This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/HPayk-2CVX3yueh7qtLTNuJR-IA.roa File: HPayk-2CVX3yueh7qtLTNuJR-IA.roa (raw, json) Hash identifier: 7EwIMrDqFYuc/qzyPMnkzxGB6fnsTfomzf5ObSp422k= Subject key identifier: 1C:F6:B2:93:ED:82:55:7D:F2:B9:E8:7B:AA:D2:D3:36:E2:51:F8:80 Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Certificate serial: 6502 Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HPayk-2CVX3yueh7qtLTNuJR-IA.roa Signing time: Tue 27 May 2025 10:41:09 +0000 ROA not before: Tue 27 May 2025 10:41:09 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 24426 IP address blocks: 43.239.48.0/22 maxlen: 22 43.246.0.0/22 maxlen: 22 43.246.4.0/22 maxlen: 22 43.246.12.0/22 maxlen: 22 43.246.16.0/22 maxlen: 22 43.246.20.0/22 maxlen: 22 43.246.24.0/22 maxlen: 22 43.246.28.0/22 maxlen: 22 43.246.32.0/22 maxlen: 22 43.246.36.0/22 maxlen: 22 43.246.40.0/22 maxlen: 22 43.246.44.0/22 maxlen: 22 43.246.52.0/22 maxlen: 22 43.246.56.0/22 maxlen: 22 43.246.60.0/22 maxlen: 22 43.246.64.0/22 maxlen: 22 43.246.68.0/22 maxlen: 22 43.246.72.0/22 maxlen: 22 43.246.76.0/22 maxlen: 22 43.246.80.0/22 maxlen: 22 43.246.84.0/22 maxlen: 22 43.246.88.0/22 maxlen: 22 43.246.92.0/22 maxlen: 22 43.246.96.0/22 maxlen: 22 103.35.48.0/22 maxlen: 22 103.236.0.0/22 maxlen: 22 103.236.4.0/22 maxlen: 22 103.236.8.0/22 maxlen: 22 103.236.12.0/22 maxlen: 22 103.236.16.0/22 maxlen: 22 103.236.20.0/22 maxlen: 22 103.236.28.0/22 maxlen: 22 103.236.32.0/22 maxlen: 22 103.236.36.0/22 maxlen: 22 103.236.40.0/22 maxlen: 22 103.236.44.0/22 maxlen: 22 103.236.48.0/22 maxlen: 22 103.236.52.0/22 maxlen: 22 103.236.56.0/22 maxlen: 22 103.236.60.0/22 maxlen: 22 103.236.64.0/22 maxlen: 22 103.236.68.0/22 maxlen: 22 103.236.72.0/22 maxlen: 22 103.236.76.0/22 maxlen: 22 103.236.80.0/22 maxlen: 22 103.236.84.0/22 maxlen: 22 103.236.88.0/22 maxlen: 22 103.236.92.0/22 maxlen: 22 103.236.96.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 25858 (0x6502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA Validity Not Before: May 27 10:41:09 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=1CF6B293ED82557DF2B9E87BAAD2D336E251F880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:16:fa:ea:f8:49:14:7e:cf:83:3a:c7:b3:5f: c8:e8:9c:56:07:56:4c:72:22:bc:93:5f:a8:20:79: 11:96:96:2b:e9:62:6a:04:5f:4d:0d:c5:e1:f2:ec: e9:bc:ec:b6:8a:57:d2:d8:8b:8f:05:45:0a:50:7d: da:50:4e:06:64:67:76:76:ce:34:30:9c:86:6c:82: 40:78:77:e4:fe:c0:c5:94:ca:a5:81:e7:c6:ea:0a: cd:76:b0:84:4d:5d:7e:c6:3e:01:2a:1d:83:a6:36: c9:c6:b9:4d:61:e1:38:38:31:8d:b1:31:1c:47:87: 8d:10:2e:b4:7a:9d:88:74:ea:40:3b:cb:2c:18:39: 27:e1:f2:8b:85:31:66:80:2b:4f:7b:e7:3a:cf:8f: f7:5c:43:23:64:93:8b:cb:b2:81:54:46:8b:ea:a3: 36:6e:e0:cd:8f:9d:c6:e3:0e:6e:79:87:48:ef:4f: fd:b1:17:d5:f6:1a:33:40:b9:c3:45:84:6a:1a:22: a5:fc:45:0e:ef:e8:46:6f:37:f7:d1:f1:cd:63:c5: 19:96:7a:1e:0e:bf:46:1d:a1:d5:d7:9f:8a:f6:3d: d9:ad:73:2b:76:b8:8a:c8:12:00:49:e8:00:50:a2: 53:53:ca:00:2f:23:55:50:c3:10:cd:0d:80:ab:ba: 5e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F6:B2:93:ED:82:55:7D:F2:B9:E8:7B:AA:D2:D3:36:E2:51:F8:80 X509v3 Authority Key Identifier: keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HPayk-2CVX3yueh7qtLTNuJR-IA.