This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38302e302f32322d3232203d3e203536323832.roa
File: 3130332e3232372e38302e302f32322d3232203d3e203536323832.roa (raw, json)
Hash identifier: 67Oh/ymrInnyN9IsmBRAf4Oqr+sTsFG1G6E3Ho7F13Y=
Subject key identifier: 7E:1A:51:76:92:41:6F:7D:C6:03:AC:94:64:97:EE:39:94:04:1E:0C
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 0A189B707BE4D81D40ECD626D6ED9A4823083F46
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38302e302f32322d3232203d3e203536323832.roa
Signing time: Tue 20 Jan 2026 02:15:34 +0000
ROA not before: Tue 20 Jan 2026 02:10:34 +0000
ROA not after: Tue 19 Jan 2027 02:15:34 +0000
asID: 56282
IP address blocks: 103.227.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:18:9b:70:7b:e4:d8:1d:40:ec:d6:26:d6:ed:9a:48:23:08:3f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jan 20 02:10:34 2026 GMT
Not After : Jan 19 02:15:34 2027 GMT
Subject: CN=7E1A517692416F7DC603AC946497EE3994041E0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:65:15:e7:8c:b3:cc:0c:58:62:2f:dd:9e:
9b:f4:dc:a8:e7:3b:3f:59:95:3b:4f:02:08:52:bc:
3e:fa:4d:46:35:f5:4e:ed:ec:b7:88:8e:7c:a4:fc:
e3:65:c6:90:8e:6c:ce:10:6b:70:1a:16:de:5f:2e:
63:ca:e8:1f:e6:e0:a3:57:77:b8:33:7b:f3:67:31:
2f:4e:c8:09:3d:2e:95:a1:3a:36:2e:7f:8e:22:f1:
1f:a8:04:18:3b:cb:79:ec:8c:72:33:0f:76:74:c0:
01:bd:95:e7:40:a2:fb:ba:c6:0c:8c:3c:e7:79:15:
e9:0d:2a:c7:10:da:41:16:5c:ee:65:6d:45:4d:01:
43:c8:bb:f2:2b:b7:ec:5f:46:ad:ec:ad:15:65:45:
69:ed:ad:06:ab:80:05:eb:39:1b:f2:12:86:73:9e:
73:68:d1:40:c4:ac:32:2c:e6:5a:51:ac:3e:c3:43:
3d:e1:5a:f8:b4:1f:e5:16:7c:8d:13:dc:0f:be:cc:
20:a5:8a:99:69:ee:85:ea:cc:fe:d4:cb:69:13:fa:
87:47:30:b9:9e:62:2c:ba:24:a5:02:d9:03:4d:77:
f5:e5:c4:df:53:f3:1e:ec:73:f4:34:97:16:11:a6:
a7:37:a5:fc:ca:63:63:84:32:7a:cc:a4:a5:d0:34:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1A:51:76:92:41:6F:7D:C6:03:AC:94:64:97:EE:39:94:04:1E:0C
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38302e302f32322d3232203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.80.0/22
Signature Algorithm: sha256WithRSAEncryption
37:d5:40:75:b0:60:a1:6a:76:46:92:1f:bb:ed:d2:17:e2:a4:
6a:db:3c:3d:57:5e:44:f9:6b:44:95:0c:12:09:5f:9f:4a:56:
83:86:97:9c:22:9a:c1:b4:01:9c:12:ac:b6:b6:95:00:71:52:
2d:52:80:76:c2:c1:e9:ce:4c:f0:b9:2d:3a:55:16:ad:a6:3f:
b5:5d:d3:90:78:03:05:80:94:94:1a:fe:95:51:1d:0b:ee:ea:
ce:43:df:5e:b9:be:ff:12:c1:42:58:a5:c9:7d:e7:6e:0a:83:
a2:94:36:94:ab:28:8e:c4:a4:3e:b9:72:cf:9c:54:4f:fe:b1:
1d:68:ea:b7:01:f9:94:ac:8f:ad:a4:b2:fb:e6:00:fd:45:a7:
4c:32:c5:4b:40:de:bb:17:17:43:df:6d:57:2e:c5:71:a2:17:
c9:b1:38:23:57:73:dd:65:a0:39:44:17:c9:9e:47:f0:39:7e:
19:59:e1:90:7c:9e:0f:9a:f8:a8:0a:db:fe:5b:ac:d9:22:59:
ff:0b:e3:ed:b5:56:bb:2f:75:fb:ee:e0:20:6d:fc:a9:c7:d4:
52:e2:d1:c9:a1:33:32:53:65:cb:c5:c6:3e:d7:24:3b:10:c6:
86:46:31:16:37:bc:31:67:c4:05:54:48:d5:a7:b2:2b:64:44:
c3:ca:67:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:54:25 2026 by rpki-client