This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38302e302f32322d3232203d3e203233373234.roa
File: 3130332e3232372e38302e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier: XeSiJljtfNIQ1QNcYk6lRg7M2ASKlzajd2eY/EQYSM4=
Subject key identifier: 7D:41:3A:20:88:20:35:2A:73:A1:81:65:7C:BF:68:AE:1C:2F:1B:95
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 601D747368F87E82F7AEA90BFA1A790C5F86208E
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38302e302f32322d3232203d3e203233373234.roa
Signing time: Tue 20 Jan 2026 02:15:35 +0000
ROA not before: Tue 20 Jan 2026 02:10:35 +0000
ROA not after: Tue 19 Jan 2027 02:15:35 +0000
asID: 23724
IP address blocks: 103.227.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:1d:74:73:68:f8:7e:82:f7:ae:a9:0b:fa:1a:79:0c:5f:86:20:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jan 20 02:10:35 2026 GMT
Not After : Jan 19 02:15:35 2027 GMT
Subject: CN=7D413A208820352A73A181657CBF68AE1C2F1B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:9c:9c:38:1c:5a:a4:2a:94:c3:3f:51:a4:
d1:a4:e9:ba:21:44:67:22:a5:5e:78:33:f0:71:8d:
1f:93:26:e6:4e:45:81:8f:18:1f:df:c3:2c:2a:6b:
5e:78:d9:88:a4:c4:cd:37:48:db:ed:05:4a:6b:a2:
b8:30:1e:73:48:1c:37:9b:f6:16:6d:ac:7b:1e:25:
f8:65:6b:23:1c:13:58:ea:01:8d:bb:af:37:b6:28:
0d:bc:f8:a7:05:eb:61:40:86:d9:f8:49:0b:a1:5e:
6a:7c:c1:6b:7f:a1:14:02:d8:37:44:12:62:7c:b0:
61:92:b3:7c:e2:bc:ba:69:d7:5f:ec:18:99:7a:31:
ed:97:aa:9e:c2:85:b8:bb:60:4c:dd:08:35:04:fb:
4e:4e:29:14:71:fc:e2:a2:74:32:7b:f1:4b:90:6e:
7c:ae:29:aa:1a:38:96:a9:30:6b:61:a5:c7:3b:7f:
06:01:d1:2a:fe:68:88:88:4f:a3:36:64:31:a4:0a:
a2:2f:c0:a3:1c:50:fe:db:a3:da:70:21:cf:a7:68:
fe:0f:a8:3c:78:63:c6:80:a1:68:af:d9:39:60:5f:
a0:95:a3:cf:3f:92:39:e5:fb:a1:ff:9c:46:f5:3b:
fd:39:80:de:a0:ed:7f:b6:ef:56:46:6c:49:fd:7d:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:41:3A:20:88:20:35:2A:73:A1:81:65:7C:BF:68:AE:1C:2F:1B:95
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38302e302f32322d3232203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.80.0/22
Signature Algorithm: sha256WithRSAEncryption
80:3d:72:5f:f9:c7:b2:07:cf:8c:b1:7e:67:a0:4f:47:64:a5:
be:2f:a7:fb:cf:41:af:e7:62:16:79:bc:c2:87:f4:e0:5f:3e:
1f:ae:e0:48:ba:17:ea:b9:69:f5:93:99:44:b7:d6:55:ce:ef:
20:24:d3:f8:97:ff:9c:45:56:59:11:4f:70:3e:2a:24:9f:b2:
08:4e:53:c6:31:bb:e3:e7:72:57:38:8d:96:98:5b:67:14:fe:
a1:2b:00:6b:45:52:4e:4a:63:f6:fb:24:f5:15:3c:31:dd:07:
8a:00:bf:9f:44:08:c1:69:21:57:bb:f9:13:d8:cd:c2:5c:cc:
27:c8:b2:c2:3e:9d:d9:79:10:aa:31:67:28:5e:d9:fc:24:ef:
c9:8f:d5:c3:6b:2e:0a:1d:3e:38:7e:79:b8:62:66:ea:97:f3:
3a:96:9a:16:2a:ad:95:26:f7:e3:62:8f:b6:cd:26:9f:96:9c:
b3:dd:ba:ae:1f:07:34:89:e3:dd:45:45:68:a8:b5:0c:90:fb:
86:71:c5:20:33:51:13:c7:ce:42:43:e4:10:9f:36:3e:ab:61:
c5:ae:aa:09:ee:ba:fb:5e:c8:0d:18:71:99:df:59:b4:b1:90:
41:6c:b9:86:48:df:31:ec:ad:d6:b5:43:0c:54:c3:04:31:7e:
3f:60:20:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:54 2026 by rpki-client