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.239.48.0/22 43.246.0.0/21 43.246.12.0-43.246.47.255 43.246.52.0-43.246.99.255 103.35.48.0/22 103.236.0.0-103.236.23.255 103.236.28.0-103.236.99.255 Signature Algorithm: sha256WithRSAEncryption a8:be:bb:c2:10:dc:56:a4:70:7a:7f:7a:bf:f7:a8:b1:fa:dc: df:4b:37:c3:a8:9e:e7:50:60:ad:a2:f6:6a:e6:bd:bb:1e:eb: 46:ca:48:e3:3c:09:5b:b8:ef:97:31:6d:e2:ba:5c:9e:1d:80: b8:33:75:50:d4:d8:8d:e6:99:12:11:b5:ec:0d:af:52:0e:25: 73:ad:1c:a8:61:09:32:bd:44:10:81:70:f7:0d:59:e7:f2:21: 07:a4:ff:e3:6a:2f:4a:58:e3:4c:46:ff:47:84:1f:c1:85:a6: 9c:51:a4:84:6b:f9:e4:cc:8d:98:48:03:8e:fa:5f:d7:4d:ea: 0a:f9:40:62:cb:e0:5e:a8:ba:3b:8d:86:75:4a:61:58:3c:f3: 39:fb:11:da:b6:cc:40:8a:cf:da:a8:d2:27:0b:31:48:31:1d: 1f:9e:aa:38:92:c0:3f:73:58:0a:1c:f0:7f:4a:54:6e:72:dc: fe:37:20:be:df:d1:30:aa:07:ca:84:85:8f:1b:8f:3e:4c:de: 52:bb:7d:6d:16:6a:74:7f:51:ba:55:3c:b1:cd:a3:28:55:cd: b9:f3:39:73:a4:f3:66:be:6b:d8:1c:ef:e7:b2:a2:f7:9a:37: 5f:8f:0b:14:95:45:70:e5:78:24:7c:e9:bd:89:3b:2c:a5:45: 3c:a0:5c:72 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgICZQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNTA1Mjcx MDQxMDlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDFDRjZCMjkzRUQ4MjU1 N0RGMkI5RTg3QkFBRDJEMzM2RTI1MUY4ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6Fvrq+EkUfs+DOsezX8jonFYHVkxyIryTX6ggeRGWlivpYmoE X00NxeHy7Om87LaKV9LYi48FRQpQfdpQTgZkZ3Z2zjQwnIZsgkB4d+T+wMWUyqWB 58bqCs12sIRNXX7GPgEqHYOmNsnGuU1h4Tg4MY2xMRxHh40QLrR6nYh06kA7yywY OSfh8ouFMWaAK0975zrPj/dcQyNkk4vLsoFURovqozZu4M2PncbjDm55h0jvT/2x F9X2GjNAucNFhGoaIqX8RQ7v6EZvN/fR8c1jxRmWeh4Ov0YdodXXn4r2Pdmtcyt2 uIrIEgBJ6ABQolNTygAvI1VQwxDNDYCrul6fAgMBAAGjggI0MIICMDAdBgNVHQ4E FgQUHPayk+2CVX3yueh7qtLTNuJR+IAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj 3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3 L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0hQYXlrLTJDVlgzeXVl aDdxdExUTnVKUi1JQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwYgYIKwYBBQUHAQcBAf8EUzBRME8EAgABMEkD BAIr7zADBAMr9gAwDAMEAiv2DAMEBCv2IDAMAwQCK/Y0AwQCK/ZgAwQCZyMwMAsD AwJn7AMEA2fsEDAMAwQCZ+wcAwQCZ+xgMA0GCSqGSIb3DQEBCwUAA4IBAQCovrvC ENxWpHB6f3q/96ix+tzfSzfDqJ7nUGCtovZq5r27HutGykjjPAlbuO+XMW3iulye HYC4M3VQ1NiN5pkSEbXsDa9SDiVzrRyoYQkyvUQQgXD3DVnn8iEHpP/jai9KWONM Rv9HhB/BhaacUaSEa/nkzI2YSAOO+l/XTeoK+UBiy+BeqLo7jYZ1SmFYPPM5+xHa tsxAis/aqNInCzFIMR0fnqo4ksA/c1gKHPB/SlRuctz+NyC+39EwqgfKhIWPG48+ TN5Su31tFmp0f1G6VTyxzaMoVc258zlzpPNmvmvYHO/nsqL3mjdfjwsUlUVw5Xgk fOm9iTsspUU8oFxy -----END CERTIFICATE-----Generated at Wed Dec 24 17:02:47 2025 by rpki-client