This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232302e302f32322d3232203d3e203536323832.roa File: 3130332e3233352e3232302e302f32322d3232203d3e203536323832.roa (raw, json) Hash identifier: X8o34ROwXxUIvMj22mGm3ExvXR7zXrq28moPkyZq7U4= Subject key identifier: 50:73:84:FB:E4:50:F1:C6:67:05:38:D1:89:4D:D5:01:5B:40:92:0D Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 76C14A8805B63FCA75BA36E5FC24AABDA735E06E Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232302e302f32322d3232203d3e203536323832.roa Signing time: Tue 20 Jan 2026 02:15:34 +0000 ROA not before: Tue 20 Jan 2026 02:10:34 +0000 ROA not after: Tue 19 Jan 2027 02:15:34 +0000 asID: 56282 IP address blocks: 103.235.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c1:4a:88:05:b6:3f:ca:75:ba:36:e5:fc:24:aa:bd:a7:35:e0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:34 2026 GMT Not After : Jan 19 02:15:34 2027 GMT Subject: CN=507384FBE450F1C6670538D1894DD5015B40920D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5b:90:18:a0:a7:3e:55:de:10:7b:75:5e:65: aa:39:34:00:58:d1:4c:7c:fd:07:99:84:53:79:8a: 57:66:32:af:03:d4:70:4b:a4:ca:72:23:40:68:52: 5a:15:b1:9f:84:98:42:75:35:4c:c3:7e:7f:94:bd: 21:fe:5a:ca:bb:95:87:44:22:d9:4e:de:33:7c:9e: 39:d9:19:b9:71:79:ef:9d:5e:07:5f:72:8d:2d:1d: b0:17:d4:db:fd:37:f7:4c:07:a5:03:b4:e1:bd:9d: 5a:7e:fc:20:bb:44:f4:97:8d:69:44:f4:2f:c1:31: d4:08:ce:38:26:68:32:06:38:a4:a7:a3:bd:ff:d5: 85:72:ec:b3:07:d6:22:8e:69:9d:ce:20:d2:6e:b7: 36:64:dd:55:48:1a:ae:1c:5a:e3:e3:ac:a1:9f:fd: 9c:c8:f2:f7:ac:5f:8b:97:13:e0:39:99:6e:c8:15: 6e:46:f1:4f:c1:33:06:60:6a:84:12:d8:a6:ae:06: d0:3d:ce:78:a7:f7:3f:e4:07:22:c5:a4:a3:2d:54: fd:1e:d6:b3:d8:c7:c2:63:e1:bd:17:c3:1d:6a:88: e7:29:36:b8:31:63:e3:6d:e6:d2:80:00:de:ce:e3: 28:79:85:37:4c:9b:1d:27:21:63:b5:44:98:3d:fb: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:73:84:FB:E4:50:F1:C6:67:05:38:D1:89:4D:D5:01:5B:40:92:0D X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232302e302f32322d3232203d3e203536323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.220.0/22 Signature Algorithm: sha256WithRSAEncryption 11:06:da:a9:13:b5:d9:a1:ce:56:62:d9:07:77:1a:1d:05:81: b9:69:9a:d7:8e:ab:29:08:78:a9:ae:18:b3:73:9a:4a:a5:37: 67:76:42:f1:63:85:4a:16:c9:cb:34:6e:15:e0:b9:1e:62:5b: 5c:54:ac:77:34:d7:0f:c8:07:7f:40:df:72:74:22:89:a0:f3: 2c:54:9f:34:86:4e:d7:75:1a:0b:5b:49:45:81:a5:a5:d9:90: 6f:77:c8:31:fa:a1:22:4b:d1:7a:22:cf:f3:d4:5c:12:18:2a: 98:88:f2:16:dc:99:aa:59:8d:15:c7:d0:9c:07:83:b3:07:1c: 0c:4e:54:2d:f0:a8:c8:42:3e:da:7e:b9:4c:81:43:fc:e0:c4: 91:c9:03:a1:0d:28:f8:4b:97:da:6d:09:63:32:e4:fd:8d:a2: 14:2c:1b:6a:d3:33:06:a7:4d:cc:84:36:6a:fa:62:3f:11:7b: 2c:db:5e:09:2f:31:6b:fd:1b:7f:3d:07:ac:5a:87:82:82:66: ba:cd:f9:cc:df:57:74:f0:46:b1:89:6c:e7:bf:89:be:b1:25: 73:b2:ba:77:62:b6:db:e7:ee:7d:cf:65:14:30:91:f6:53:6a: 0d:b8:3d:2c:17:e1:56:e5:e6:fe:c9:94:da:fd:eb:d3:10:ed: 2a:db:31:f0 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUdsFKiAW2P8p1ujbl/CSqvac14G4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAxMjAwMjEwMzRaFw0yNzAxMTkwMjE1MzRaMDMxMTAvBgNV BAMTKDUwNzM4NEZCRTQ1MEYxQzY2NzA1MzhEMTg5NERENTAxNUI0MDkyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSW5AYoKc+Vd4Qe3VeZao5NABY 0Ux8/QeZhFN5ildmMq8D1HBLpMpyI0BoUloVsZ+EmEJ1NUzDfn+UvSH+Wsq7lYdE ItlO3jN8njnZGblxee+dXgdfco0tHbAX1Nv9N/dMB6UDtOG9nVp+/CC7RPSXjWlE 9C/BMdQIzjgmaDIGOKSno73/1YVy7LMH1iKOaZ3OINJutzZk3VVIGq4cWuPjrKGf /ZzI8vesX4uXE+A5mW7IFW5G8U/BMwZgaoQS2KauBtA9znin9z/kByLFpKMtVP0e 1rPYx8Jj4b0Xwx1qiOcpNrgxY+Nt5tKAAN7O4yh5hTdMmx0nIWO1RJg9+wOXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUUHOE++RQ8cZnBTjRiU3VAVtAkg0wHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC8zMTMwMzMyZTMy MzMzNTJlMzIzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMyMzgzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfr3DANBgkqhkiG9w0BAQsFAAOCAQEAEQbaqRO12aHOVmLZB3ca HQWBuWma146rKQh4qa4Ys3OaSqU3Z3ZC8WOFShbJyzRuFeC5HmJbXFSsdzTXD8gH f0DfcnQiiaDzLFSfNIZO13UaC1tJRYGlpdmQb3fIMfqhIkvReiLP89RcEhgqmIjy FtyZqlmNFcfQnAeDswccDE5ULfCoyEI+2n65TIFD/ODEkckDoQ0o+EuX2m0JYzLk /Y2iFCwbatMzBqdNzIQ2avpiPxF7LNteCS8xa/0bfz0HrFqHgoJmus35zN9XdPBG sYls57+JvrElc7K6d2K22+fufc9lFDCR9lNqDbg9LBfhVuXm/smU2v3r0xDtKtsx 8A== -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:20 2026 by rpki-client