This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/c3Vz2UM7VgRXdpkWXNZcgLFjENA.roa File: c3Vz2UM7VgRXdpkWXNZcgLFjENA.roa (raw, json) Hash identifier: UoLUW2dPuRZ3UG5MODfN3oxKXxwrU+HzdmZkC92EHik= Subject key identifier: 73:75:73:D9:43:3B:56:04:57:76:99:16:5C:D6:5C:80:B1:63:10:D0 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 6718 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c3Vz2UM7VgRXdpkWXNZcgLFjENA.roa Signing time: Mon 02 Jun 2025 00:14:06 +0000 ROA not before: Mon 02 Jun 2025 00:14:06 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 26392 (0x6718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: Jun 2 00:14:06 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=737573D9433B5604577699165CD65C80B16310D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:5f:4f:1d:45:fa:b2:18:1d:a6:c7:83:a9: dd:90:f3:b7:80:e1:8a:47:cf:ca:9a:21:3d:f2:48: 57:c5:49:7f:3b:43:e6:d1:29:7b:66:2d:69:44:07: 72:2b:bc:e8:d7:5a:06:24:20:63:f2:5b:0e:03:3a: 02:49:21:ef:7b:3a:74:02:61:d6:cd:38:b2:30:d5: a2:8b:64:12:43:af:9a:36:61:ec:e2:93:02:e4:10: 2b:37:68:aa:67:fc:b6:ef:d6:0c:e9:11:40:71:40: 24:a7:a4:6c:e4:a7:14:e5:7a:80:10:95:87:07:76: e8:7f:1f:5b:85:ed:2c:8e:6c:5c:d8:97:fb:a7:96: cd:ff:22:74:00:59:83:f7:30:4d:fd:26:2a:f9:2e: 76:65:10:a8:76:bb:dc:28:3b:f3:79:e7:aa:5b:9a: 2c:60:81:18:82:16:31:5a:38:fc:d7:e9:a9:4f:14: 3b:52:99:2f:53:0f:f4:87:70:05:de:1a:4c:df:1e: 94:79:56:dc:14:5d:e8:21:1f:2d:c2:9e:84:2b:bc: b8:50:63:c4:69:4b:cf:08:f7:c1:27:34:cb:f4:c8: bf:25:e8:ea:cd:ed:97:5e:74:6a:de:af:63:bb:58: 6c:5a:8a:f8:1e:24:59:26:b6:d5:e4:71:6d:7d:04: d6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:75:73:D9:43:3B:56:04:57:76:99:16:5C:D6:5C:80:B1:63:10:D0 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c3Vz2UM7VgRXdpkWXNZcgLFjENA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption 02:16:47:2a:cb:13:83:ff:8c:a4:ad:9c:84:ba:55:02:f6:18: 41:9e:dd:4a:07:c4:b0:89:a3:4c:42:6a:08:f1:45:49:4c:a8: 91:6d:e8:8f:76:04:92:9d:fb:c3:17:b1:0c:49:69:5e:c8:b6: 58:12:43:28:80:8b:a1:4f:89:d4:02:1e:8d:57:8f:f6:9b:94: 85:82:38:9c:70:68:a9:20:49:2e:2e:dd:1e:0e:b5:ba:74:ca: 2e:45:46:34:1d:be:e0:e3:ba:2b:48:ac:b0:98:1b:5f:a0:6a: 93:21:50:9a:4d:4c:a3:4a:e4:e2:af:45:34:6d:23:58:f5:2c: e8:39:6f:8a:71:e9:2e:d8:85:c4:1e:11:83:1c:0a:e5:a2:bd: d3:51:ee:ed:19:3d:4b:c2:9c:70:96:61:8c:70:6f:50:25:f1: 5e:d8:5d:95:8b:d9:71:bd:55:65:5a:e4:ad:25:6a:aa:54:7e: da:ec:b4:16:24:9e:a9:d6:b7:f6:be:2f:6a:ae:93:af:4c:96: 7d:30:9c:04:b8:2e:a7:13:87:7a:34:28:14:ff:6b:3a:31:86: ba:0b:b7:82:1b:09:89:e2:25:e3:d2:45:1f:07:6a:58:c1:44: ea:17:3e:3b:98:de:1c:82:ba:42:b2:e0:24:8f:06:87:48:23: da:9a:01:31 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICZxgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA2MDIw MDE0MDZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDczNzU3M0Q5NDMzQjU2 MDQ1Nzc2OTkxNjVDRDY1QzgwQjE2MzEwRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDONV9PHUX6shgdpseDqd2Q87eA4YpHz8qaIT3ySFfFSX87Q+bR KXtmLWlEB3IrvOjXWgYkIGPyWw4DOgJJIe97OnQCYdbNOLIw1aKLZBJDr5o2Yezi kwLkECs3aKpn/Lbv1gzpEUBxQCSnpGzkpxTleoAQlYcHduh/H1uF7SyObFzYl/un ls3/InQAWYP3ME39Jir5LnZlEKh2u9woO/N556pbmixggRiCFjFaOPzX6alPFDtS mS9TD/SHcAXeGkzfHpR5VtwUXeghHy3CnoQrvLhQY8RpS88I98EnNMv0yL8l6OrN 7ZdedGrer2O7WGxaivgeJFkmttXkcW19BNYfAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUc3Vz2UM7VgRXdpkWXNZcgLFjENAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2MzVnoyVU03VmdSWGRw a1dYTlpjZ0xGakVOQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQACFkcq yxOD/4ykrZyEulUC9hhBnt1KB8SwiaNMQmoI8UVJTKiRbeiPdgSSnfvDF7EMSWle yLZYEkMogIuhT4nUAh6NV4/2m5SFgjiccGipIEkuLt0eDrW6dMouRUY0Hb7g47or SKywmBtfoGqTIVCaTUyjSuTir0U0bSNY9SzoOW+Kceku2IXEHhGDHArlor3TUe7t GT1LwpxwlmGMcG9QJfFe2F2Vi9lxvVVlWuStJWqqVH7a7LQWJJ6p1rf2vi9qrpOv TJZ9MJwEuC6nE4d6NCgU/2s6MYa6C7eCGwmJ4iXj0kUfB2pYwUTqFz47mN4cgrpC suAkjwaHSCPamgEx -----END CERTIFICATE-----Generated at Tue Dec 23 20:40:44 2025 by rpki-client