This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa
File: 3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier: hOFFxJZSCtTfa2utTwRhvncMcw1tnlhy0thackZF5dk=
Subject key identifier: B1:90:4B:4F:87:40:78:D1:CB:AE:4E:88:39:9A:C3:52:96:A0:66:B9
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 4B2B4FDF6AFF046A158DC9BA7A06F3169397D3E1
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa
Signing time: Tue 20 Jan 2026 02:15:34 +0000
ROA not before: Tue 20 Jan 2026 02:10:34 +0000
ROA not after: Tue 19 Jan 2027 02:15:34 +0000
asID: 23724
IP address blocks: 103.235.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 09:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:2b:4f:df:6a:ff:04:6a:15:8d:c9:ba:7a:06:f3:16:93:97:d3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jan 20 02:10:34 2026 GMT
Not After : Jan 19 02:15:34 2027 GMT
Subject: CN=B1904B4F874078D1CBAE4E88399AC35296A066B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d8:10:46:e0:55:46:e3:50:3e:db:37:24:0c:
6b:36:46:60:fe:95:c0:c4:54:22:fc:04:55:84:a7:
81:8b:a3:b6:c1:ef:0a:38:04:45:41:bf:d4:91:94:
2d:8f:a8:a6:60:21:85:6a:e9:a4:de:b9:02:54:b4:
63:28:61:22:79:dc:41:11:9c:08:0c:10:d3:14:ef:
ab:41:19:02:86:94:c7:53:07:b3:5e:31:fe:3b:7e:
db:a5:21:5a:f5:2b:18:d8:92:f6:bc:ec:c0:0f:0f:
42:ca:f0:5c:b7:7b:43:28:03:88:d2:7c:ab:5e:44:
74:33:b0:10:73:57:dd:ae:82:d8:41:57:d3:89:44:
37:a3:0a:86:27:6f:4d:83:42:13:63:1c:d7:12:ac:
56:c7:1d:15:45:8d:a9:a3:ba:79:14:e8:1a:39:20:
b7:85:1f:98:55:84:c3:2f:f2:6e:17:e3:04:25:5c:
5d:92:c6:57:12:ac:90:94:89:8d:ac:e2:00:6a:91:
ce:de:27:4f:32:21:d9:23:22:f3:60:f6:7e:6a:f0:
73:f8:e8:f8:17:2e:2d:4a:e4:37:78:a0:0c:e4:ca:
07:bc:2f:d3:7b:ad:b4:1b:c5:0d:ba:39:d8:0d:86:
a2:25:2a:0b:ae:a8:2e:b8:d9:b4:d7:11:42:45:66:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:90:4B:4F:87:40:78:D1:CB:AE:4E:88:39:9A:C3:52:96:A0:66:B9
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.236.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:3e:e4:08:fd:a5:ba:86:66:13:1e:73:cc:83:3d:72:88:a7:
b1:f3:2b:a9:28:87:11:75:87:eb:66:88:26:b0:c7:91:39:49:
7c:96:8e:b9:b3:ad:59:df:9c:4d:7f:f9:e6:2e:dd:63:eb:e8:
72:f7:63:7a:63:e2:70:76:59:32:96:22:7e:7f:cc:b9:ce:99:
91:fe:a2:d8:69:f0:e7:80:60:39:9c:59:95:2b:30:7d:13:c6:
6d:08:50:50:78:a7:cb:7b:25:9b:64:67:f1:10:7f:5d:e4:2e:
19:08:12:59:3c:4d:cf:fc:fd:e8:d3:4d:e5:01:20:77:85:d3:
60:f3:9c:46:9a:c3:2b:bd:f0:cd:2f:25:ee:50:c9:27:62:5c:
66:88:2d:9d:aa:76:a9:b3:7e:f7:d8:e8:ad:36:00:aa:d2:56:
a7:c7:dd:bc:b3:88:54:c1:fa:8e:d3:57:89:04:e3:64:21:e3:
b5:86:cb:d5:e6:4d:05:6b:b5:0b:5b:6a:54:fe:1a:55:52:26:
c3:50:cb:01:40:93:b3:2e:17:c6:bb:63:e4:f9:95:d8:4b:16:
bd:ae:82:c0:82:4b:c8:07:89:36:b3:0f:3a:f6:77:4a:15:3c:
c4:a0:84:f0:ed:74:ce:8e:b8:53:ea:f8:92:a0:e7:30:64:dd:
ab:58:c5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:35:25 2026 by rpki-client