This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232342e302f32322d3232203d3e203233373234.roa File: 3130332e3233352e3232342e302f32322d3232203d3e203233373234.roa (raw, json) Hash identifier: ED7GjEqXdWxdnve4xU4KVyiyGh/sNDt31pjZBOKMjPc= Subject key identifier: 6E:0F:B4:51:C9:42:7F:EC:56:B5:C9:6A:5C:6B:BA:C5:80:00:58:78 Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 219C64E67F0C63F568A139F78C68F7808CC2FA Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232342e302f32322d3232203d3e203233373234.roa Signing time: Tue 20 Jan 2026 02:15:36 +0000 ROA not before: Tue 20 Jan 2026 02:10:36 +0000 ROA not after: Tue 19 Jan 2027 02:15:36 +0000 asID: 23724 IP address blocks: 103.235.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:9c:64:e6:7f:0c:63:f5:68:a1:39:f7:8c:68:f7:80:8c:c2:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:36 2026 GMT Not After : Jan 19 02:15:36 2027 GMT Subject: CN=6E0FB451C9427FEC56B5C96A5C6BBAC580005878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:05:21:3d:a3:19:96:53:92:68:4b:f8:b5:3f: 24:3a:b3:18:86:24:10:13:1c:f2:0d:ae:4c:3b:44: 24:df:d8:c7:f7:66:3b:4b:cb:19:c7:bc:33:3c:15: e1:e9:b3:6a:ba:3a:96:79:17:69:67:c9:50:dc:b6: 8e:ce:72:2c:48:74:9b:79:06:01:84:15:44:1b:19: d9:5e:cf:66:7f:94:7a:bb:b6:a4:3b:b8:4a:62:29: 90:f8:b0:a8:5c:0b:39:0e:71:e8:f2:ac:b3:e1:bd: 2a:9c:3d:4c:e9:e5:71:e3:70:6e:80:51:ee:c1:f7: 35:e9:98:df:e3:01:69:f1:4f:f8:91:96:c0:37:94: 02:17:7d:78:b2:8f:4d:86:5d:70:3c:45:27:78:ea: eb:aa:e7:10:42:9e:1e:57:80:7e:c8:d1:ce:43:3d: 45:b4:f4:27:49:eb:be:62:03:49:97:43:bd:5e:22: 2c:ce:59:d0:46:e0:6b:1f:57:f3:ad:da:71:54:c9: 50:a8:ed:ed:d9:93:29:b2:e3:76:92:53:ec:2b:d8: b1:7c:09:17:54:6a:39:b8:f3:63:50:07:4c:6a:cd: 6d:51:ab:a8:86:36:56:89:2c:1f:15:06:70:a2:85: 06:3d:9d:a5:ab:3e:de:b9:94:74:cc:02:8d:d7:f7: 92:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0F:B4:51:C9:42:7F:EC:56:B5:C9:6A:5C:6B:BA:C5:80:00:58:78 X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232342e302f32322d3232203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.224.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:ac:4e:d0:6c:9f:7b:9f:7e:d3:f6:ca:bd:83:28:1c:66:bd: 59:ba:50:d0:dd:81:e4:e4:08:28:98:fb:9f:ac:95:bc:b7:fc: b1:f5:d2:e7:c4:51:31:51:b8:02:73:43:bf:c1:47:80:34:86: 7c:1e:4b:30:c1:8d:7f:8e:1a:89:19:09:52:5d:84:d1:ba:c5: ea:8c:45:8d:bc:34:cf:10:20:e8:0d:20:95:4c:f0:fd:fa:e7: a2:26:8d:92:22:97:03:b4:d6:4c:7f:06:55:00:e9:78:40:69: 7d:d8:6b:fb:81:63:a5:7d:73:f8:95:cc:15:1f:ec:ef:e2:43: 83:0d:e2:cc:8d:df:24:38:ca:b7:35:cc:16:11:15:f8:ff:c2: 4f:25:61:67:23:e0:a8:ac:ca:34:1c:72:0e:83:ac:a7:8a:58: ca:d3:c4:24:c7:f1:bf:ef:3e:a3:a0:13:a2:11:19:9f:1e:c3: 87:0c:83:59:45:e1:0f:89:78:b0:d3:6b:5c:ee:0b:8a:ec:08: 2f:6a:d8:6c:d1:5f:1b:0d:a3:90:c2:92:e3:3d:98:04:cb:fe: 50:0d:f2:14:a6:8f:8a:2d:ac:9c:59:91:89:8c:82:d6:94:cc: 68:89:41:00:10:84:b2:37:b1:e5:31:f0:d9:a8:33:eb:a1:27: 65:21:5d:56 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgITIZxk5n8MY/VooTn3jGj3gIzC+jANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhBRjM4MjJCQTdBNTg1MERBMDY5OTNCRjIyRDk5MEIyQkNB RjJCREU4MB4XDTI2MDEyMDAyMTAzNloXDTI3MDExOTAyMTUzNlowMzExMC8GA1UE AxMoNkUwRkI0NTFDOTQyN0ZFQzU2QjVDOTZBNUM2QkJBQzU4MDAwNTg3ODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOYFIT2jGZZTkmhL+LU/JDqzGIYk EBMc8g2uTDtEJN/Yx/dmO0vLGce8MzwV4emzaro6lnkXaWfJUNy2js5yLEh0m3kG AYQVRBsZ2V7PZn+Ueru2pDu4SmIpkPiwqFwLOQ5x6PKss+G9Kpw9TOnlceNwboBR 7sH3NemY3+MBafFP+JGWwDeUAhd9eLKPTYZdcDxFJ3jq66rnEEKeHleAfsjRzkM9 RbT0J0nrvmIDSZdDvV4iLM5Z0Ebgax9X863acVTJUKjt7dmTKbLjdpJT7CvYsXwJ F1RqObjzY1AHTGrNbVGrqIY2VoksHxUGcKKFBj2dpas+3rmUdMwCjdf3kvkCAwEA AaOCAhcwggITMB0GA1UdDgQWBBRuD7RRyUJ/7Fa1yWpca7rFgABYeDAfBgNVHSME GDAWgBSvOCK6elhQ2gaZO/ItmQsryvK96DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1 NTc3MjQxOTQ3NjY4NDgxLzAvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBC MkJDQUYyQkRFOC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS9BRjM4MjJCQTdBNTg1MERBMDY5OTNCRjIyRDk5MEIyQkNBRjJCREU4LmNlcjCB kAYIKwYBBQUHAQsEgYMwgYAwfgYIKwYBBQUHMAuGcnJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzY2ODQ4MS8wLzMxMzAzMzJlMzIz MzM1MmUzMjMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjMzMzczMjM0LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ+vgMA0GCSqGSIb3DQEBCwUAA4IBAQB6rE7QbJ97n37T9sq9gygc Zr1ZulDQ3YHk5AgomPufrJW8t/yx9dLnxFExUbgCc0O/wUeANIZ8HkswwY1/jhqJ GQlSXYTRusXqjEWNvDTPECDoDSCVTPD9+ueiJo2SIpcDtNZMfwZVAOl4QGl92Gv7 gWOlfXP4lcwVH+zv4kODDeLMjd8kOMq3NcwWERX4/8JPJWFnI+CorMo0HHIOg6yn iljK08Qkx/G/7z6joBOiERmfHsOHDINZReEPiXiw02tc7guK7Agvaths0V8bDaOQ wpLjPZgEy/5QDfIUpo+KLaycWZGJjILWlMxoiUEAEISyN7HlMfDZqDProSdlIV1W -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:01 2026 by rpki-client