This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e37362e302f32322d3232203d3e2034383038.roa File: 3130332e3232372e37362e302f32322d3232203d3e2034383038.roa (raw, json) Hash identifier: Hf9k2SJcA/xP1ErQqm29WhIrSfaOziA5BA7Ts2+4KIA= Subject key identifier: B4:B5:C2:65:3E:77:ED:0D:D2:C4:89:44:22:9F:CA:1B:45:F8:9D:73 Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 155E3FBB9658E1C28B1CD1867F7647E032B1314A Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e37362e302f32322d3232203d3e2034383038.roa Signing time: Tue 20 Jan 2026 02:15:35 +0000 ROA not before: Tue 20 Jan 2026 02:10:35 +0000 ROA not after: Tue 19 Jan 2027 02:15:35 +0000 asID: 4808 IP address blocks: 103.227.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:5e:3f:bb:96:58:e1:c2:8b:1c:d1:86:7f:76:47:e0:32:b1:31:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:35 2026 GMT Not After : Jan 19 02:15:35 2027 GMT Subject: CN=B4B5C2653E77ED0DD2C48944229FCA1B45F89D73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:24:f8:fe:0e:e3:ca:07:a3:ff:75:ed:4d:d4: c7:95:ab:b8:e0:a7:65:f4:17:24:29:71:ef:ba:22: 60:b5:7b:b9:87:18:ca:24:1c:d1:30:6f:d5:05:67: 87:d0:00:01:9e:52:3e:36:a8:c8:84:c7:14:03:07: 77:01:e4:8a:62:20:90:28:f7:d0:a1:0a:be:1e:88: 96:5c:b4:7b:b6:09:e7:fe:90:c5:39:2d:63:e9:a0: 43:fc:ff:46:6b:10:76:90:10:c5:02:05:cf:1b:0b: 68:89:2a:b8:f9:21:d2:d4:4b:ee:09:3e:46:dc:0a: 4b:16:02:75:33:e6:b9:bd:9e:93:de:2b:b8:fb:35: e9:56:d3:6a:a4:66:dd:8d:ff:73:ef:14:b2:12:d1: 03:88:bd:89:2d:b9:15:90:17:36:2f:09:9f:53:ea: ac:68:26:cf:d3:93:66:47:39:53:cb:c9:85:b4:e7: 23:e3:7c:b3:f5:68:0c:5c:ee:1d:50:5a:e2:22:bc: 44:34:fd:79:57:bd:50:fb:c1:d0:50:17:7f:ba:c9: 35:d7:30:39:a2:4e:4c:98:4b:fd:dc:3c:20:ae:2f: 7d:fa:55:bd:54:26:80:39:f3:2f:e3:e6:9f:62:b3: 48:8a:93:08:82:02:6b:6c:69:43:4d:34:4e:7c:c2: 5a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B5:C2:65:3E:77:ED:0D:D2:C4:89:44:22:9F:CA:1B:45:F8:9D:73 X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e37362e302f32322d3232203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.76.0/22 Signature Algorithm: sha256WithRSAEncryption 67:4f:24:6b:25:73:89:c8:b2:f1:0d:b7:7d:91:19:eb:7c:6e: 7e:b6:e8:5c:52:e7:53:8e:6a:43:a1:7c:0e:c8:08:1b:fa:97: 2c:c2:a3:32:75:af:c3:76:22:d5:51:9b:19:48:35:89:b1:bf: 14:be:a8:4b:19:a4:36:e3:c8:0e:0a:4c:15:94:40:06:1e:17: 8c:10:71:71:54:67:e9:f1:9f:a1:0e:be:9d:49:20:f2:39:4f: 0d:8d:5a:f7:54:62:4a:42:50:2e:44:4d:c5:81:17:85:5d:f0: 28:72:4a:17:26:84:71:c7:3a:25:3a:7d:7f:38:6a:c2:eb:c4: 5c:a7:a9:f3:4b:33:d2:ff:f2:2f:74:86:66:f4:b7:cb:09:2d: a3:67:0c:f4:80:4f:60:0c:52:99:a7:23:3f:72:10:5c:81:83: 85:30:43:04:d1:f6:d7:64:4d:d9:ed:de:d1:10:f8:c7:0a:1a: 0f:44:66:8f:7f:03:c5:48:be:41:ee:2d:42:34:d7:11:83:e4: 6a:82:4f:a3:33:69:0a:02:76:12:e2:fb:92:77:b5:62:ce:67: 01:9b:34:ca:52:0c:54:50:e0:76:8b:85:2e:73:8b:c8:ac:ea: 0d:f3:fd:8d:6b:0b:21:d5:41:03:89:0d:57:f6:b4:b9:11:13: 39:20:c7:43 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUFV4/u5ZY4cKLHNGGf3ZH4DKxMUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAxMjAwMjEwMzVaFw0yNzAxMTkwMjE1MzVaMDMxMTAvBgNV BAMTKEI0QjVDMjY1M0U3N0VEMEREMkM0ODk0NDIyOUZDQTFCNDVGODlENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRJPj+DuPKB6P/de1N1MeVq7jg p2X0FyQpce+6ImC1e7mHGMokHNEwb9UFZ4fQAAGeUj42qMiExxQDB3cB5IpiIJAo 99ChCr4eiJZctHu2Cef+kMU5LWPpoEP8/0ZrEHaQEMUCBc8bC2iJKrj5IdLUS+4J PkbcCksWAnUz5rm9npPeK7j7NelW02qkZt2N/3PvFLIS0QOIvYktuRWQFzYvCZ9T 6qxoJs/Tk2ZHOVPLyYW05yPjfLP1aAxc7h1QWuIivEQ0/XlXvVD7wdBQF3+6yTXX MDmiTkyYS/3cPCCuL336Vb1UJoA58y/j5p9is0iKkwiCAmtsaUNNNE58wlppAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUtLXCZT537Q3SxIlEIp/KG0X4nXMwHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjY4NDgxLzAvMzEzMDMzMmUzMjMy MzcyZTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfjTDANBgkqhkiG9w0BAQsFAAOCAQEAZ08kayVziciy8Q23fZEZ63xufrbo XFLnU45qQ6F8DsgIG/qXLMKjMnWvw3Yi1VGbGUg1ibG/FL6oSxmkNuPIDgpMFZRA Bh4XjBBxcVRn6fGfoQ6+nUkg8jlPDY1a91RiSkJQLkRNxYEXhV3wKHJKFyaEccc6 JTp9fzhqwuvEXKep80sz0v/yL3SGZvS3ywkto2cM9IBPYAxSmacjP3IQXIGDhTBD BNH212RN2e3e0RD4xwoaD0Rmj38DxUi+Qe4tQjTXEYPkaoJPozNpCgJ2EuL7kne1 Ys5nAZs0ylIMVFDgdouFLnOLyKzqDfP9jWsLIdVBA4kNV/a0uRETOSDHQw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:58 2026 by rpki-client