This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232302e302f32322d3232203d3e203233373234.roa File: 3130332e3233352e3232302e302f32322d3232203d3e203233373234.roa (raw, json) Hash identifier: 5+04lzm1kZVQl2jHRAmUi4aImYXffFMCeG2lf7tuUT8= Subject key identifier: C6:4F:80:5B:2A:0F:47:AA:DB:C3:E0:87:DE:0C:FE:27:29:98:20:F2 Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 24267C2F4BB452EA969076B9185299622E087E59 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232302e302f32322d3232203d3e203233373234.roa Signing time: Tue 20 Jan 2026 02:15:36 +0000 ROA not before: Tue 20 Jan 2026 02:10:36 +0000 ROA not after: Tue 19 Jan 2027 02:15:36 +0000 asID: 23724 IP address blocks: 103.235.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:26:7c:2f:4b:b4:52:ea:96:90:76:b9:18:52:99:62:2e:08:7e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:36 2026 GMT Not After : Jan 19 02:15:36 2027 GMT Subject: CN=C64F805B2A0F47AADBC3E087DE0CFE27299820F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:76:34:ec:96:2f:d6:f5:02:5a:d3:85:8e: 93:64:6a:1d:36:07:4e:29:78:c2:bd:03:e6:fb:8e: 33:eb:92:c7:7f:4b:7c:07:40:d4:45:78:16:82:50: d0:46:60:73:4e:77:62:c9:0c:1e:a3:95:1a:c2:db: b3:e2:52:9f:00:cd:49:dd:2b:2c:db:95:34:25:eb: d4:d4:f7:bc:f8:1f:dc:2f:9d:52:63:a6:ad:35:a7: 78:99:49:eb:14:75:24:30:f9:d1:35:39:81:be:5c: d9:e9:ec:8e:1d:ef:5e:ea:4c:3f:9d:da:7f:41:74: a1:02:02:9a:0f:41:c2:03:1c:47:52:a1:7d:33:71: f2:58:c3:43:46:43:30:f4:a3:16:2d:35:65:52:4e: 46:68:28:d4:d4:e3:52:39:ac:b2:75:49:9d:b8:af: 64:aa:57:96:35:65:7a:33:46:b4:d6:7e:4c:fb:32: 7d:de:e6:67:c5:66:64:1b:a5:10:19:19:7e:f2:4b: 93:39:9f:fd:ea:8b:a2:2c:ad:5c:a4:ef:29:f0:5e: 8b:3e:c8:d9:68:e2:62:1f:f0:fb:c8:fe:30:8a:d4: a2:48:b6:86:8a:7d:f0:85:45:be:ed:59:70:06:77: 77:14:3d:33:8f:12:c6:ff:08:33:34:32:10:26:ce: e2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4F:80:5B:2A:0F:47:AA:DB:C3:E0:87:DE:0C:FE:27:29:98:20:F2 X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232302e302f32322d3232203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.220.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:c5:1e:da:b1:5f:0c:99:18:53:11:3e:80:bc:3e:da:49:d6: 5a:93:d2:7b:7c:14:7e:c1:f5:bc:69:4b:e6:ea:f3:c3:c6:10: 35:3f:3d:76:8c:9d:26:7e:4b:1b:60:d2:87:d0:84:a9:ac:c7: f3:2f:83:3e:4a:cd:2e:cf:b6:5c:78:30:82:0f:01:60:9e:c0: 15:9a:fd:13:13:f4:76:df:60:d3:95:e0:f3:6e:8f:52:c9:76: 94:6d:5c:ed:41:f2:db:d4:9d:2b:c4:bc:c3:26:c8:59:43:70: 2a:69:4e:b9:13:33:f2:3e:8a:68:03:ff:45:5b:48:ac:9b:53: 02:51:5f:ff:fe:6d:96:62:18:af:60:92:4f:81:bd:2d:d8:b8: 09:49:5d:bb:0f:b1:e8:42:a7:6a:45:52:d9:50:36:21:48:70: 1d:d1:9c:a4:55:ba:05:c5:7d:2d:f7:94:1c:48:6d:9c:5f:1b: 5c:37:18:e7:76:df:1f:03:77:50:3a:48:2f:3d:6a:5f:66:06: 97:23:23:ee:59:7f:36:ec:83:ca:ab:71:bc:bb:4b:43:78:11: 1d:10:37:27:b4:13:2f:f8:4b:33:a5:73:61:e4:80:44:36:38: 1b:5a:d2:e2:06:a4:9d:0d:6b:60:1b:10:ff:c5:d0:ef:32:b2: bc:a0:04:a5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJCZ8L0u0UuqWkHa5GFKZYi4IflkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAxMjAwMjEwMzZaFw0yNzAxMTkwMjE1MzZaMDMxMTAvBgNV BAMTKEM2NEY4MDVCMkEwRjQ3QUFEQkMzRTA4N0RFMENGRTI3Mjk5ODIwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2PHY07JYv1vUCWtOFjpNkah02 B04peMK9A+b7jjPrksd/S3wHQNRFeBaCUNBGYHNOd2LJDB6jlRrC27PiUp8AzUnd KyzblTQl69TU97z4H9wvnVJjpq01p3iZSesUdSQw+dE1OYG+XNnp7I4d717qTD+d 2n9BdKECApoPQcIDHEdSoX0zcfJYw0NGQzD0oxYtNWVSTkZoKNTU41I5rLJ1SZ24 r2SqV5Y1ZXozRrTWfkz7Mn3e5mfFZmQbpRAZGX7yS5M5n/3qi6IsrVyk7ynwXos+ yNlo4mIf8PvI/jCK1KJItoaKffCFRb7tWXAGd3cUPTOPEsb/CDM0MhAmzuIbAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUxk+AWyoPR6rbw+CH3gz+JymYIPIwHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC8zMTMwMzMyZTMy MzMzNTJlMzIzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfr3DANBgkqhkiG9w0BAQsFAAOCAQEADMUe2rFfDJkYUxE+gLw+ 2knWWpPSe3wUfsH1vGlL5urzw8YQNT89doydJn5LG2DSh9CEqazH8y+DPkrNLs+2 XHgwgg8BYJ7AFZr9ExP0dt9g05Xg826PUsl2lG1c7UHy29SdK8S8wybIWUNwKmlO uRMz8j6KaAP/RVtIrJtTAlFf//5tlmIYr2CST4G9Ldi4CUlduw+x6EKnakVS2VA2 IUhwHdGcpFW6BcV9LfeUHEhtnF8bXDcY53bfHwN3UDpILz1qX2YGlyMj7ll/NuyD yqtxvLtLQ3gRHRA3J7QTL/hLM6VzYeSARDY4G1rS4gaknQ1rYBsQ/8XQ7zKyvKAE pQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:53:46 2026 by rpki-client