This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232342e302f32322d3232203d3e2034383038.roa File: 3130332e3233352e3232342e302f32322d3232203d3e2034383038.roa (raw, json) Hash identifier: JKCuI56UVOY9acAQVCrOY3pHaAZOXOhroASOdVhxWoA= Subject key identifier: F5:79:7A:67:AC:EC:41:8C:94:91:A5:64:22:83:3C:5F:D2:A8:92:3E Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 3FA4E00FF15A0CD1D7A90086C043A22A5D8BAA7A Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232342e302f32322d3232203d3e2034383038.roa Signing time: Tue 20 Jan 2026 02:15:34 +0000 ROA not before: Tue 20 Jan 2026 02:10:34 +0000 ROA not after: Tue 19 Jan 2027 02:15:34 +0000 asID: 4808 IP address blocks: 103.235.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a4:e0:0f:f1:5a:0c:d1:d7:a9:00:86:c0:43:a2:2a:5d:8b:aa:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:34 2026 GMT Not After : Jan 19 02:15:34 2027 GMT Subject: CN=F5797A67ACEC418C9491A56422833C5FD2A8923E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:5a:1f:86:75:74:f1:24:12:5d:a7:6d:14: ba:96:d3:90:e3:01:ce:82:9c:8c:d2:bb:18:62:f1: 28:69:f4:ab:f6:9b:11:b3:14:e1:70:c7:70:de:49: a9:18:81:e3:cc:d9:15:1b:c9:5d:7e:07:c9:0d:a3: dc:7f:32:70:42:a4:1a:48:2a:80:91:e3:37:d2:1e: 8f:d5:af:04:3e:59:c1:a0:b9:58:8f:ab:a9:5d:5d: 2e:ae:6c:f3:14:ac:4d:70:d9:ab:dd:24:e4:47:5a: 09:b1:b8:c5:d4:d1:31:53:7a:05:2f:0c:02:db:0a: 0e:bc:ec:5b:7a:bc:54:c9:f4:c5:7a:9c:85:fb:13: 92:9b:37:2e:b7:53:dc:d1:82:9c:18:1e:b6:1f:68: ad:f2:5c:61:13:62:5b:f0:0a:8e:f2:28:aa:dd:f7: 27:c8:b0:12:27:03:2a:5a:18:d6:d8:ef:d1:96:9e: 4b:57:67:da:91:31:fe:23:53:cd:cb:2b:ef:ed:48: 2e:ad:a3:c9:5c:91:e5:b7:60:ca:51:26:7c:44:da: 80:88:5a:d9:89:d6:ee:96:72:53:1d:0f:92:f3:5a: 94:e5:39:29:59:b3:c5:21:b7:2d:6c:fa:81:95:35: 06:83:be:5c:a9:3e:fe:53:b9:0d:06:3e:1e:82:a5: 1d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:79:7A:67:AC:EC:41:8C:94:91:A5:64:22:83:3C:5F:D2:A8:92:3E X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232342e302f32322d3232203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.224.0/22 Signature Algorithm: sha256WithRSAEncryption 76:aa:6c:53:f1:34:fb:e9:d4:1c:76:d3:79:79:43:7a:3e:c3: 52:4d:90:02:1e:bc:33:2c:f1:d2:dc:0b:05:de:d8:00:19:56: be:77:64:e6:3d:67:14:b6:69:e5:8f:df:7d:3b:d9:53:f0:2c: 62:30:b4:b2:5b:8f:29:b5:f4:e5:ec:ae:0a:e3:1e:17:72:83: 9a:c1:aa:9c:fd:ca:92:6f:0f:3d:90:26:45:90:64:74:f9:ee: 1d:14:d5:ae:61:fd:7d:1b:06:9b:c3:40:6a:4f:9f:68:62:82: 94:4a:fd:4f:fe:f6:fe:70:cf:31:cd:4e:e5:d8:57:68:ad:a1: bd:52:95:90:ce:dd:54:ab:39:42:16:3c:5d:38:f7:20:65:9f: fb:f1:af:45:9d:01:18:f4:78:c1:38:5b:bf:f4:98:93:40:76: 19:bf:83:9f:9d:5e:61:5c:33:78:37:ed:e3:49:ed:30:b4:7e: 3a:43:57:13:69:3d:77:a0:48:67:45:ed:88:0c:9a:03:0a:ee: 49:94:cb:86:2f:f8:fb:5e:5b:7a:b9:a1:08:b2:fc:6c:17:15: 78:43:06:e8:35:d2:59:4a:06:1c:d6:c1:06:18:3a:2f:05:33: 4d:c0:3f:a1:41:f4:3e:ff:69:01:e1:41:ae:25:08:11:21:7c: db:51:a5:a0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUP6TgD/FaDNHXqQCGwEOiKl2LqnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAxMjAwMjEwMzRaFw0yNzAxMTkwMjE1MzRaMDMxMTAvBgNV BAMTKEY1Nzk3QTY3QUNFQzQxOEM5NDkxQTU2NDIyODMzQzVGRDJBODkyM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBVofhnV08SQSXadtFLqW05Dj Ac6CnIzSuxhi8Shp9Kv2mxGzFOFwx3DeSakYgePM2RUbyV1+B8kNo9x/MnBCpBpI KoCR4zfSHo/VrwQ+WcGguViPq6ldXS6ubPMUrE1w2avdJORHWgmxuMXU0TFTegUv DALbCg687Ft6vFTJ9MV6nIX7E5KbNy63U9zRgpwYHrYfaK3yXGETYlvwCo7yKKrd 9yfIsBInAypaGNbY79GWnktXZ9qRMf4jU83LK+/tSC6to8lckeW3YMpRJnxE2oCI WtmJ1u6WclMdD5LzWpTlOSlZs8Uhty1s+oGVNQaDvlypPv5TuQ0GPh6CpR35AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU9Xl6Z6zsQYyUkaVkIoM8X9Kokj4wHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzY2ODQ4MS8wLzMxMzAzMzJlMzIz MzM1MmUzMjMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmfr4DANBgkqhkiG9w0BAQsFAAOCAQEAdqpsU/E0++nUHHbTeXlDej7D Uk2QAh68Myzx0twLBd7YABlWvndk5j1nFLZp5Y/ffTvZU/AsYjC0sluPKbX05eyu CuMeF3KDmsGqnP3Kkm8PPZAmRZBkdPnuHRTVrmH9fRsGm8NAak+faGKClEr9T/72 /nDPMc1O5dhXaK2hvVKVkM7dVKs5QhY8XTj3IGWf+/GvRZ0BGPR4wThbv/SYk0B2 Gb+Dn51eYVwzeDft40ntMLR+OkNXE2k9d6BIZ0XtiAyaAwruSZTLhi/4+15bermh CLL8bBcVeEMG6DXSWUoGHNbBBhg6LwUzTcA/oUH0Pv9pAeFBriUIESF821GloA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:01 2026 by rpki-client