This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36382e302f32322d3232203d3e2034383038.roa File: 3130332e3233312e36382e302f32322d3232203d3e2034383038.roa (raw, json) Hash identifier: 8S3KWRNb0/Iteu4mNRrbOAaKLyXnnWRnw4jAyEQHBOk= Subject key identifier: 1F:96:97:ED:DA:2D:1B:3B:48:5F:C0:E3:8F:63:D5:D7:E8:F7:0A:BF Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 4BDB51A28786CD1BC8E637C2D3B84258742FA7D3 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36382e302f32322d3232203d3e2034383038.roa Signing time: Tue 20 Jan 2026 02:15:36 +0000 ROA not before: Tue 20 Jan 2026 02:10:36 +0000 ROA not after: Tue 19 Jan 2027 02:15:36 +0000 asID: 4808 IP address blocks: 103.231.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:db:51:a2:87:86:cd:1b:c8:e6:37:c2:d3:b8:42:58:74:2f:a7:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:36 2026 GMT Not After : Jan 19 02:15:36 2027 GMT Subject: CN=1F9697EDDA2D1B3B485FC0E38F63D5D7E8F70ABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:16:e0:5f:87:49:d4:77:62:c0:28:36:a5: db:80:0a:55:b9:de:66:22:25:ba:33:fc:12:21:66: 1a:d3:3f:d6:01:52:0f:42:3c:9a:ac:4f:7d:b8:ee: 45:7c:cf:04:36:5e:48:86:18:83:82:2c:a3:55:81: 38:9c:38:b8:fe:69:36:3b:fd:18:db:0d:4b:ac:03: e9:f6:f2:fe:ae:b1:74:dd:9d:15:51:f2:f2:37:ed: de:3d:16:ef:a1:cb:63:60:77:cb:aa:1b:93:db:34: 42:47:49:2d:a6:7b:4a:a8:92:f2:d1:32:05:e8:4f: f4:df:2e:ab:59:e2:24:f0:1b:85:48:1e:de:77:6c: 6b:a0:67:9e:43:3c:21:54:ad:52:d6:4c:58:56:85: a4:44:a9:ff:db:f9:2d:76:d2:75:b9:8d:dc:91:9b: 0f:f9:0d:97:c5:06:f3:f2:76:d7:af:0e:5b:0d:ff: 8a:f0:1a:ba:8e:11:da:8b:92:df:d6:8c:f6:07:ec: a8:04:e9:98:fd:e1:d0:aa:85:79:dd:71:01:f2:77: a8:02:6d:ed:d8:ff:19:16:99:fb:4a:78:7f:fe:35: 4d:28:0b:31:74:0b:17:77:38:75:d0:7a:43:ee:98: 5d:a6:d2:64:cf:60:17:0f:60:93:ae:f3:41:3c:d9: f9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:96:97:ED:DA:2D:1B:3B:48:5F:C0:E3:8F:63:D5:D7:E8:F7:0A:BF X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36382e302f32322d3232203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.231.68.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:b9:05:91:8d:ab:39:6f:08:fb:4d:e4:2f:5a:4b:f1:70:48: 40:a4:02:7f:1d:2c:00:6b:42:9e:bc:0c:92:37:01:5a:d0:94: 17:3b:5a:b1:6b:32:96:92:35:80:63:c7:62:50:07:93:bb:d4: 7e:8f:6d:11:47:9a:2b:22:14:38:20:5a:0e:db:8d:8e:7e:2c: 70:3c:7e:0d:9e:fd:a8:f9:7b:ab:1b:ed:0c:3f:1f:87:16:66: 4e:46:ba:9e:34:f0:1e:07:a4:c7:d2:a6:ab:1b:ff:d8:72:c8: 0c:01:86:5f:63:5c:26:d3:05:81:51:e3:e3:8e:d0:29:73:0b: 47:67:f2:c0:d1:31:d2:04:a4:00:e7:29:b5:20:f6:5a:39:65: 86:e2:c8:a6:1a:03:0f:12:b7:71:23:2a:e1:5e:ff:19:7e:32: 91:a5:b5:0f:45:e8:8c:8c:eb:b8:db:11:96:da:c9:57:8c:1d: c0:8c:be:51:9d:a7:7c:10:ab:16:77:51:2b:41:0c:8f:d0:cc: c3:55:bb:0c:7d:46:86:de:28:d3:5a:92:e3:5e:b8:d4:3a:45: d1:17:90:61:ce:a2:78:37:7e:3b:b5:7d:3e:d8:3a:af:4f:26: 35:f4:ad:9e:05:fd:7a:3c:f3:0a:30:9c:d9:7d:70:2f:5e:bb: 98:e9:02:b4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUS9tRooeGzRvI5jfC07hCWHQvp9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAxMjAwMjEwMzZaFw0yNzAxMTkwMjE1MzZaMDMxMTAvBgNV BAMTKDFGOTY5N0VEREEyRDFCM0I0ODVGQzBFMzhGNjNENUQ3RThGNzBBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xRbgX4dJ1HdiwCg2pduAClW5 3mYiJboz/BIhZhrTP9YBUg9CPJqsT3247kV8zwQ2XkiGGIOCLKNVgTicOLj+aTY7 /RjbDUusA+n28v6usXTdnRVR8vI37d49Fu+hy2Ngd8uqG5PbNEJHSS2me0qokvLR MgXoT/TfLqtZ4iTwG4VIHt53bGugZ55DPCFUrVLWTFhWhaREqf/b+S120nW5jdyR mw/5DZfFBvPydtevDlsN/4rwGrqOEdqLkt/WjPYH7KgE6Zj94dCqhXndcQHyd6gC be3Y/xkWmftKeH/+NU0oCzF0Cxd3OHXQekPumF2m0mTPYBcPYJOu80E82flNAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUH5aX7dotGztIX8Djj2PV1+j3Cr8wHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjY4NDgxLzAvMzEzMDMzMmUzMjMz MzEyZTM2MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfnRDANBgkqhkiG9w0BAQsFAAOCAQEAC7kFkY2rOW8I+03kL1pL8XBIQKQC fx0sAGtCnrwMkjcBWtCUFztasWsylpI1gGPHYlAHk7vUfo9tEUeaKyIUOCBaDtuN jn4scDx+DZ79qPl7qxvtDD8fhxZmTka6njTwHgekx9Kmqxv/2HLIDAGGX2NcJtMF gVHj447QKXMLR2fywNEx0gSkAOcptSD2WjllhuLIphoDDxK3cSMq4V7/GX4ykaW1 D0XojIzruNsRltrJV4wdwIy+UZ2nfBCrFndRK0EMj9DMw1W7DH1Ght4o01qS4164 1DpF0ReQYc6ieDd+O7V9Ptg6r08mNfStngX9ejzzCjCc2X1wL167mOkCtA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:51 2026 by rpki-client