This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zTdlcmGl1o-x2X9DDWeyuvUHU38.roa File: zTdlcmGl1o-x2X9DDWeyuvUHU38.roa (raw, json) Hash identifier: 6+ESWvYsPffatGjqv4kbvBRfRcEWcMaWLzFPmtaHSdQ= Subject key identifier: CD:37:65:72:61:A5:D6:8F:B1:D9:7F:43:0D:67:B2:BA:F5:07:53:7F Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 692E Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zTdlcmGl1o-x2X9DDWeyuvUHU38.roa Signing time: Sat 07 Jun 2025 13:42:11 +0000 ROA not before: Sat 07 Jun 2025 13:42:11 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 26926 (0x692e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Jun 7 13:42:11 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=CD37657261A5D68FB1D97F430D67B2BAF507537F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:23:fa:31:65:fc:68:23:72:e2:c3:7d:23:71: 1d:9d:2d:8b:54:39:91:c2:56:2b:9f:90:37:7d:1b: 90:2c:be:22:db:d3:d7:92:87:42:f6:8a:08:28:8e: eb:a0:fc:cb:16:14:a9:6b:43:cb:7f:23:af:31:7c: 15:38:5f:77:c1:71:8c:71:d7:2b:2c:d8:7e:24:8f: 84:cf:f3:69:a1:bf:9c:11:35:a7:5f:d5:cc:a0:e1: 83:49:cc:97:d4:a9:94:3a:42:36:6d:75:79:73:aa: 09:8f:ba:74:1e:b3:86:b5:9a:09:da:7b:65:c1:2d: 8b:a2:f1:a5:ab:cd:4b:e2:33:ba:4b:09:c5:2a:8c: 79:52:38:89:aa:6b:37:0e:4b:64:33:36:70:3e:8c: cb:26:a5:80:f4:64:03:fa:16:ca:1c:42:c0:ba:6a: e7:04:09:93:c7:cd:08:b0:0e:e7:4a:c3:7a:71:97: 7f:b0:33:60:b2:92:13:c8:12:c5:ee:b2:96:f4:04: fc:ec:da:5a:4d:d9:38:65:24:df:f6:8b:42:0c:d6: e9:76:1b:81:d8:5b:4b:01:11:f6:0a:c3:b0:4e:fc: 81:99:c9:53:79:0f:56:5a:43:48:b8:71:b3:fb:c1: 07:80:17:0b:be:ec:3d:a5:dd:7a:2d:4d:54:07:1e: 98:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:37:65:72:61:A5:D6:8F:B1:D9:7F:43:0D:67:B2:BA:F5:07:53:7F X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zTdlcmGl1o-x2X9DDWeyuvUHU38.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 71:5f:6d:a8:91:9b:83:db:6c:b1:a6:80:1c:59:d5:2a:e8:a3: 2c:1e:17:98:1e:71:26:89:16:0f:4a:6d:7d:29:7c:25:43:57: 93:95:88:38:92:63:12:c7:9f:e9:b1:52:22:2d:82:12:9f:3c: 0a:95:58:bd:3b:c3:79:8c:55:a3:72:be:6e:27:74:f3:1c:9c: 4d:a4:1b:41:fd:eb:8a:90:44:44:b2:17:65:a0:e2:60:d2:2c: 72:86:32:9a:d1:73:4c:b3:b7:31:0e:6b:1e:da:e2:95:ee:6a: c1:4b:9c:63:89:bc:f9:fd:a9:99:ee:ec:44:56:f3:32:df:e8: 1b:ca:e3:50:95:a3:8a:44:c0:bc:6f:e5:80:44:62:71:a7:1f: e2:f9:44:25:ef:72:6f:8e:a9:f1:82:aa:a0:bd:a4:a7:49:9b: 2c:f9:6e:60:ec:d1:7e:af:cf:47:ba:83:b5:b9:d0:96:ff:72: 9a:29:29:da:4c:3a:7b:34:d9:b3:11:6e:b6:93:28:07:a8:43: af:29:7f:b5:80:f2:22:d8:6f:bc:68:6b:7a:16:2f:e7:da:bf: 18:65:1b:5f:69:76:1d:cb:2f:2f:ee:f1:46:2f:7a:b3:fa:85: 1e:92:f3:1f:b5:17:12:ef:9e:c8:bc:24:a7:32:12:b8:d7:3e: 9e:18:db:50 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICaS4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MDcx MzQyMTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKENEMzc2NTcyNjFBNUQ2 OEZCMUQ5N0Y0MzBENjdCMkJBRjUwNzUzN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDII/oxZfxoI3Liw30jcR2dLYtUOZHCViufkDd9G5AsviLb09eS h0L2iggojuug/MsWFKlrQ8t/I68xfBU4X3fBcYxx1yss2H4kj4TP82mhv5wRNadf 1cyg4YNJzJfUqZQ6QjZtdXlzqgmPunQes4a1mgnae2XBLYui8aWrzUviM7pLCcUq jHlSOImqazcOS2QzNnA+jMsmpYD0ZAP6FsocQsC6aucECZPHzQiwDudKw3pxl3+w M2CykhPIEsXuspb0BPzs2lpN2ThlJN/2i0IM1ul2G4HYW0sBEfYKw7BO/IGZyVN5 D1ZaQ0i4cbP7wQeAFwu+7D2l3XotTVQHHpjTAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUzTdlcmGl1o+x2X9DDWeyuvUHU38wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3pUZGxjbUdsMW8teDJY OUREV2V5dXZVSFUzOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBxX22o kZuD22yxpoAcWdUq6KMsHheYHnEmiRYPSm19KXwlQ1eTlYg4kmMSx5/psVIiLYIS nzwKlVi9O8N5jFWjcr5uJ3TzHJxNpBtB/euKkEREshdloOJg0ixyhjKa0XNMs7cx Dmse2uKV7mrBS5xjibz5/amZ7uxEVvMy3+gbyuNQlaOKRMC8b+WARGJxpx/i+UQl 73JvjqnxgqqgvaSnSZss+W5g7NF+r89HuoO1udCW/3KaKSnaTDp7NNmzEW62kygH qEOvKX+1gPIi2G+8aGt6Fi/n2r8YZRtfaXYdyy8v7vFGL3qz+oUekvMftRcS757I vCSnMhK41z6eGNtQ -----END CERTIFICATE-----Generated at Mon Jan 12 08:18:43 2026 by rpki-client