This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa
File: 3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier: 6HkpCfuvi7d2b5JTtXvx5y5uDPvD3zn+PFyvB7H8AaI=
Subject key identifier: 57:15:4A:20:82:B8:50:00:83:69:AF:FE:3E:25:08:DD:E3:40:CC:B3
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 1790C6A6F37898F9C8113785597B81604E5BDAC4
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa
Signing time: Tue 20 Jan 2026 02:15:35 +0000
ROA not before: Tue 20 Jan 2026 02:10:35 +0000
ROA not after: Tue 19 Jan 2027 02:15:35 +0000
asID: 23724
IP address blocks: 103.235.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 09:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:90:c6:a6:f3:78:98:f9:c8:11:37:85:59:7b:81:60:4e:5b:da:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jan 20 02:10:35 2026 GMT
Not After : Jan 19 02:15:35 2027 GMT
Subject: CN=57154A2082B850008369AFFE3E2508DDE340CCB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:68:da:56:f0:4b:ab:d0:39:e3:73:27:65:
f7:c2:09:b9:d3:a2:8d:c9:a1:ee:40:d9:e3:ac:b6:
0a:59:48:27:90:92:3a:38:85:be:39:a9:c0:1b:8c:
91:29:48:87:7e:8f:50:4c:4e:b5:c7:f5:fe:89:38:
98:a6:b1:d6:29:95:d9:83:48:c9:72:49:54:49:b1:
d0:d6:cc:ad:5c:97:b1:03:8a:98:bc:07:5a:12:86:
57:ea:1c:40:b4:4d:75:09:72:31:eb:1d:17:49:ab:
f6:06:b8:c3:b9:da:4a:87:71:0c:18:b7:fe:9c:33:
79:93:c9:94:91:9b:d2:f2:26:24:e1:45:23:68:ba:
d3:c8:6e:d7:ba:71:05:a9:8e:73:54:dc:3a:bc:cd:
1a:e1:e2:25:6e:79:ba:3b:52:6e:fc:76:03:7b:b6:
ea:1a:c0:b0:04:a3:c5:ed:9e:82:5b:e7:5c:1e:da:
b7:66:69:6b:92:94:19:7d:8b:6f:ab:29:ff:42:eb:
b5:01:ed:7b:30:12:d2:c6:43:d5:99:0b:d5:2b:7b:
a2:53:0d:b9:a9:8d:f4:7b:93:da:eb:d8:6b:5b:4d:
c4:d7:b7:1c:7f:6d:04:ce:9a:c4:b5:b1:8b:bc:1b:
b2:6c:d3:33:ea:10:08:6e:d1:8b:71:75:8b:d0:31:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:15:4A:20:82:B8:50:00:83:69:AF:FE:3E:25:08:DD:E3:40:CC:B3
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:bb:1a:19:e5:57:96:e3:b0:1f:55:0c:43:e4:20:9e:0b:01:
61:20:93:fc:fc:86:aa:dc:3c:6b:f5:d1:22:50:70:8f:3d:96:
97:ac:d2:79:d5:84:39:50:66:a3:98:4b:fd:b2:f2:61:85:a2:
7b:01:bb:7b:77:cc:c6:f6:bf:ee:11:54:c5:1a:86:e8:09:1e:
82:82:de:b1:ac:2f:25:e1:87:2e:c8:80:b5:63:26:d9:70:d8:
e8:40:72:03:4e:45:f5:11:99:8c:6a:d9:17:cf:e6:41:24:77:
10:ed:1f:5f:2e:02:2a:71:1f:60:69:b3:12:24:58:4d:cb:fe:
fb:d7:a4:28:c6:78:8a:50:52:9f:13:9e:1e:94:9c:69:e2:8f:
a1:c0:85:88:5e:1e:fe:10:d0:66:49:a0:dc:3c:09:dd:d5:83:
de:fe:a1:6c:40:4c:27:9d:21:af:c0:eb:16:6e:6c:03:6f:a4:
ff:14:e6:47:b7:a5:ce:b7:7c:43:1d:c6:59:98:cc:b6:21:b1:
47:ed:77:ec:e8:2e:82:00:7e:6a:7a:c3:5f:8e:20:8a:73:58:
76:72:bb:60:77:23:3b:bc:53:f0:63:14:ae:df:46:b8:e1:25:
00:35:e8:3c:67:a4:aa:c1:24:5f:03:3a:15:b6:9f:61:84:92:
f1:5b:7c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:35:17 2026 by rpki-client