This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e2034383038.roa
File: 3130332e3233312e36342e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier: nRRFpOXt7+r1r4HHhB0TdnD+tb4rzqeupmIIbMHWcPY=
Subject key identifier: 7F:CC:E8:71:3B:7A:A0:A5:57:58:61:8D:F0:3C:D7:BA:04:D0:42:45
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 49CFF2E8DB3DBBCD0741F9A7F65C2A9B410171DF
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e2034383038.roa
Signing time: Tue 20 Jan 2026 02:15:34 +0000
ROA not before: Tue 20 Jan 2026 02:10:34 +0000
ROA not after: Tue 19 Jan 2027 02:15:34 +0000
asID: 4808
IP address blocks: 103.231.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 15:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:cf:f2:e8:db:3d:bb:cd:07:41:f9:a7:f6:5c:2a:9b:41:01:71:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jan 20 02:10:34 2026 GMT
Not After : Jan 19 02:15:34 2027 GMT
Subject: CN=7FCCE8713B7AA0A55758618DF03CD7BA04D04245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fd:49:38:cd:68:34:a9:10:dd:e5:32:64:cb:
da:cc:d2:69:2a:a4:4f:53:31:35:a7:49:12:4b:f6:
c1:41:27:17:d5:be:9c:b4:52:bc:cd:ee:b9:51:27:
e0:d5:b5:37:3a:b5:e8:cc:db:87:75:80:1e:66:a0:
04:f2:ac:8c:2f:ca:80:98:21:1d:39:90:bf:7a:eb:
ee:dd:66:40:24:cd:99:52:01:97:d0:4d:e2:f7:6b:
40:2c:c1:6d:5f:c2:7d:cf:b8:de:c7:25:e3:5f:48:
a0:c3:42:69:1e:3a:39:b0:14:a3:91:62:22:be:8c:
0e:3a:98:60:be:08:10:f8:26:a6:85:ef:dc:f9:93:
de:c3:2a:9b:7e:b9:4f:51:05:44:f3:eb:ce:f3:ad:
3d:1d:a7:df:94:e7:6d:62:3b:7e:11:fd:9c:a0:a7:
3f:3a:9e:d0:0b:bc:10:69:74:53:f0:3d:ff:82:4f:
87:4a:5e:48:f0:34:2a:dd:c3:87:ba:47:1f:7d:0c:
62:c3:04:08:26:cc:ed:57:21:b6:b8:34:64:b6:de:
86:bd:9b:af:cc:02:8f:a8:5a:7a:2a:ef:b5:e8:63:
cb:b9:e1:71:e1:8d:a9:b7:c1:18:b4:df:c7:b6:18:
92:0b:2b:e6:e0:89:7d:1e:68:c6:b5:e8:38:c1:8b:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CC:E8:71:3B:7A:A0:A5:57:58:61:8D:F0:3C:D7:BA:04:D0:42:45
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.64.0/22
Signature Algorithm: sha256WithRSAEncryption
af:81:23:56:ed:f2:a0:26:2e:17:ce:61:3a:b7:07:a1:27:3d:
7a:a8:c2:10:60:8d:43:c2:13:5b:88:b9:bb:97:dc:86:88:2d:
aa:26:9d:d4:36:75:59:4d:4b:cc:a7:c6:f6:21:23:c1:05:fc:
0b:e8:d2:96:3d:35:5e:4b:08:b6:94:1b:72:cf:04:cb:ae:b5:
96:6d:06:e3:ba:87:a7:67:f7:ca:bc:28:25:89:9b:7b:e6:a1:
4b:84:84:50:f7:57:17:d5:e8:8a:ae:e0:cb:2a:39:09:46:99:
7a:75:a0:f6:15:b3:92:26:7e:99:62:96:1a:b1:81:a4:5f:da:
fb:ed:69:ec:66:61:d9:0d:28:63:47:ed:68:8a:c3:2b:ad:8e:
02:4e:67:c7:68:dd:dd:a0:ac:c0:02:ac:36:70:22:21:10:94:
91:34:dc:fd:09:ab:35:b0:54:e5:de:22:ca:1f:d4:ca:2b:c8:
09:79:eb:51:1c:78:9c:00:b3:5f:f8:8a:0e:90:a4:3b:9b:e1:
ca:3a:c2:83:6f:8c:45:92:73:9c:38:0b:17:04:ee:50:85:a4:
cc:98:4a:73:23:f2:2b:b5:31:3d:a1:91:96:82:d2:d7:b8:ef:
11:45:bd:74:38:17:b4:a9:47:18:71:90:52:a3:3b:41:bd:59:
e7:2e:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:53:01 2026 by rpki-client