This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232302e302f32322d3232203d3e2034383038.roa File: 3130332e3233352e3232302e302f32322d3232203d3e2034383038.roa (raw, json) Hash identifier: K/BUO9D2gJDFUOFnsTn+bu4RijrNmL2WXhJe6lTExSQ= Subject key identifier: AE:EF:D3:93:EC:FC:0F:66:DE:56:5A:92:EA:F1:B7:F6:E3:C0:D6:53 Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 25F8A4BE66EFF5EB01F1C445D7EF670A694BA239 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232302e302f32322d3232203d3e2034383038.roa Signing time: Tue 20 Jan 2026 02:15:34 +0000 ROA not before: Tue 20 Jan 2026 02:10:34 +0000 ROA not after: Tue 19 Jan 2027 02:15:34 +0000 asID: 4808 IP address blocks: 103.235.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f8:a4:be:66:ef:f5:eb:01:f1:c4:45:d7:ef:67:0a:69:4b:a2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:34 2026 GMT Not After : Jan 19 02:15:34 2027 GMT Subject: CN=AEEFD393ECFC0F66DE565A92EAF1B7F6E3C0D653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d7:f8:61:82:56:72:b7:5e:36:00:03:2b:26: 98:d6:20:4a:4f:df:d2:97:7b:9b:40:06:ca:cb:d6: 74:8c:a5:6c:73:91:ef:f5:a6:d7:02:3e:38:a3:7e: 25:f6:43:36:5e:6d:cc:e5:f3:32:e7:00:ee:c3:5c: a3:33:58:73:aa:cb:8e:34:2a:42:20:3c:c3:91:8f: b8:12:f5:05:53:73:84:84:6d:41:8f:da:3b:23:3c: 6f:57:ee:89:39:93:e0:f4:1c:f8:ee:cd:bd:ad:a4: 5c:a0:00:04:f6:57:d1:51:64:86:6f:0d:b8:39:d7: 15:26:53:4b:58:b8:e9:e3:cd:5c:bd:81:78:73:44: 40:32:08:23:b3:58:cf:cd:4b:8c:13:09:ad:cc:40: 11:77:06:3d:fa:7d:51:b6:5b:9e:9c:a8:70:f2:c5: 97:12:98:ff:0a:a0:c6:b8:78:87:c7:89:4e:00:f2: 89:d6:86:55:35:db:8b:e1:57:c2:32:6b:66:ee:75: 74:f7:02:14:db:a5:24:39:57:d5:f1:bc:39:86:45: ba:ab:87:41:93:49:1f:e4:83:e7:bf:72:86:79:a6: 39:b8:d8:96:18:de:81:d1:43:8e:be:d4:94:a1:54: 70:c5:5f:b0:4c:36:60:c3:e4:cb:a3:0e:aa:1b:63: cf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EF:D3:93:EC:FC:0F:66:DE:56:5A:92:EA:F1:B7:F6:E3:C0:D6:53 X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232302e302f32322d3232203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.220.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:72:4a:2a:b1:5c:3a:93:f8:d4:fe:cd:b3:3d:76:bc:d9:ad: 1b:64:7a:e4:fb:d7:40:19:2b:a1:c7:6d:99:af:68:00:af:8c: 18:a7:0f:a5:c6:50:50:bb:9e:0f:69:2e:92:eb:b1:36:cb:34: 52:39:c5:0e:1c:b9:be:a5:c5:be:e0:15:42:fe:86:d8:cf:c3: 5b:e8:93:31:3b:e3:b6:b8:45:dc:c8:f9:74:b3:77:26:18:af: 35:a9:3a:ad:ce:9c:40:1d:71:65:25:95:b2:94:a7:3e:dc:ce: 68:72:25:4a:d9:34:39:e7:28:74:fc:a5:af:d8:18:2a:40:a3: ef:4c:4f:fc:6f:11:6b:f4:02:b9:a0:88:2d:6e:62:db:88:38: 45:6d:0d:e4:62:4a:17:47:a9:b7:53:98:c8:b6:02:21:2f:69: 3b:21:c1:b3:e8:8d:a1:5a:e0:65:a3:8a:22:63:2b:6a:2e:05: 20:f1:b5:8d:8d:66:d1:3b:88:60:c5:cb:96:36:94:6e:9c:a0: b8:1b:f6:74:34:b3:c2:e5:61:33:12:83:ca:c3:67:67:ff:e1: 2e:83:59:05:b5:b7:03:67:8c:f0:7f:61:db:14:2b:ed:92:9a: 9b:3f:47:e4:67:3b:7e:9a:92:8b:14:f5:ba:e4:6b:70:81:84: 54:af:15:bd -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJfikvmbv9esB8cRF1+9nCmlLojkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAxMjAwMjEwMzRaFw0yNzAxMTkwMjE1MzRaMDMxMTAvBgNV BAMTKEFFRUZEMzkzRUNGQzBGNjZERTU2NUE5MkVBRjFCN0Y2RTNDMEQ2NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz1/hhglZyt142AAMrJpjWIEpP 39KXe5tABsrL1nSMpWxzke/1ptcCPjijfiX2QzZebczl8zLnAO7DXKMzWHOqy440 KkIgPMORj7gS9QVTc4SEbUGP2jsjPG9X7ok5k+D0HPjuzb2tpFygAAT2V9FRZIZv Dbg51xUmU0tYuOnjzVy9gXhzREAyCCOzWM/NS4wTCa3MQBF3Bj36fVG2W56cqHDy xZcSmP8KoMa4eIfHiU4A8onWhlU124vhV8Iya2budXT3AhTbpSQ5V9XxvDmGRbqr h0GTSR/kg+e/coZ5pjm42JYY3oHRQ46+1JShVHDFX7BMNmDD5MujDqobY8+3AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUru/Tk+z8D2beVlqS6vG39uPA1lMwHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzY2ODQ4MS8wLzMxMzAzMzJlMzIz MzM1MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmfr3DANBgkqhkiG9w0BAQsFAAOCAQEAbHJKKrFcOpP41P7Nsz12vNmt G2R65PvXQBkrocdtma9oAK+MGKcPpcZQULueD2kukuuxNss0UjnFDhy5vqXFvuAV Qv6G2M/DW+iTMTvjtrhF3Mj5dLN3JhivNak6rc6cQB1xZSWVspSnPtzOaHIlStk0 OecodPylr9gYKkCj70xP/G8Ra/QCuaCILW5i24g4RW0N5GJKF0ept1OYyLYCIS9p OyHBs+iNoVrgZaOKImMrai4FIPG1jY1m0TuIYMXLljaUbpyguBv2dDSzwuVhMxKD ysNnZ//hLoNZBbW3A2eM8H9h2xQr7ZKamz9H5Gc7fpqSixT1uuRrcIGEVK8VvQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:58 2026 by rpki-client