This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e37362e302f32322d3232203d3e203233373234.roa
File: 3130332e3232372e37362e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier: ob1gq8SWltCSR9T+Y7Acxj74r+9vls30VHLpIxpSgpA=
Subject key identifier: 6C:27:25:9D:69:D6:C0:4D:DC:E9:B1:17:2C:C6:E1:6E:DB:D7:93:3D
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 5862A92FDC6210043D0EB80102E1A0EA7FDEE014
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e37362e302f32322d3232203d3e203233373234.roa
Signing time: Tue 20 Jan 2026 02:15:34 +0000
ROA not before: Tue 20 Jan 2026 02:10:34 +0000
ROA not after: Tue 19 Jan 2027 02:15:34 +0000
asID: 23724
IP address blocks: 103.227.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:62:a9:2f:dc:62:10:04:3d:0e:b8:01:02:e1:a0:ea:7f:de:e0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jan 20 02:10:34 2026 GMT
Not After : Jan 19 02:15:34 2027 GMT
Subject: CN=6C27259D69D6C04DDCE9B1172CC6E16EDBD7933D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:5c:68:55:9e:e9:cd:52:47:40:98:46:7e:
32:31:5f:3d:82:8f:ee:87:f4:4d:aa:f3:c0:bd:ca:
0a:ec:b8:bd:48:40:02:6b:c7:34:eb:cc:6d:19:73:
d5:db:74:ec:13:98:51:0a:60:c2:90:b2:44:ac:80:
30:8f:af:20:2f:6f:4a:80:c1:74:bc:88:cf:4c:06:
8d:45:29:b3:e3:44:5e:f2:0f:ed:01:b9:eb:b5:5d:
eb:31:64:c1:89:65:66:93:6a:f1:d9:e3:fa:a9:11:
80:55:5b:ba:2a:08:40:81:df:69:0c:45:31:2b:4f:
d0:10:92:ae:ee:77:88:05:fc:44:cb:8a:b2:ae:73:
f8:c7:82:29:0d:a2:a8:65:91:49:bc:15:88:ff:92:
37:80:27:d0:69:67:3f:92:a1:98:d8:74:5d:fe:35:
4e:80:cb:f6:49:3e:94:86:af:6d:77:72:ee:e7:a6:
10:ea:2b:7b:5d:aa:c6:73:ac:89:cb:61:06:fe:04:
7a:a6:d0:7e:ae:d0:be:91:30:ba:ba:4e:e4:9f:38:
64:b5:7b:2c:fa:e1:b4:da:a2:93:25:2a:99:03:5c:
b8:47:e8:1c:3e:ee:9b:12:c4:82:b4:56:55:36:c0:
49:c0:db:da:ec:b3:e5:55:8d:9d:7f:88:03:8b:02:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:27:25:9D:69:D6:C0:4D:DC:E9:B1:17:2C:C6:E1:6E:DB:D7:93:3D
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e37362e302f32322d3232203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.76.0/22
Signature Algorithm: sha256WithRSAEncryption
98:2b:10:39:99:36:d9:fb:b3:b2:ab:a1:fc:9e:12:13:40:7e:
00:3f:fc:9a:a9:9b:89:34:c4:99:60:ee:90:74:2f:00:59:cc:
09:5e:07:57:33:c9:30:66:b5:6c:27:25:91:9d:0e:8d:a4:09:
96:f4:ea:c3:b2:21:98:92:94:a0:68:0b:15:0b:c3:eb:63:ce:
71:00:eb:96:0e:9a:95:3e:1b:71:7f:6b:6c:b2:9a:b5:01:d6:
a0:2f:c6:5e:1b:50:a1:92:06:f0:05:4e:1f:86:ee:51:f3:d7:
b8:7f:55:60:4d:33:b6:db:ab:aa:48:a3:e4:30:6a:d6:07:93:
56:a2:db:a4:d5:4d:4d:f8:e8:f1:ac:e1:48:8c:9f:f3:68:a8:
2b:49:7c:4e:5d:43:45:89:73:fc:98:53:4a:7d:7d:07:3b:fa:
37:41:12:6e:53:1a:ff:34:58:7f:c3:fa:08:58:6e:60:d2:8f:
e9:eb:63:22:75:1c:a0:b1:6b:14:8c:9e:3c:54:fe:c2:ca:4f:
9e:d6:bd:3c:db:fe:a4:25:9b:86:23:a2:41:0a:a7:b8:fd:9e:
bb:0b:d5:eb:ed:aa:45:50:6e:5e:cd:73:cb:c1:83:31:27:48:
57:17:0f:e1:65:38:3e:7b:f4:ac:4b:d6:98:0a:a3:50:3b:08:
06:2e:68:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:46 2026 by rpki-client