:bc:01:56:2b:67:39:82:a6: 03:46:89:84:7d:8f:b2:81:3f:9c:78:2e:6f:54:b4: 81:3d:1c:4d:18:70:b0:ba:8a:94:16:99:ee:39:5d: 28:0f:b1:9d:5a:b2:9b:0a:22:88:f6:05:f4:1d:0c: 05:9a:43:59:08:39:39:4c:1b:47:f6:57:20:b9:3d: 0e:12:c3:5a:bd:bb:54:fc:9b:df:49:90:63:a4:96: a4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:70:34:13:78:7C:15:2E:5A:49:72:36:83:2E:AE:A2:F8:E1:E9:A7 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/y3A0E3h8FS5aSXI2gy6uovjh6ac.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.236.0.0/16 Signature Algorithm: sha256WithRSAEncryption 03:05:7b:23:b5:a4:89:c0:aa:ce:c5:95:8f:c9:66:ad:73:67: c5:8b:90:e8:bc:52:33:eb:27:ff:ea:7a:32:c0:ee:c5:c1:7c: 4e:6c:bd:c1:10:ac:4f:73:cb:53:81:5e:6a:e0:cf:aa:b5:c7: f9:e3:d8:69:5a:0b:95:16:38:97:39:e9:d7:3a:95:a5:e9:13: 61:8e:54:25:4d:7c:c4:dc:6e:82:21:f6:7e:06:06:6a:f8:d7: 6d:76:3e:f7:70:f0:e8:fe:e5:9f:4b:4a:73:63:a7:24:fa:79: 97:d3:99:b6:35:f9:ad:b1:8a:ba:c4:a0:e6:3a:8f:5f:b5:19: 04:b1:8b:c8:fb:df:66:72:45:7b:eb:48:2f:d9:4e:03:c3:92: 89:7f:17:46:69:77:e4:57:bb:d7:6d:a3:fb:c8:60:72:3c:ed: 08:d6:a4:b7:a3:5a:77:86:cf:fe:2b:d1:d2:0a:e0:a9:fc:db: 79:74:5f:e4:4d:5a:6e:16:ab:83:e1:af:36:01:e2:aa:52:83: 57:20:89:89:2c:12:76:4f:77:54:78:aa:0d:72:e2:04:90:97: 5e:4d:73:da:f3:b3:53:2c:d2:7a:df:1f:93:8c:33:a7:05:e6: f4:04:a3:20:ee:e0:9a:42:d0:3d:ca:44:78:23:31:b8:1b:30: e0:a3:5d:53 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICQe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTYx MTUzMjVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENCNzAzNDEzNzg3QzE1 MkU1QTQ5NzIzNjgzMkVBRUEyRjhFMUU5QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRVpsLLcPGiIQQ+xWdhtbv4HHLMoF2gw4LAko1ru5nKHRUjF6j mKsCvUwAmgoEe2orgZG2alPtua/Ir2ns/AjOEs+gLHQvZgYZNu9YggrQxl46Wxct bSjZLJ1vPMudrNNhZaxOzgxhVAem9ofHwM89tnQwX1tznzQ1EAbbjm+PEd7UN4jx y8IHb4LYjPBwqW9mJMa5tT0gVxiIOL9BCMYE3tPo1prLvjtKKQK8AVYrZzmCpgNG iYR9j7KBP5x4Lm9UtIE9HE0YcLC6ipQWme45XSgPsZ1aspsKIoj2BfQdDAWaQ1kI OTlMG0f2VyC5PQ4Sw1q9u1T8m99JkGOklqSzAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUy3A0E3h8FS5aSXI2gy6uovjh6acwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3kzQTBFM2g4RlM1YVNY STJneTZ1b3ZqaDZhYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAAwV7I7WkicCqzsWVj8lmrXNnxYuQ6LxS M+sn/+p6MsDuxcF8Tmy9wRCsT3PLU4FeauDPqrXH+ePYaVoLlRY4lznp1zqVpekT YY5UJU18xNxugiH2fgYGavjXbXY+93Dw6P7ln0tKc2OnJPp5l9OZtjX5rbGKusSg 5jqPX7UZBLGLyPvfZnJFe+tIL9lOA8OSiX8XRml35Fe7122j+8hgcjztCNakt6Na d4bP/ivR0grgqfzbeXRf5E1abharg+GvNgHiqlKDVyCJiSwSdk93VHiqDXLiBJCX Xk1z2vOzUyzSet8fk4wzpwXm9ASjIO7gmkLQPcpEeCMxuBsw4KNdUw== -----END CERTIFICATE-----Generated at Mon Jan 12 10:31:58 2026 by rpki-client