This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/PxUAnzIDu_iNU4j9k4JTd6E-Dfo.roa File: PxUAnzIDu_iNU4j9k4JTd6E-Dfo.roa (raw, json) Hash identifier: 19nyz85nWpxPXTHf/QXKhmM54FDeTFt7Heu2f/C1VNI= Subject key identifier: 3F:15:00:9F:32:03:BB:F8:8D:53:88:FD:93:82:53:77:A1:3E:0D:FA Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 62CA Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PxUAnzIDu_iNU4j9k4JTd6E-Dfo.roa Signing time: Wed 21 May 2025 12:40:44 +0000 ROA not before: Wed 21 May 2025 12:40:44 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 25290 (0x62ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 21 12:40:44 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=3F15009F3203BBF88D5388FD93825377A13E0DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:18:ce:41:bd:67:07:8c:77:1f:4b:2d:7c:2a: 5d:a9:76:27:bb:bb:10:05:04:56:c4:b6:c9:f7:e2: 72:f8:06:8f:a8:6d:b5:f7:c6:32:23:d4:7a:60:78: 89:07:b3:6b:13:85:e5:bf:de:0c:e2:f0:17:2a:dd: 86:c7:ff:59:68:68:8d:91:3f:25:e9:df:3c:69:30: 96:51:2d:ca:a8:9c:9e:ef:78:16:01:53:e7:f3:ee: a9:13:1e:39:16:7a:87:2a:70:86:6b:c6:18:a2:42: 9c:ee:d2:39:37:60:4e:66:09:d8:af:08:5e:ca:7a: 25:d7:c2:e0:de:c2:b3:13:af:6a:22:05:4d:38:02: e2:0b:73:9b:07:de:4d:ff:1f:d0:e7:38:ff:da:6e: ea:b3:d8:71:f0:10:04:db:a1:6f:7d:6c:16:9d:11: 7f:d3:82:7c:23:3b:6b:5c:e0:3e:5f:06:a8:86:7b: 58:ef:1e:5c:7a:e2:79:53:0b:25:68:45:94:7a:aa: 1d:dc:de:3c:c3:a1:e1:78:08:92:65:a0:fe:0f:f9: 6b:45:d5:a2:23:f2:a9:42:2d:ec:26:78:53:66:28: ca:8b:27:6f:e4:f5:54:cb:79:cb:69:8c:88:ac:73: 3c:4a:92:99:a0:7d:90:b6:0f:c1:31:56:25:3a:0b: 4d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:15:00:9F:32:03:BB:F8:8D:53:88:FD:93:82:53:77:A1:3E:0D:FA X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/PxUAnzIDu_iNU4j9k4JTd6E-Dfo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 8d:6c:bd:33:43:69:66:79:30:07:3f:1a:17:23:31:ce:13:a0: 56:cd:36:4e:45:89:db:d6:2e:9b:8f:8d:66:e8:4a:c5:77:0b: a5:3b:b7:ba:97:68:65:f6:8f:46:1f:16:c7:53:2a:54:95:d9: 0e:46:ec:62:43:97:7f:ab:b2:6e:61:a4:7c:a1:23:44:77:62: f8:1f:55:e3:22:f2:48:43:1d:37:f1:b8:5d:08:1d:36:db:8a: 02:f0:32:d8:81:5e:aa:c1:86:24:48:a2:a9:bf:a4:40:26:46: b8:5d:6d:da:78:c3:29:0a:89:00:c7:98:91:87:a9:3d:8c:df: 35:08:16:2d:5f:a0:ac:a1:38:7b:4f:aa:8c:60:0e:a4:86:fc: 18:ef:72:fb:42:7b:c0:33:e4:4c:34:d5:a3:49:41:14:b1:d9: f9:97:93:b9:2b:53:8f:cf:b6:09:4b:c1:d2:59:f1:e1:f7:4e: 8f:d5:34:b7:9b:ac:c9:1a:5c:b1:22:e2:c0:c7:2b:18:11:95: bd:aa:ec:9b:52:ff:e8:6c:7e:c1:68:6d:9e:1a:bc:a2:53:57: 6b:29:be:fa:87:d8:42:2e:2e:ab:4b:1b:cd:84:04:e8:10:12: 8a:6c:e5:0d:61:a2:24:55:8e:bb:88:b7:d6:a6:b3:51:f0:65: 55:99:65:08 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICYsowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjEx MjQwNDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDNGMTUwMDlGMzIwM0JC Rjg4RDUzODhGRDkzODI1Mzc3QTEzRTBERkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDGM5BvWcHjHcfSy18Kl2pdie7uxAFBFbEtsn34nL4Bo+obbX3 xjIj1HpgeIkHs2sTheW/3gzi8Bcq3YbH/1loaI2RPyXp3zxpMJZRLcqonJ7veBYB U+fz7qkTHjkWeocqcIZrxhiiQpzu0jk3YE5mCdivCF7KeiXXwuDewrMTr2oiBU04 AuILc5sH3k3/H9DnOP/abuqz2HHwEATboW99bBadEX/TgnwjO2tc4D5fBqiGe1jv Hlx64nlTCyVoRZR6qh3c3jzDoeF4CJJloP4P+WtF1aIj8qlCLewmeFNmKMqLJ2/k 9VTLectpjIisczxKkpmgfZC2D8ExViU6C01DAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUPxUAnzIDu/iNU4j9k4JTd6E+DfowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1B4VUFueklEdV9pTlU0 ajlrNEpUZDZFLURmby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCNbL0z Q2lmeTAHPxoXIzHOE6BWzTZORYnb1i6bj41m6ErFdwulO7e6l2hl9o9GHxbHUypU ldkORuxiQ5d/q7JuYaR8oSNEd2L4H1XjIvJIQx038bhdCB0224oC8DLYgV6qwYYk SKKpv6RAJka4XW3aeMMpCokAx5iRh6k9jN81CBYtX6CsoTh7T6qMYA6khvwY73L7 QnvAM+RMNNWjSUEUsdn5l5O5K1OPz7YJS8HSWfHh906P1TS3m6zJGlyxIuLAxysY EZW9quybUv/obH7BaG2eGryiU1drKb76h9hCLi6rSxvNhAToEBKKbOUNYaIkVY67 iLfWprNR8GVVmWUI -----END CERTIFICATE-----Generated at Tue Dec 23 06:08:46 2025 by rpki-client