This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232382e302f32322d3232203d3e203233373234.roa File: 3130332e3233352e3232382e302f32322d3232203d3e203233373234.roa (raw, json) Hash identifier: cSekYoXWo4F97nCKQ9LiLYgABNxkEbnTEZkEIaXWjG4= Subject key identifier: D4:AF:1F:87:82:C7:E1:34:86:8A:78:93:B8:84:20:15:BF:A9:F7:CD Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 2D3AAD8AD7FAEB246F4B13230FE1F0FFAE82CC88 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232382e302f32322d3232203d3e203233373234.roa Signing time: Tue 20 Jan 2026 02:15:35 +0000 ROA not before: Tue 20 Jan 2026 02:10:35 +0000 ROA not after: Tue 19 Jan 2027 02:15:35 +0000 asID: 23724 IP address blocks: 103.235.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3a:ad:8a:d7:fa:eb:24:6f:4b:13:23:0f:e1:f0:ff:ae:82:cc:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:35 2026 GMT Not After : Jan 19 02:15:35 2027 GMT Subject: CN=D4AF1F8782C7E134868A7893B8842015BFA9F7CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:c1:a3:28:db:ab:f6:41:bd:d6:d4:c3:b3: 93:d1:4b:47:69:fd:3e:31:99:64:89:36:47:f4:32: a5:de:5d:cc:1c:2a:d9:b2:ab:c7:07:fc:32:1d:58: 8c:c2:c0:a8:72:9b:83:47:6e:82:1f:3f:cd:20:20: 9b:3c:36:3e:2b:16:b2:1b:da:ed:92:d7:65:95:e5: d9:c5:60:25:d0:81:f3:4b:22:f0:63:bd:7a:0f:15: 4d:73:ed:3b:32:4c:cd:0c:77:ec:7a:6f:db:9a:2d: a3:1c:f9:26:f8:05:3d:85:fa:01:3c:f5:ec:c7:8f: 4c:bd:a6:39:10:e9:f6:1b:5b:19:18:84:61:ee:62: 4c:64:b9:e2:e5:eb:e9:41:db:48:05:a5:70:c6:d0: f0:04:06:12:22:29:46:0a:bf:a1:ae:e4:2d:d7:3e: ee:32:61:72:a8:1c:fe:02:6a:11:da:96:f0:08:66: 78:05:7e:5c:bd:f0:c6:54:8a:37:30:cc:d6:ec:ff: 51:04:b3:c0:5c:c7:dd:2c:9c:db:35:fe:99:72:26: be:d2:81:19:36:ac:03:17:02:f6:b9:ab:4d:26:05: db:f6:45:71:c3:ca:48:c7:e2:9a:ab:62:66:ee:cd: a6:f3:b4:05:55:06:e4:fe:c9:fb:d8:33:9c:be:6c: d6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AF:1F:87:82:C7:E1:34:86:8A:78:93:B8:84:20:15:BF:A9:F7:CD X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232382e302f32322d3232203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.228.0/22 Signature Algorithm: sha256WithRSAEncryption a6:24:e2:b2:3f:d6:13:c6:b8:c3:4f:5e:96:b0:4d:01:54:c3: 2e:6d:f0:9b:76:b5:ee:4b:e6:61:bf:8c:de:df:86:d3:f2:09: 9f:69:4b:e6:3c:75:0e:53:8c:34:4c:ad:78:2e:04:24:4f:02: 11:3d:38:c6:80:59:c5:64:8b:a9:47:a2:c0:8f:0f:57:b6:66: 22:86:7e:e4:27:ac:f0:4d:c2:42:f3:59:9b:83:3e:e2:17:ac: da:e3:40:bb:55:8f:ea:f5:a7:d6:74:d7:7d:04:01:eb:40:88: 85:af:71:29:8a:b0:85:0f:01:83:fe:4d:3b:f7:bc:96:ee:c3: 90:81:0a:1f:5a:5d:1f:c9:e2:71:a9:c9:2b:2c:74:56:54:75: 68:b2:ab:e7:7f:02:45:b3:ce:26:98:26:d1:7a:73:14:cb:a5: 37:79:71:b8:c0:9d:f6:42:22:24:45:9d:78:2f:7e:5b:64:5f: c0:07:8d:ea:4f:11:9e:9c:a4:f1:fd:02:3a:79:37:bb:1b:45: 5f:e0:d2:fd:09:e7:35:1d:ce:fe:c3:94:bf:6d:52:bc:0c:64: 56:e7:43:cf:76:e5:4d:57:ff:a7:a3:69:d3:ee:0a:57:4b:a8: 81:52:58:98:d5:d0:54:06:74:e3:9b:33:3d:bc:fb:62:e3:b6: 41:e4:f5:22 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIULTqtitf66yRvSxMjD+Hw/66CzIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAxMjAwMjEwMzVaFw0yNzAxMTkwMjE1MzVaMDMxMTAvBgNV BAMTKEQ0QUYxRjg3ODJDN0UxMzQ4NjhBNzg5M0I4ODQyMDE1QkZBOUY3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjScGjKNur9kG91tTDs5PRS0dp /T4xmWSJNkf0MqXeXcwcKtmyq8cH/DIdWIzCwKhym4NHboIfP80gIJs8Nj4rFrIb 2u2S12WV5dnFYCXQgfNLIvBjvXoPFU1z7TsyTM0Md+x6b9uaLaMc+Sb4BT2F+gE8 9ezHj0y9pjkQ6fYbWxkYhGHuYkxkueLl6+lB20gFpXDG0PAEBhIiKUYKv6Gu5C3X Pu4yYXKoHP4CahHalvAIZngFfly98MZUijcwzNbs/1EEs8Bcx90snNs1/plyJr7S gRk2rAMXAva5q00mBdv2RXHDykjH4pqrYmbuzabztAVVBuT+yfvYM5y+bNZTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU1K8fh4LH4TSGiniTuIQgFb+p980wHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC8zMTMwMzMyZTMy MzMzNTJlMzIzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfr5DANBgkqhkiG9w0BAQsFAAOCAQEApiTisj/WE8a4w09elrBN AVTDLm3wm3a17kvmYb+M3t+G0/IJn2lL5jx1DlOMNEyteC4EJE8CET04xoBZxWSL qUeiwI8PV7ZmIoZ+5Ces8E3CQvNZm4M+4hes2uNAu1WP6vWn1nTXfQQB60CIha9x KYqwhQ8Bg/5NO/e8lu7DkIEKH1pdH8nicanJKyx0VlR1aLKr538CRbPOJpgm0Xpz FMulN3lxuMCd9kIiJEWdeC9+W2RfwAeN6k8Rnpyk8f0COnk3uxtFX+DS/QnnNR3O /sOUv21SvAxkVudDz3blTVf/p6Np0+4KV0uogVJYmNXQVAZ045szPbz7YuO2QeT1 Ig== -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:52 2026 by rpki-client