This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233362e302f32322d3232203d3e2034383038.roa File: 3130332e3233352e3233362e302f32322d3232203d3e2034383038.roa (raw, json) Hash identifier: UrLZO0SNnYdGOHmktaYva1LeY/50x97Gb+svkVkI7qE= Subject key identifier: BD:93:24:CA:1D:01:1C:BB:C4:07:95:4B:5C:5D:85:29:7F:1F:8F:23 Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 5570E77B67D2336BC150F7E48D136F30419B0393 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233362e302f32322d3232203d3e2034383038.roa Signing time: Tue 20 Jan 2026 02:15:36 +0000 ROA not before: Tue 20 Jan 2026 02:10:36 +0000 ROA not after: Tue 19 Jan 2027 02:15:36 +0000 asID: 4808 IP address blocks: 103.235.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:70:e7:7b:67:d2:33:6b:c1:50:f7:e4:8d:13:6f:30:41:9b:03:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:36 2026 GMT Not After : Jan 19 02:15:36 2027 GMT Subject: CN=BD9324CA1D011CBBC407954B5C5D85297F1F8F23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:be:ed:94:67:91:4d:06:5e:af:e2:3a:d2:95: 41:29:d4:89:79:79:c4:a8:dd:6e:81:97:b6:e6:87: 27:ac:df:97:ca:da:0a:f4:d8:05:1d:1b:4b:48:22: 8a:db:f3:dd:83:5b:37:c2:03:cf:d8:8e:1f:98:82: b8:19:c9:1e:dc:10:a2:6d:24:9b:db:bb:0f:66:56: c6:e2:0b:9c:76:03:14:83:48:b1:66:32:77:65:d9: c9:25:60:64:4f:4f:77:fa:23:a7:22:87:2e:7e:ba: 7c:6d:ba:7f:66:24:92:f8:be:37:e8:28:78:6b:0d: 80:5a:39:a9:0b:17:db:fd:f2:08:c4:4e:d1:22:8d: b2:4b:f0:bd:27:a4:90:b2:3a:e6:37:82:f1:c3:10: ad:48:11:6f:df:6c:dc:29:4e:c9:3e:7a:8f:3f:b7: 61:6f:49:96:49:98:c6:53:4d:dd:f3:1a:11:f6:ce: a6:bd:f2:1f:60:17:20:33:f4:f4:fe:4a:ac:1b:75: b2:52:2b:29:99:5e:0f:a1:17:39:f1:0b:cc:95:35: 54:c1:04:df:69:64:88:30:b0:7a:54:55:bf:56:22: d9:fc:8e:a9:17:15:24:ac:b6:80:24:db:5e:1d:5a: ad:cf:d4:47:2b:a5:12:96:12:5e:db:ec:0c:1b:6a: 3d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:93:24:CA:1D:01:1C:BB:C4:07:95:4B:5C:5D:85:29:7F:1F:8F:23 X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233362e302f32322d3232203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.236.0/22 Signature Algorithm: sha256WithRSAEncryption 93:af:01:a3:88:06:e1:19:91:dc:a6:74:0c:57:52:42:62:58: 0b:1f:a2:5f:6a:81:59:3f:bc:a9:e2:9c:38:1d:4c:84:bc:1b: f8:c4:7f:1b:27:ed:18:bb:68:2f:c4:20:6b:f6:2d:8c:fe:c4: 4a:56:ce:6b:00:49:c4:93:7c:b4:92:2d:0a:92:59:8e:8e:6b: ed:06:31:80:37:58:e9:cc:aa:94:16:13:37:ae:a8:79:e1:e0: e8:2c:31:35:bd:23:02:b6:86:3a:62:ed:62:4d:b8:79:69:62: a2:ba:22:a4:d0:13:d1:91:d1:0e:2e:51:f1:8e:2b:ba:1f:80: f9:80:de:c4:d7:b6:a3:c1:ae:00:6a:30:9b:8b:c7:4b:3f:40: 95:8a:a9:16:ad:35:c7:64:d0:4c:75:18:d5:b8:d9:80:a2:2c: 21:ff:2d:01:4a:ea:e1:23:a3:71:35:09:dc:6a:47:b5:c2:6e: 51:15:05:84:60:91:97:04:ea:ae:96:9e:78:51:ec:4b:ed:c8: cb:d9:c0:22:71:47:3c:40:40:39:c2:36:2d:08:72:03:c5:8f: 5a:61:fb:36:e8:49:d6:96:fe:aa:75:67:66:a3:f9:53:f8:58: 6e:96:32:f7:58:b4:c5:98:58:f9:28:54:5e:c9:b3:c8:9a:8b: c6:7c:9c:9c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVXDne2fSM2vBUPfkjRNvMEGbA5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAxMjAwMjEwMzZaFw0yNzAxMTkwMjE1MzZaMDMxMTAvBgNV BAMTKEJEOTMyNENBMUQwMTFDQkJDNDA3OTU0QjVDNUQ4NTI5N0YxRjhGMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRvu2UZ5FNBl6v4jrSlUEp1Il5 ecSo3W6Bl7bmhyes35fK2gr02AUdG0tIIorb892DWzfCA8/Yjh+YgrgZyR7cEKJt JJvbuw9mVsbiC5x2AxSDSLFmMndl2cklYGRPT3f6I6cihy5+unxtun9mJJL4vjfo KHhrDYBaOakLF9v98gjETtEijbJL8L0npJCyOuY3gvHDEK1IEW/fbNwpTsk+eo8/ t2FvSZZJmMZTTd3zGhH2zqa98h9gFyAz9PT+SqwbdbJSKymZXg+hFznxC8yVNVTB BN9pZIgwsHpUVb9WItn8jqkXFSSstoAk214dWq3P1EcrpRKWEl7b7Awbaj0rAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUvZMkyh0BHLvEB5VLXF2FKX8fjyMwHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzY2ODQ4MS8wLzMxMzAzMzJlMzIz MzM1MmUzMjMzMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmfr7DANBgkqhkiG9w0BAQsFAAOCAQEAk68Bo4gG4RmR3KZ0DFdSQmJY Cx+iX2qBWT+8qeKcOB1MhLwb+MR/GyftGLtoL8Qga/YtjP7ESlbOawBJxJN8tJIt CpJZjo5r7QYxgDdY6cyqlBYTN66oeeHg6CwxNb0jAraGOmLtYk24eWlioroipNAT 0ZHRDi5R8Y4ruh+A+YDexNe2o8GuAGowm4vHSz9AlYqpFq01x2TQTHUY1bjZgKIs If8tAUrq4SOjcTUJ3GpHtcJuURUFhGCRlwTqrpaeeFHsS+3Iy9nAInFHPEBAOcI2 LQhyA8WPWmH7NuhJ1pb+qnVnZqP5U/hYbpYy91i0xZhY+ShUXsmzyJqLxnycnA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:50 2026 by rpki-client