This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zKe3tj9PrFMOYPHAK7d6C3Ci8sE.roa File: zKe3tj9PrFMOYPHAK7d6C3Ci8sE.roa (raw, json) Hash identifier: 6cHLqpol3wMOZ0vN8StQQ8BZZ2+oR56TL8s0ouQP23c= Subject key identifier: CC:A7:B7:B6:3F:4F:AC:53:0E:60:F1:C0:2B:B7:7A:0B:70:A2:F2:C1 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 43F5 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zKe3tj9PrFMOYPHAK7d6C3Ci8sE.roa Signing time: Fri 19 Apr 2024 04:53:01 +0000 ROA not before: Fri 19 Apr 2024 04:53:01 +0000 ROA not after: Fri 31 Jan 2025 01:13:46 +0000 asID: 24426 IP address blocks: 43.239.0.0/19 maxlen: 19 101.78.32.0/19 maxlen: 19 103.35.0.0/19 maxlen: 19 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 17397 (0x43f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Apr 19 04:53:01 2024 GMT Not After : Jan 31 01:13:46 2025 GMT Subject: CN=CCA7B7B63F4FAC530E60F1C02BB77A0B70A2F2C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:e5:34:d1:24:ca:e4:58:fa:a1:fd:9d:a0: 76:8b:74:7f:80:57:88:bc:58:aa:ef:73:23:51:d5: 65:aa:8c:59:32:e3:54:5b:d5:37:a3:b9:9a:9a:57: a4:73:1e:24:a9:71:83:c2:4a:35:e4:e2:80:6f:8b: 88:11:6f:2a:35:0f:d7:4d:fe:1e:58:15:bd:0b:84: 9a:2d:8e:89:79:17:4d:74:1d:0a:62:f7:6b:a3:fc: 68:a0:69:19:88:b9:c8:fd:d9:8c:03:37:87:b8:95: 3f:2a:8f:eb:57:38:36:60:bb:4b:4a:7b:67:ba:d4: ea:40:ec:d3:5b:71:ed:f6:16:df:5e:e3:a7:02:5d: 4f:7f:c0:4d:af:dc:cd:9b:45:4d:ff:e5:7b:7c:58: 18:57:b7:2b:98:70:16:7e:db:a5:73:cd:e0:9d:87: 98:a4:9b:e0:1d:09:52:06:a0:99:0b:66:a4:f1:9b: 99:64:b9:e9:33:14:f6:39:5a:8d:00:3b:17:3f:46: db:ee:d6:f9:6c:f7:41:0e:97:0f:cd:ad:f3:63:6f: d1:4a:43:c3:4a:82:bb:b5:75:c6:d6:0f:ea:d9:b5: 90:a3:61:6a:cb:61:bf:8b:35:c8:cd:f9:0f:8a:0a: 1c:91:3e:b3:28:8b:e6:7f:f2:49:bd:11:84:86:61: 0c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A7:B7:B6:3F:4F:AC:53:0E:60:F1:C0:2B:B7:7A:0B:70:A2:F2:C1 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zKe3tj9PrFMOYPHAK7d6C3Ci8sE.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.0.0/19 101.78.32.0/19 103.35.0.0/19 Signature Algorithm: sha256WithRSAEncryption 56:ed:a2:dc:87:cc:84:1a:ef:93:f1:d1:1d:b8:af:2a:42:0c: 55:74:fc:7c:da:af:02:0f:ff:8d:15:72:27:4b:d3:aa:0c:0f: 05:40:bd:67:41:f0:e4:9c:29:46:48:93:b0:83:d7:32:1f:70: ad:2c:80:bf:88:89:c7:24:4d:28:2e:79:ec:b2:1a:41:67:4e: e8:0f:76:df:c3:c4:2e:3c:c9:32:4e:c2:5f:2c:e5:77:c2:3b: ca:39:5c:d8:b4:1f:ba:e3:3c:94:91:91:92:dd:f3:8d:60:fd: 0f:a3:e4:76:73:18:0f:76:79:46:bd:83:52:80:b4:d5:a2:a6: 38:9f:05:2d:c9:68:15:13:a9:22:fc:4f:de:3d:45:43:83:43: b4:38:9b:10:4e:86:3e:4a:87:f8:53:80:88:e7:0a:4b:71:63: 34:95:5d:3f:bb:a6:d6:4e:a1:c3:94:87:88:89:64:e6:79:ff: 67:83:62:42:62:91:a4:da:b2:a9:ff:e2:48:85:2f:64:ec:63: 27:d4:7e:82:2a:a0:5e:9b:94:7f:91:b2:4c:e1:4d:46:58:ec: 7a:7e:01:fb:34:18:7d:54:bf:df:45:43:37:68:6e:fa:47:75: 94:f7:e3:52:82:67:dc:39:32:f0:eb:81:ea:d8:c8:b3:0a:0d: 13:7a:ff:87 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgICQ/UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTkw NDUzMDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENDQTdCN0I2M0Y0RkFD NTMwRTYwRjFDMDJCQjc3QTBCNzBBMkYyQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0g+U00STK5Fj6of2doHaLdH+AV4i8WKrvcyNR1WWqjFky41Rb 1TejuZqaV6RzHiSpcYPCSjXk4oBvi4gRbyo1D9dN/h5YFb0LhJotjol5F010HQpi 92uj/GigaRmIucj92YwDN4e4lT8qj+tXODZgu0tKe2e61OpA7NNbce32Ft9e46cC XU9/wE2v3M2bRU3/5Xt8WBhXtyuYcBZ+26VzzeCdh5ikm+AdCVIGoJkLZqTxm5lk uekzFPY5Wo0AOxc/Rtvu1vls90EOlw/NrfNjb9FKQ8NKgru1dcbWD+rZtZCjYWrL Yb+LNcjN+Q+KChyRPrMoi+Z/8km9EYSGYQybAgMBAAGjggH9MIIB+TAdBgNVHQ4E FgQUzKe3tj9PrFMOYPHAK7d6C3Ci8sEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3pLZTN0ajlQckZNT1lQ SEFLN2Q2QzNDaThzRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAFbtotyHzIQa75Px 0R24rypCDFV0/HzarwIP/40VcidL06oMDwVAvWdB8OScKUZIk7CD1zIfcK0sgL+I icckTSgueeyyGkFnTugPdt/DxC48yTJOwl8s5XfCO8o5XNi0H7rjPJSRkZLd841g /Q+j5HZzGA92eUa9g1KAtNWipjifBS3JaBUTqSL8T949RUODQ7Q4mxBOhj5Kh/hT gIjnCktxYzSVXT+7ptZOocOUh4iJZOZ5/2eDYkJikaTasqn/4kiFL2TsYyfUfoIq oF6blH+RskzhTUZY7Hp+Afs0GH1Uv99FQzdobvpHdZT341KCZ9w5MvDrgerYyLMK DRN6/4c= -----END CERTIFICATE-----Generated at Thu Jan 8 11:32:10 2026 by rpki-client