This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9_rBP5o0Ob6_ebckG1B1b7Y_JhQ.roa File: 9_rBP5o0Ob6_ebckG1B1b7Y_JhQ.roa (raw, json) Hash identifier: 9TD2m+8NoZkjLUz6/wpgLgM8FOuctoBULsy14VbNblw= Subject key identifier: F7:FA:C1:3F:9A:34:39:BE:BF:79:B7:24:1B:50:75:6F:B6:3F:26:14 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 626C Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9_rBP5o0Ob6_ebckG1B1b7Y_JhQ.roa Signing time: Tue 20 May 2025 13:10:36 +0000 ROA not before: Tue 20 May 2025 13:10:36 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 25196 (0x626c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 20 13:10:36 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F7FAC13F9A3439BEBF79B7241B50756FB63F2614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:1e:f9:9e:a9:40:09:79:56:c9:d2:68:8b: f1:cd:d9:0f:9e:52:0d:08:e9:33:70:40:69:8a:cb: 78:d8:2f:6f:f9:15:1a:a4:8c:b9:98:c2:d8:f0:26: c3:6a:79:6c:93:67:6a:63:eb:be:69:68:f8:bb:4e: 71:1f:c4:d3:37:15:04:9c:e7:e6:0b:4e:b8:88:a8: c8:8b:4d:a3:ef:64:7f:0d:9e:ad:e6:b6:a4:4d:d3: 2d:e6:4b:93:95:27:35:2e:2a:b0:f5:96:3d:d9:e9: 33:42:bf:5a:d6:1d:a5:f9:76:c9:28:e8:00:e4:53: a9:a9:bc:12:7d:8c:50:fc:4d:d1:64:84:94:68:ea: e1:f3:cf:83:ff:2d:e5:e3:e5:e0:b4:4a:bc:31:23: fd:c6:f2:fe:6a:ff:26:3b:52:6f:eb:32:c2:2b:4f: 72:42:60:8c:b2:74:2e:f1:e3:d4:79:f6:0d:45:94: 8e:1d:72:0c:b0:be:6f:ce:15:0f:7b:86:96:7f:7f: 96:73:62:e1:3c:d3:fa:fb:e9:5b:64:91:02:a9:1f: 78:e7:51:13:27:df:7b:6d:c9:d8:d4:9f:d3:a0:2c: 78:9c:d6:d9:29:5f:60:c9:3f:b2:43:74:51:39:dc: b1:a8:ca:be:57:9a:eb:ed:77:a0:e1:74:ed:48:3f: 42:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FA:C1:3F:9A:34:39:BE:BF:79:B7:24:1B:50:75:6F:B6:3F:26:14 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9_rBP5o0Ob6_ebckG1B1b7Y_JhQ.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 5a:34:c2:ad:4f:2f:12:b0:cb:59:a9:58:c8:37:73:f6:c2:4e: 31:8d:21:06:a2:46:19:0c:12:fe:05:c7:2c:b6:7b:6f:de:9b: d2:86:ca:87:60:91:d5:3e:78:c5:e5:39:8e:9d:89:a0:17:38: 0e:54:27:18:b8:0c:61:42:47:17:d7:0c:89:c7:40:54:ef:86: 40:f2:94:33:6d:67:7a:d3:b7:9d:d6:90:cf:cb:63:a0:c5:12: 91:ec:58:6a:26:2b:80:07:1d:5a:e8:6c:69:a4:97:5d:2b:c6: ae:c6:94:68:6f:be:e1:03:18:bc:da:3d:53:44:10:0e:e5:78: 06:a7:0d:fa:03:5f:5b:99:86:03:22:45:52:a6:f2:9a:56:c0: 82:21:15:60:35:8d:f9:83:d6:da:e0:9f:42:50:1e:75:76:5d: 02:33:40:70:39:75:13:83:fa:9a:a4:71:ae:74:e1:64:1a:89: 40:92:51:73:70:00:cf:0a:22:bd:32:e6:19:f0:47:a4:9c:6a: c7:d7:6a:b2:dc:d6:ef:8e:c8:e0:eb:6d:b2:57:60:4f:ac:8e: 48:25:bc:6e:a8:e3:92:90:f2:82:28:ad:df:4e:4e:8e:46:e7: 20:f9:2f:fa:5e:65:e6:35:99:97:a3:60:af:a1:c0:99:7f:1c: ae:b9:d8:89 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICYmwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjAx MzEwMzZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEY3RkFDMTNGOUEzNDM5 QkVCRjc5QjcyNDFCNTA3NTZGQjYzRjI2MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLlx75nqlACXlWydJoi/HN2Q+eUg0I6TNwQGmKy3jYL2/5FRqk jLmYwtjwJsNqeWyTZ2pj675paPi7TnEfxNM3FQSc5+YLTriIqMiLTaPvZH8Nnq3m tqRN0y3mS5OVJzUuKrD1lj3Z6TNCv1rWHaX5dsko6ADkU6mpvBJ9jFD8TdFkhJRo 6uHzz4P/LeXj5eC0SrwxI/3G8v5q/yY7Um/rMsIrT3JCYIyydC7x49R59g1FlI4d cgywvm/OFQ97hpZ/f5ZzYuE80/r76VtkkQKpH3jnURMn33ttydjUn9OgLHic1tkp X2DJP7JDdFE53LGoyr5Xmuvtd6DhdO1IP0KJAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQU9/rBP5o0Ob6/ebckG1B1b7Y/JhQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzlfckJQNW8wT2I2X2Vi Y2tHMUIxYjdZX0poUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQBaNMKt Ty8SsMtZqVjIN3P2wk4xjSEGokYZDBL+Bccstntv3pvShsqHYJHVPnjF5TmOnYmg FzgOVCcYuAxhQkcX1wyJx0BU74ZA8pQzbWd607ed1pDPy2OgxRKR7FhqJiuABx1a 6GxppJddK8auxpRob77hAxi82j1TRBAO5XgGpw36A19bmYYDIkVSpvKaVsCCIRVg NY35g9ba4J9CUB51dl0CM0BwOXUTg/qapHGudOFkGolAklFzcADPCiK9MuYZ8Eek nGrH12qy3Nbvjsjg622yV2BPrI5IJbxuqOOSkPKCKK3fTk6ORucg+S/6XmXmNZmX o2CvocCZfxyuudiJ -----END CERTIFICATE-----Generated at Tue Dec 23 20:39:43 2025 by rpki-client