This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e32362e302e302f32322d3232203d3e203233373234.roa
File: 3130332e32362e302e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier: 3byVHWNmJp/2EX7LmRxD4s69SGAdvhL0UmPbmDzOCM8=
Subject key identifier: 98:A0:43:F7:35:2F:8D:92:40:0C:A3:27:3A:D8:5D:7D:F5:9F:CB:79
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 796D5E66B125C97ADE57DA782A073F5256644A77
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e32362e302e302f32322d3232203d3e203233373234.roa
Signing time: Tue 20 Jan 2026 02:15:35 +0000
ROA not before: Tue 20 Jan 2026 02:10:35 +0000
ROA not after: Tue 19 Jan 2027 02:15:35 +0000
asID: 23724
IP address blocks: 103.26.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:6d:5e:66:b1:25:c9:7a:de:57:da:78:2a:07:3f:52:56:64:4a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jan 20 02:10:35 2026 GMT
Not After : Jan 19 02:15:35 2027 GMT
Subject: CN=98A043F7352F8D92400CA3273AD85D7DF59FCB79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:e2:6b:40:a3:bf:31:d6:49:6f:ba:78:8d:
49:44:82:fd:a8:44:c0:7e:d8:20:c6:a7:bd:0a:25:
84:ae:89:4f:c8:1c:58:1e:85:20:c5:43:58:84:a9:
e9:8e:67:8e:01:60:bc:50:b8:23:c3:10:18:8d:c7:
6c:ad:25:fd:ac:e4:82:13:8a:db:82:ab:a8:29:5c:
12:5f:32:09:3c:25:a5:33:ed:33:b7:5d:ce:71:0c:
ab:b8:34:d9:3a:8a:b6:f5:88:95:42:d1:ab:fa:fe:
f0:45:5b:17:f3:73:8b:c6:ad:8f:17:11:2f:72:00:
6a:57:10:6f:1f:73:2d:0e:2f:01:53:9f:0b:bb:9f:
a4:0c:c6:b5:e9:55:e4:4d:76:aa:17:d1:03:55:fe:
12:97:b0:6e:d7:0c:79:7d:e1:ae:b7:d4:91:fa:64:
42:32:81:d2:ae:0d:4f:03:92:8f:ff:7c:4a:b8:7e:
12:65:20:d5:94:d3:96:e5:47:63:36:62:d6:42:69:
58:3c:79:bc:63:9f:5d:38:e2:59:9a:21:6e:d2:31:
a4:e7:82:8e:fd:40:3a:80:e4:14:3c:1f:fe:ff:98:
4d:20:19:0f:7f:03:70:5a:6a:c5:c6:5d:98:a6:ed:
64:ef:4e:7d:e7:11:c7:94:2d:78:e1:6b:2b:aa:7f:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A0:43:F7:35:2F:8D:92:40:0C:A3:27:3A:D8:5D:7D:F5:9F:CB:79
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e32362e302e302f32322d3232203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.26.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:82:38:44:45:bf:6a:7a:58:00:16:44:98:be:f1:bf:6d:ec:
39:e2:73:e7:13:bf:24:db:0f:17:28:14:56:91:8e:94:84:7b:
76:78:0b:82:c5:4e:25:2f:df:b2:17:e9:44:74:37:bf:37:71:
40:9c:f1:72:f0:0b:32:e6:39:20:d8:6d:81:17:a1:49:71:f9:
4f:f8:bf:2b:39:10:8f:84:45:e2:c5:3d:33:7e:8e:8a:db:69:
1b:47:42:5c:01:db:d7:a2:23:59:07:8b:e8:33:d4:71:41:cd:
a5:62:8a:65:69:9d:38:f8:ae:30:96:e3:e2:e0:a5:d4:0d:b2:
a9:31:7a:83:4f:3e:26:9f:ed:58:db:9f:f1:e8:cf:9f:bc:3a:
e6:6d:4b:27:5b:96:13:f7:0b:e0:d3:00:ec:66:3c:30:16:a4:
e8:29:c2:a2:d5:dd:a7:ee:83:9d:63:ab:48:b6:4a:d4:73:79:
e3:64:a5:b0:d8:88:f3:1a:bb:bf:14:39:5b:af:91:81:fb:c9:
1f:fc:c5:8d:29:a1:07:af:66:e1:dc:84:3d:6f:40:45:cb:d6:
35:3b:d1:60:87:11:f7:58:7e:0a:b4:fc:29:2b:2f:87:52:c4:
0f:2f:47:0a:ad:46:1b:42:d1:82:5d:8e:96:a7:fe:a5:14:4f:
10:51:f6:21
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUeW1eZrElyXreV9p4Kgc/UlZkSncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjAxMjAwMjEwMzVaFw0yNzAxMTkwMjE1MzVaMDMxMTAvBgNV
BAMTKDk4QTA0M0Y3MzUyRjhEOTI0MDBDQTMyNzNBRDg1RDdERjU5RkNCNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRa+JrQKO/MdZJb7p4jUlEgv2o
RMB+2CDGp70KJYSuiU/IHFgehSDFQ1iEqemOZ44BYLxQuCPDEBiNx2ytJf2s5IIT
ituCq6gpXBJfMgk8JaUz7TO3Xc5xDKu4NNk6irb1iJVC0av6/vBFWxfzc4vGrY8X
ES9yAGpXEG8fcy0OLwFTnwu7n6QMxrXpVeRNdqoX0QNV/hKXsG7XDHl94a631JH6
ZEIygdKuDU8Dko//fEq4fhJlINWU05blR2M2YtZCaVg8ebxjn1044lmaIW7SMaTn
go79QDqA5BQ8H/7/mE0gGQ9/A3BaasXGXZim7WTvTn3nEceULXjhayuqfx8rAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUmKBD9zUvjZJADKMnOthdffWfy3kwHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjY4NDgxLzAvMzEzMDMzMmUzMjM2
MmUzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzMzNzMyMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJnGgAwDQYJKoZIhvcNAQELBQADggEBAF+COERFv2p6WAAWRJi+8b9t7Dnic+cT
vyTbDxcoFFaRjpSEe3Z4C4LFTiUv37IX6UR0N783cUCc8XLwCzLmOSDYbYEXoUlx
+U/4vys5EI+EReLFPTN+jorbaRtHQlwB29eiI1kHi+gz1HFBzaViimVpnTj4rjCW
4+LgpdQNsqkxeoNPPiaf7Vjbn/Hoz5+8OuZtSydblhP3C+DTAOxmPDAWpOgpwqLV
3afug51jq0i2StRzeeNkpbDYiPMau78UOVuvkYH7yR/8xY0poQevZuHchD1vQEXL
1jU70WCHEfdYfgq0/CkrL4dSxA8vRwqtRhtC0YJdjpan/qUUTxBR9iE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:54:49 2026 by rpki-client