This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36382e302f32322d3232203d3e203536323832.roa
File: 3130332e3233312e36382e302f32322d3232203d3e203536323832.roa (raw, json)
Hash identifier: wEw1MvonFWnRmkF7XaWDFr8v781+GQM1bCe5yjSrewg=
Subject key identifier: 30:DB:6A:33:91:69:84:63:C5:90:8A:4A:A5:95:3C:D8:D3:68:42:6C
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 621140E342BACC9AEDC5A3572AAB6114357AE695
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36382e302f32322d3232203d3e203536323832.roa
Signing time: Tue 20 Jan 2026 02:15:35 +0000
ROA not before: Tue 20 Jan 2026 02:10:35 +0000
ROA not after: Tue 19 Jan 2027 02:15:35 +0000
asID: 56282
IP address blocks: 103.231.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:11:40:e3:42:ba:cc:9a:ed:c5:a3:57:2a:ab:61:14:35:7a:e6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jan 20 02:10:35 2026 GMT
Not After : Jan 19 02:15:35 2027 GMT
Subject: CN=30DB6A3391698463C5908A4AA5953CD8D368426C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:8c:04:14:3c:f5:26:64:8c:9e:37:47:8d:
25:c7:61:b9:86:ca:a6:e7:bf:53:55:5c:1b:55:1f:
d4:4b:a9:84:ca:9b:5e:0c:36:84:58:a2:b7:82:e8:
cb:9d:a9:9e:b4:1d:fd:2c:79:fe:c7:0d:bd:a9:03:
c2:96:05:bf:48:22:28:7f:ae:e3:a9:6f:b1:cb:8b:
9c:08:9f:20:24:4c:42:1e:b3:ce:84:13:9d:c2:11:
91:f1:fb:f3:2c:95:f4:35:74:8d:54:5c:c7:e7:2f:
4b:b8:94:71:e2:09:de:72:81:8a:a4:62:67:16:ea:
88:11:5f:b7:a2:d4:15:83:af:57:60:50:86:dd:d1:
46:5a:a8:bd:ed:46:b9:dc:25:5c:bf:5e:b0:6b:1c:
11:28:33:7a:3f:bb:a8:93:16:50:72:64:be:28:6a:
97:cf:85:d1:fc:46:bb:c5:d2:11:9f:31:27:92:37:
ad:14:6e:0b:74:c7:1e:43:0a:6a:a1:5e:68:ea:0d:
56:9e:cd:e6:15:d4:04:ce:6a:d7:3c:6f:13:ff:da:
65:b0:ab:47:01:f3:08:6b:1b:a7:d3:07:d0:70:e1:
51:20:a4:23:9a:49:70:8d:f7:96:39:7c:c1:eb:b2:
61:26:a2:02:f4:09:39:02:95:f7:65:63:2d:50:57:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DB:6A:33:91:69:84:63:C5:90:8A:4A:A5:95:3C:D8:D3:68:42:6C
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36382e302f32322d3232203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.68.0/22
Signature Algorithm: sha256WithRSAEncryption
17:41:2e:c9:02:58:10:a3:fb:3a:18:90:ba:6a:60:33:f3:08:
ee:fe:ec:f6:c7:f6:6f:11:c9:87:a9:d6:ce:bd:e5:88:20:bb:
26:48:c4:a3:9e:ed:3e:21:24:0a:4d:1e:aa:9a:d1:47:d6:f0:
4e:78:55:87:73:77:60:c4:a1:a8:7a:90:dd:85:e8:bc:c0:6b:
54:b0:da:1c:fa:e5:67:e6:80:98:14:d1:5e:3c:8a:47:0a:ba:
d5:83:44:56:72:5c:77:4b:c3:63:e0:85:f6:73:79:da:d3:61:
61:66:2c:ad:af:c1:87:dd:4b:90:e2:73:4b:6f:de:34:4c:bf:
0d:a9:49:2d:10:c5:3c:d6:a1:bb:48:03:0a:2e:d4:ad:e1:3e:
60:e9:74:76:9b:9a:d9:9b:bd:4c:74:7c:60:29:50:65:f8:11:
bd:9a:ef:17:d0:a9:18:27:ef:09:0f:08:b6:92:ec:6e:8c:a9:
2d:2d:77:05:17:de:14:ed:2a:c1:8d:f2:63:8d:c2:2e:17:32:
a4:09:9e:db:75:fe:2d:ea:66:02:5b:91:97:a9:a9:c0:11:0d:
6a:86:31:38:5f:ef:d6:86:4a:21:dd:2a:8b:85:09:db:99:18:
24:f2:f4:ea:f6:20:25:57:36:d0:9f:e9:76:b3:d8:30:c1:de:
27:2e:6f:e1
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUYhFA40K6zJrtxaNXKqthFDV65pUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjAxMjAwMjEwMzVaFw0yNzAxMTkwMjE1MzVaMDMxMTAvBgNV
BAMTKDMwREI2QTMzOTE2OTg0NjNDNTkwOEE0QUE1OTUzQ0Q4RDM2ODQyNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUl4wEFDz1JmSMnjdHjSXHYbmG
yqbnv1NVXBtVH9RLqYTKm14MNoRYoreC6MudqZ60Hf0sef7HDb2pA8KWBb9IIih/
ruOpb7HLi5wInyAkTEIes86EE53CEZHx+/MslfQ1dI1UXMfnL0u4lHHiCd5ygYqk
YmcW6ogRX7ei1BWDr1dgUIbd0UZaqL3tRrncJVy/XrBrHBEoM3o/u6iTFlByZL4o
apfPhdH8RrvF0hGfMSeSN60Ubgt0xx5DCmqhXmjqDVaezeYV1ATOatc8bxP/2mWw
q0cB8whrG6fTB9Bw4VEgpCOaSXCN95Y5fMHrsmEmogL0CTkClfdlYy1QV6Y3AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUMNtqM5FphGPFkIpKpZU82NNoQmwwHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzY2ODQ4MS8wLzMxMzAzMzJlMzIz
MzMxMmUzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMyMzgzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfnRDANBgkqhkiG9w0BAQsFAAOCAQEAF0EuyQJYEKP7OhiQumpgM/MI
7v7s9sf2bxHJh6nWzr3liCC7JkjEo57tPiEkCk0eqprRR9bwTnhVh3N3YMShqHqQ
3YXovMBrVLDaHPrlZ+aAmBTRXjyKRwq61YNEVnJcd0vDY+CF9nN52tNhYWYsra/B
h91LkOJzS2/eNEy/DalJLRDFPNahu0gDCi7UreE+YOl0dpua2Zu9THR8YClQZfgR
vZrvF9CpGCfvCQ8ItpLsboypLS13BRfeFO0qwY3yY43CLhcypAme23X+LepmAluR
l6mpwBENaoYxOF/v1oZKId0qi4UJ25kYJPL06vYgJVc20J/pdrPYMMHeJy5v4Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:54:46 2026 by rpki-client