This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235322e302f32322d3232203d3e203233373234.roa File: 3130332e3234392e3235322e302f32322d3232203d3e203233373234.roa (raw, json) Hash identifier: 1WBs6BppIFH0tyxeChtNBzDAXXZi9kK1gmCwk3RWTFo= Subject key identifier: FC:8C:9D:78:F9:F3:D6:FC:7B:0D:2C:BD:ED:D2:1B:98:FF:6D:FE:2E Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 7031989165A70E9076F3EBD88C85A320F2D3CD91 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235322e302f32322d3232203d3e203233373234.roa Signing time: Tue 20 Jan 2026 02:15:35 +0000 ROA not before: Tue 20 Jan 2026 02:10:35 +0000 ROA not after: Tue 19 Jan 2027 02:15:35 +0000 asID: 23724 IP address blocks: 103.249.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:31:98:91:65:a7:0e:90:76:f3:eb:d8:8c:85:a3:20:f2:d3:cd:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:35 2026 GMT Not After : Jan 19 02:15:35 2027 GMT Subject: CN=FC8C9D78F9F3D6FC7B0D2CBDEDD21B98FF6DFE2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:c3:38:51:5f:e8:2d:37:17:90:0f:ec:18: 95:9b:62:aa:cf:e9:ec:f6:e3:2a:3c:56:ca:c5:a7: 42:2f:14:f0:7a:f1:38:5d:c8:c2:6e:fc:c4:f9:6d: 31:4c:8a:77:a8:4e:80:87:fd:cd:32:fe:1f:33:35: f4:6d:fc:e0:3f:4e:22:9e:92:7b:ac:69:7a:1a:ad: af:35:d3:5b:59:cd:36:29:2e:db:eb:db:ad:05:99: 54:58:bc:54:b9:67:51:8a:09:da:32:e8:af:63:c3: 03:8a:62:e9:20:22:8f:c0:e3:2e:cb:c1:9a:e2:1a: bf:28:00:ed:4b:eb:55:e3:e1:b3:56:a6:cd:9b:fd: 31:ac:8f:4f:54:54:0c:4a:36:1a:2e:8e:b3:26:fb: c7:72:e4:b2:e9:05:ca:e4:6b:ac:76:ac:81:7a:23: 6e:f1:8a:cd:e3:9a:36:4f:95:1a:db:94:4d:c1:ac: 57:9b:0b:d7:62:ab:a7:d0:42:c4:fb:c3:d6:67:5a: f9:34:85:2e:da:bb:c9:a5:82:97:ba:0b:99:aa:ef: d9:76:f0:6f:4e:0d:f6:f9:64:6b:d6:a5:e4:01:83: 12:3b:ee:e6:97:d1:b0:b8:b5:b2:13:ce:bd:b5:4e: 1e:f7:8c:21:9c:ce:a8:b6:c0:80:6a:ee:49:b6:a0: 37:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8C:9D:78:F9:F3:D6:FC:7B:0D:2C:BD:ED:D2:1B:98:FF:6D:FE:2E X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235322e302f32322d3232203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.249.252.0/22 Signature Algorithm: sha256WithRSAEncryption 52:5f:c9:50:7c:a0:ba:ba:14:74:0f:ad:9e:a1:1c:b7:a7:ce: 6d:26:5b:e7:0c:17:99:fc:ce:60:91:fa:94:ff:77:c6:68:27: 7e:cf:0c:fb:ea:33:a1:b5:39:44:2a:fa:f3:2c:78:e0:c5:e7: 96:18:0a:2d:55:ce:7b:a7:e9:76:04:66:ff:b7:fb:96:64:9b: 0d:06:36:63:de:18:13:82:f2:a4:82:7f:94:18:83:16:f0:e3: db:3c:d5:a9:2d:0f:fb:b3:9d:a6:76:02:bd:39:a3:a3:79:c3: 62:f8:09:e1:5a:58:b8:cf:fa:85:64:e3:8a:30:cc:ee:1e:11: b3:2a:c5:0f:20:04:2a:bd:06:34:50:fc:ad:0a:91:6c:be:af: 16:46:63:17:5c:1b:ad:a9:8c:12:ca:f6:9d:9e:44:cf:ff:7a: 9b:a0:06:0c:17:74:47:9e:b3:ad:6f:93:1b:4e:0b:f3:51:b8: 5d:75:3c:27:59:4a:b4:da:e4:c0:b0:75:b9:de:9e:70:db:be: 57:ab:0d:68:07:9c:77:a1:5f:d2:af:b6:f1:19:e2:3e:9a:07: 29:fd:45:23:d5:75:19:1c:c5:c1:6a:68:cb:c8:87:89:0d:d8: 07:a3:58:05:59:47:c4:f5:4f:56:59:eb:f5:10:3d:33:93:79: 06:00:3a:01 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcDGYkWWnDpB28+vYjIWjIPLTzZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAxMjAwMjEwMzVaFw0yNzAxMTkwMjE1MzVaMDMxMTAvBgNV BAMTKEZDOEM5RDc4RjlGM0Q2RkM3QjBEMkNCREVERDIxQjk4RkY2REZFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NcM4UV/oLTcXkA/sGJWbYqrP 6ez24yo8VsrFp0IvFPB68ThdyMJu/MT5bTFMineoToCH/c0y/h8zNfRt/OA/TiKe knusaXoara8101tZzTYpLtvr260FmVRYvFS5Z1GKCdoy6K9jwwOKYukgIo/A4y7L wZriGr8oAO1L61Xj4bNWps2b/TGsj09UVAxKNhoujrMm+8dy5LLpBcrka6x2rIF6 I27xis3jmjZPlRrblE3BrFebC9diq6fQQsT7w9ZnWvk0hS7au8mlgpe6C5mq79l2 8G9ODfb5ZGvWpeQBgxI77uaX0bC4tbITzr21Th73jCGczqi2wIBq7km2oDcPAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU/IydePnz1vx7DSy97dIbmP9t/i4wHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC8zMTMwMzMyZTMy MzQzOTJlMzIzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmf5/DANBgkqhkiG9w0BAQsFAAOCAQEAUl/JUHyguroUdA+tnqEc t6fObSZb5wwXmfzOYJH6lP93xmgnfs8M++ozobU5RCr68yx44MXnlhgKLVXOe6fp dgRm/7f7lmSbDQY2Y94YE4LypIJ/lBiDFvDj2zzVqS0P+7OdpnYCvTmjo3nDYvgJ 4VpYuM/6hWTjijDM7h4RsyrFDyAEKr0GNFD8rQqRbL6vFkZjF1wbramMEsr2nZ5E z/96m6AGDBd0R56zrW+TG04L81G4XXU8J1lKtNrkwLB1ud6ecNu+V6sNaAecd6Ff 0q+28RniPpoHKf1FI9V1GRzFwWpoy8iHiQ3YB6NYBVlHxPVPVlnr9RA9M5N5BgA6 AQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:37:27 2026 by rpki-client