This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235322e302f32322d3232203d3e203536323832.roa File: 3130332e3234392e3235322e302f32322d3232203d3e203536323832.roa (raw, json) Hash identifier: aCY8rSMAxv7seXtdLE3Sx44spVXVDzHEaKsU+pGe2yM= Subject key identifier: F7:49:01:10:74:2C:B7:57:55:91:0E:3B:2D:30:26:81:D7:EF:D3:ED Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 166E8BCCFBE2C26C2234B074D2F7FF981CB94174 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235322e302f32322d3232203d3e203536323832.roa Signing time: Tue 20 Jan 2026 02:15:36 +0000 ROA not before: Tue 20 Jan 2026 02:10:36 +0000 ROA not after: Tue 19 Jan 2027 02:15:36 +0000 asID: 56282 IP address blocks: 103.249.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6e:8b:cc:fb:e2:c2:6c:22:34:b0:74:d2:f7:ff:98:1c:b9:41:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:36 2026 GMT Not After : Jan 19 02:15:36 2027 GMT Subject: CN=F7490110742CB75755910E3B2D302681D7EFD3ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:97:9c:95:ae:86:e1:b4:a5:0b:63:7c:d2: a8:ab:62:c4:a1:94:f0:04:72:f8:76:87:2e:18:d8: 84:da:92:11:03:fc:a5:00:0d:f4:66:2d:d1:51:e5: 90:70:50:b7:e1:6c:b8:b7:b2:43:58:03:80:2d:8f: 6b:8a:9e:58:be:7a:07:ad:f9:57:f9:d8:0d:83:12: 2e:fb:40:e9:d2:f9:a0:e4:69:e5:51:a8:57:6e:65: d4:79:36:88:ef:89:1a:dc:d1:96:fc:e8:50:e5:42: db:fa:ff:66:ac:d8:1d:b4:33:ab:ba:af:6d:cf:c4: e2:6b:83:db:a4:dc:d6:1f:4a:0a:88:ba:2e:c1:f9: 44:59:d2:91:cf:65:2f:54:97:8d:95:28:e3:b2:fc: d1:0e:a4:45:8c:f0:0f:62:43:ef:33:4c:98:37:3f: e5:eb:70:98:0e:6a:48:f3:36:38:a2:6e:b1:73:c2: f9:30:07:c6:78:ce:d3:91:9b:7f:cb:fc:4d:e2:b1: c1:28:7a:dd:f3:a9:09:87:a9:29:56:68:c0:17:8d: 3e:e8:14:57:9b:a0:d3:8c:04:06:cb:fe:5e:a6:b9: b2:08:73:c7:d8:c6:1b:9e:b3:8a:8f:da:43:af:98: f6:25:56:f3:ac:6c:20:03:a5:c9:88:af:3a:a8:c5: 08:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:49:01:10:74:2C:B7:57:55:91:0E:3B:2D:30:26:81:D7:EF:D3:ED X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235322e302f32322d3232203d3e203536323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.249.252.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:9a:e0:b4:5b:a4:a7:15:1f:a5:18:97:d2:e7:0b:c1:33:33: c8:f4:2e:1e:6f:32:d0:8d:32:44:d4:25:34:df:35:7c:2a:df: 27:e1:7e:e6:1e:3c:47:05:77:8d:7e:38:0f:f6:d9:4c:bc:bd: 57:9c:5e:64:f6:0c:c6:98:64:dd:81:62:f9:c4:8a:a2:3a:e1: 23:38:fb:0c:3f:cf:a4:d8:5a:d8:34:b3:60:78:81:19:aa:3a: 86:7e:db:b3:0e:12:4a:50:07:2f:4b:a5:66:f4:6b:cc:f0:9b: d0:73:5b:d0:4d:84:6b:e1:96:62:7c:1f:25:0d:02:9b:8d:7b: f3:a8:bb:a3:96:09:03:e1:57:e9:0a:b6:22:b1:18:2f:02:5c: b5:30:1b:d7:0f:44:8b:da:f7:57:97:28:ae:91:19:34:e6:ec: 45:9a:c5:a0:9e:e6:b5:d7:50:43:07:95:e1:c7:10:ed:cc:ff: 35:79:5d:62:6a:ed:12:f4:b8:ba:3c:5a:97:99:a2:da:5a:7d: 4e:10:de:df:b2:c1:4f:79:38:0f:26:f2:26:59:6d:f3:13:27: 11:b6:a4:9b:d8:3d:b0:68:e1:e4:24:49:c2:68:67:08:a4:9f: a7:23:79:d4:eb:9c:a0:23:ef:6a:cb:c0:3d:13:f5:cc:e4:25: 2c:fa:b9:e6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUFm6LzPviwmwiNLB00vf/mBy5QXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAxMjAwMjEwMzZaFw0yNzAxMTkwMjE1MzZaMDMxMTAvBgNV BAMTKEY3NDkwMTEwNzQyQ0I3NTc1NTkxMEUzQjJEMzAyNjgxRDdFRkQzRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Lpecla6G4bSlC2N80qirYsSh lPAEcvh2hy4Y2ITakhED/KUADfRmLdFR5ZBwULfhbLi3skNYA4Atj2uKnli+eget +Vf52A2DEi77QOnS+aDkaeVRqFduZdR5NojviRrc0Zb86FDlQtv6/2as2B20M6u6 r23PxOJrg9uk3NYfSgqIui7B+URZ0pHPZS9Ul42VKOOy/NEOpEWM8A9iQ+8zTJg3 P+XrcJgOakjzNjiibrFzwvkwB8Z4ztORm3/L/E3iscEoet3zqQmHqSlWaMAXjT7o FFeboNOMBAbL/l6mubIIc8fYxhues4qP2kOvmPYlVvOsbCADpcmIrzqoxQh5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU90kBEHQst1dVkQ47LTAmgdfv0+0wHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC8zMTMwMzMyZTMy MzQzOTJlMzIzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMyMzgzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmf5/DANBgkqhkiG9w0BAQsFAAOCAQEAO5rgtFukpxUfpRiX0ucL wTMzyPQuHm8y0I0yRNQlNN81fCrfJ+F+5h48RwV3jX44D/bZTLy9V5xeZPYMxphk 3YFi+cSKojrhIzj7DD/PpNha2DSzYHiBGao6hn7bsw4SSlAHL0ulZvRrzPCb0HNb 0E2Ea+GWYnwfJQ0Cm41786i7o5YJA+FX6Qq2IrEYLwJctTAb1w9Ei9r3V5corpEZ NObsRZrFoJ7mtddQQweV4ccQ7cz/NXldYmrtEvS4ujxal5mi2lp9ThDe37LBT3k4 DybyJllt8xMnEbakm9g9sGjh5CRJwmhnCKSfpyN51OucoCPvasvAPRP1zOQlLPq5 5g== -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:29 2026 by rpki-client