This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235322e302f32322d3232203d3e2034383038.roa File: 3130332e3234392e3235322e302f32322d3232203d3e2034383038.roa (raw, json) Hash identifier: wYkRiToQcgtywHxF4nlDNt1pJe6kJa/wahpn40b7OLE= Subject key identifier: 4F:9C:38:9E:B8:2F:EE:8A:78:0A:C4:72:E5:CF:0B:2C:1A:C6:D8:0E Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 0853687E66E2CBA02591DC441BF0D26B9254B38B Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235322e302f32322d3232203d3e2034383038.roa Signing time: Tue 20 Jan 2026 02:15:35 +0000 ROA not before: Tue 20 Jan 2026 02:10:35 +0000 ROA not after: Tue 19 Jan 2027 02:15:35 +0000 asID: 4808 IP address blocks: 103.249.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:53:68:7e:66:e2:cb:a0:25:91:dc:44:1b:f0:d2:6b:92:54:b3:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:35 2026 GMT Not After : Jan 19 02:15:35 2027 GMT Subject: CN=4F9C389EB82FEE8A780AC472E5CF0B2C1AC6D80E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8e:c8:e5:7e:63:05:af:8b:5e:32:6e:6c:18: 63:c8:14:b9:4d:26:28:67:05:c1:fd:f1:b7:56:b6: 86:d3:7e:de:0f:5d:26:b4:b4:2e:02:e6:f4:25:d5: ff:25:db:30:92:0a:b8:28:b8:85:46:6d:e7:8d:77: 32:67:10:9f:22:ea:d2:f9:c6:f5:38:87:5d:bd:02: 8c:80:89:c8:1a:ab:4b:3d:1c:bf:43:6c:c6:b1:92: d8:f4:7d:40:5f:c0:54:34:0c:64:0b:a4:c9:94:5e: 4e:10:bb:28:6d:5b:f1:56:e5:68:9f:bc:78:7d:30: b8:ec:1e:96:a5:d2:0d:d1:e3:e7:c9:1d:36:64:36: c6:74:78:8e:8c:3f:5c:c2:b4:fd:cc:40:47:e8:7a: 7f:40:85:f9:fa:ca:11:ba:da:f4:54:49:f7:e8:56: 58:0c:2c:40:75:d3:0b:3f:95:87:3b:ee:f3:f3:e4: ff:27:7d:fb:89:33:dc:31:f0:2c:68:6a:89:96:e1: 74:df:3b:ad:33:c8:b2:62:54:de:be:01:1a:94:00: a3:37:ad:c9:7a:af:40:af:e2:05:63:b6:12:1c:b7: 66:be:57:c9:35:e0:6b:35:c6:12:2e:c3:39:3e:ae: 50:dc:77:f0:91:f2:39:58:f7:8d:80:53:fc:46:aa: 57:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9C:38:9E:B8:2F:EE:8A:78:0A:C4:72:E5:CF:0B:2C:1A:C6:D8:0E X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235322e302f32322d3232203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.249.252.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:d9:b1:8a:c7:db:33:81:79:6a:e7:60:bb:88:ee:9a:6c:24: 0f:db:1e:6e:ca:8a:85:58:06:53:c6:af:ef:67:78:64:bd:f5: a2:22:e9:19:e0:30:e6:95:03:e6:fe:b1:1d:b9:11:31:12:17: bd:14:d9:33:1e:c4:75:0d:20:d0:32:8f:73:c3:cc:8e:23:7b: f8:5f:78:4d:01:02:5c:53:fc:e5:a6:75:b0:d4:f3:e9:91:66: a9:28:df:2c:0d:91:78:ea:40:d2:b5:a5:54:f4:88:2a:ac:7b: 5b:a6:b6:41:e3:d1:b0:92:56:6e:9b:49:39:02:7d:72:87:61: 47:7c:98:61:1c:93:4b:a2:71:cb:62:09:e8:57:f6:48:4a:e4: 3d:72:54:9f:54:da:95:9b:c0:df:a9:b8:86:51:1a:20:44:70: 3b:cc:be:27:13:4a:29:91:9d:38:36:6e:4d:84:4f:be:28:2a: 88:22:1a:6d:c6:16:80:2c:3e:75:73:07:27:0c:95:f7:85:d3: 5e:1c:e9:f9:44:da:f9:e9:bc:14:c9:df:eb:dd:1e:be:9c:58: 93:83:43:53:fd:31:ce:04:1b:e7:41:57:53:69:29:cd:da:cd: 27:66:69:b6:51:c1:19:62:2b:b9:29:96:c1:3c:49:ba:cd:9a: 26:fd:1e:c9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUCFNofmbiy6AlkdxEG/DSa5JUs4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAxMjAwMjEwMzVaFw0yNzAxMTkwMjE1MzVaMDMxMTAvBgNV BAMTKDRGOUMzODlFQjgyRkVFOEE3ODBBQzQ3MkU1Q0YwQjJDMUFDNkQ4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jsjlfmMFr4teMm5sGGPIFLlN JihnBcH98bdWtobTft4PXSa0tC4C5vQl1f8l2zCSCrgouIVGbeeNdzJnEJ8i6tL5 xvU4h129AoyAicgaq0s9HL9DbMaxktj0fUBfwFQ0DGQLpMmUXk4QuyhtW/FW5Wif vHh9MLjsHpal0g3R4+fJHTZkNsZ0eI6MP1zCtP3MQEfoen9Ahfn6yhG62vRUSffo VlgMLEB10ws/lYc77vPz5P8nffuJM9wx8CxoaomW4XTfO60zyLJiVN6+ARqUAKM3 rcl6r0Cv4gVjthIct2a+V8k14Gs1xhIuwzk+rlDcd/CR8jlY942AU/xGqlcJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUT5w4nrgv7op4CsRy5c8LLBrG2A4wHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzY2ODQ4MS8wLzMxMzAzMzJlMzIz NDM5MmUzMjM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmf5/DANBgkqhkiG9w0BAQsFAAOCAQEAmtmxisfbM4F5audgu4jummwk D9sebsqKhVgGU8av72d4ZL31oiLpGeAw5pUD5v6xHbkRMRIXvRTZMx7EdQ0g0DKP c8PMjiN7+F94TQECXFP85aZ1sNTz6ZFmqSjfLA2ReOpA0rWlVPSIKqx7W6a2QePR sJJWbptJOQJ9codhR3yYYRyTS6Jxy2IJ6Ff2SErkPXJUn1TalZvA36m4hlEaIERw O8y+JxNKKZGdODZuTYRPvigqiCIabcYWgCw+dXMHJwyV94XTXhzp+UTa+em8FMnf 690evpxYk4NDU/0xzgQb50FXU2kpzdrNJ2ZptlHBGWIruSmWwTxJus2aJv0eyQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:34 2026 by rpki-client