This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QtcH9Zp0VHZNr2zOQnz9uHsGKvg.roa File: QtcH9Zp0VHZNr2zOQnz9uHsGKvg.roa (raw, json) Hash identifier: 1XfYN4TKbgRDe5rldL8UXexMYoCP32VApSYWaaumZvQ= Subject key identifier: 42:D7:07:F5:9A:74:54:76:4D:AF:6C:CE:42:7C:FD:B8:7B:06:2A:F8 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 630A Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QtcH9Zp0VHZNr2zOQnz9uHsGKvg.roa Signing time: Thu 22 May 2025 04:41:56 +0000 ROA not before: Thu 22 May 2025 04:41:56 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 25354 (0x630a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 22 04:41:56 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=42D707F59A7454764DAF6CCE427CFDB87B062AF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:74:4f:2a:d0:dc:58:2c:4d:c1:d3:b2:c1:f9: e6:6e:60:f2:45:32:4f:0e:de:8e:18:84:49:35:a6: 53:0f:b7:60:f9:bc:02:43:e6:65:0a:69:2e:0b:0c: 52:65:d5:19:25:7e:d1:aa:f2:2b:12:92:48:4a:2e: be:88:d2:ec:83:aa:0d:9a:81:45:1a:66:15:97:dd: 40:d2:52:1a:45:10:bf:6e:95:68:11:b7:0d:9e:25: 3f:b7:c3:96:b9:6f:72:9c:67:b9:b9:3d:04:9d:1a: 2e:3c:21:7a:dd:69:d2:b0:0c:59:52:71:04:7c:94: 59:ba:59:13:4d:6a:e1:75:61:6b:76:b0:74:d5:7b: 18:29:11:d5:27:44:38:ff:82:6b:b7:bc:f4:26:5a: 1c:2d:4d:78:d3:1d:16:e2:8e:64:b2:d6:6b:09:01: 5b:a8:b7:d1:71:73:a6:f5:e8:02:e4:85:40:40:9b: c6:60:7c:4c:6f:e2:87:4b:02:61:0a:36:01:0e:94: b7:c3:13:37:3f:f0:64:3c:db:ce:fd:3a:ab:30:7b: 05:1e:63:4a:0c:48:84:16:a7:3a:e1:40:56:d5:dc: 0f:43:28:aa:14:41:b3:96:d2:24:8b:63:d5:b7:ba: dd:eb:e4:dc:4c:39:88:95:6e:f7:52:d6:aa:73:c7: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D7:07:F5:9A:74:54:76:4D:AF:6C:CE:42:7C:FD:B8:7B:06:2A:F8 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QtcH9Zp0VHZNr2zOQnz9uHsGKvg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 0e:26:8b:fd:21:de:f1:75:7b:4e:69:9f:bb:b4:6e:2e:34:29: 2e:a1:f0:4b:56:59:cf:9f:41:ab:59:26:4a:56:bf:9f:76:f2: d5:1b:a5:2e:33:08:83:39:60:16:5c:1c:d9:02:07:97:ae:6c: 7f:09:db:37:47:25:b8:48:ee:86:15:cf:1f:1a:6c:63:85:cf: 58:3c:5c:1b:76:0a:aa:9d:95:ea:87:7b:1a:47:40:90:c9:9c: 65:ec:1f:16:72:54:26:3a:7b:60:f8:41:89:80:3a:b1:80:ec: 55:3f:e3:78:70:49:f6:d9:1b:b4:0a:0d:f1:68:0b:0f:4f:db: 1f:01:ea:37:1a:09:3a:73:c6:7a:a3:b0:1b:a9:dd:19:e6:e1: f4:28:27:a8:52:ed:f1:0d:81:64:42:62:2c:7a:10:ff:27:60: 90:4b:c0:1e:e5:4a:c8:e2:31:71:5a:72:5c:53:59:9a:cc:5f: c9:12:50:23:96:19:2b:75:93:e9:d7:91:e3:22:94:8b:b2:b7: 35:12:a0:ca:b2:f3:35:5b:99:17:dd:4f:7c:b3:cc:77:81:41: 1b:88:ec:e4:ef:7c:5e:ef:33:0c:67:f9:6b:19:f3:ba:c9:2b: 21:3a:f0:71:e6:3d:8d:63:60:b6:3b:5e:a4:72:9b:9f:4a:27: 33:b4:d2:ec -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICYwowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1MjIw NDQxNTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQyRDcwN0Y1OUE3NDU0 NzY0REFGNkNDRTQyN0NGREI4N0IwNjJBRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAdE8q0NxYLE3B07LB+eZuYPJFMk8O3o4YhEk1plMPt2D5vAJD 5mUKaS4LDFJl1RklftGq8isSkkhKLr6I0uyDqg2agUUaZhWX3UDSUhpFEL9ulWgR tw2eJT+3w5a5b3KcZ7m5PQSdGi48IXrdadKwDFlScQR8lFm6WRNNauF1YWt2sHTV exgpEdUnRDj/gmu3vPQmWhwtTXjTHRbijmSy1msJAVuot9Fxc6b16ALkhUBAm8Zg fExv4odLAmEKNgEOlLfDEzc/8GQ82879OqswewUeY0oMSIQWpzrhQFbV3A9DKKoU QbOW0iSLY9W3ut3r5NxMOYiVbvdS1qpzx/uBAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUQtcH9Zp0VHZNr2zOQnz9uHsGKvgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1F0Y0g5WnAwVkhaTnIy ek9Rbno5dUhzR0t2Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQAOJov9 Id7xdXtOaZ+7tG4uNCkuofBLVlnPn0GrWSZKVr+fdvLVG6UuMwiDOWAWXBzZAgeX rmx/Cds3RyW4SO6GFc8fGmxjhc9YPFwbdgqqnZXqh3saR0CQyZxl7B8WclQmOntg +EGJgDqxgOxVP+N4cEn22Ru0Cg3xaAsPT9sfAeo3Ggk6c8Z6o7Abqd0Z5uH0KCeo Uu3xDYFkQmIsehD/J2CQS8Ae5UrI4jFxWnJcU1mazF/JElAjlhkrdZPp15HjIpSL src1EqDKsvM1W5kX3U98s8x3gUEbiOzk73xe7zMMZ/lrGfO6ySshOvBx5j2NY2C2 O16kcpufSicztNLs -----END CERTIFICATE-----Generated at Wed Dec 24 15:12:24 2025 by rpki-client