This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38382e302f32312d3231203d3e2034383038.roa File: 3231312e3135352e38382e302f32312d3231203d3e2034383038.roa (raw, json) Hash identifier: p4fyfGNxAe76CjzdibjAUATy2TsPOlwMbPqb3NiuGKA= Subject key identifier: 5F:21:2D:76:07:2A:92:34:80:0F:C1:A8:69:6E:AE:37:50:8D:DC:D5 Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 307A919B709EA2D1FC90E24F2C159F3BA0AA6247 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38382e302f32312d3231203d3e2034383038.roa Signing time: Tue 20 Jan 2026 02:15:36 +0000 ROA not before: Tue 20 Jan 2026 02:10:36 +0000 ROA not after: Tue 19 Jan 2027 02:15:36 +0000 asID: 4808 IP address blocks: 211.155.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 15:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7a:91:9b:70:9e:a2:d1:fc:90:e2:4f:2c:15:9f:3b:a0:aa:62:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Jan 20 02:10:36 2026 GMT Not After : Jan 19 02:15:36 2027 GMT Subject: CN=5F212D76072A9234800FC1A8696EAE37508DDCD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:62:3d:58:95:08:f4:21:f2:1f:ca:74:8f:33: f9:08:a2:0e:6c:7d:bf:35:bf:4f:4c:cf:03:aa:db: 0a:56:98:5f:96:7a:67:58:f1:6a:d1:c5:eb:2e:ba: 47:23:ff:87:46:e5:4c:5f:4d:54:48:6b:ac:15:18: 0d:58:c8:fa:ec:ab:f6:1c:97:26:2c:7b:fa:8f:27: 3b:87:30:13:22:6c:e6:06:a6:f9:e0:5b:58:b0:45: 1a:cc:ee:bf:e3:a3:94:c8:e0:da:61:13:a3:4e:0a: fb:21:db:a5:e7:5f:50:70:2b:d7:17:51:7f:85:64: a1:bd:0e:5f:1a:66:95:99:f2:a4:3b:91:5a:fa:f2: a5:b8:43:b2:65:54:8c:f3:37:69:2a:35:5e:e0:20: 32:fc:64:76:9f:82:e3:5b:c8:dc:b7:e9:42:97:b8: 75:e9:ac:77:95:e8:2e:70:cb:c9:aa:c9:33:1f:3d: 36:5f:50:2c:56:ca:08:fd:39:47:47:28:e6:f7:82: 42:c7:4e:21:cb:8a:b0:b1:e8:f2:6a:73:5c:34:94: 89:63:e4:27:f9:d1:e0:00:44:7e:ee:45:c9:30:2c: e0:0b:e8:0f:c7:53:17:21:58:c9:60:a8:ff:86:a9: 39:81:d5:6b:f3:51:f8:2a:59:56:39:71:be:73:e9: 35:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:21:2D:76:07:2A:92:34:80:0F:C1:A8:69:6E:AE:37:50:8D:DC:D5 X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38382e302f32312d3231203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.155.88.0/21 Signature Algorithm: sha256WithRSAEncryption 97:b0:4b:99:f0:19:7c:46:5d:57:b1:02:6a:7c:1e:f7:75:69: ad:a4:60:89:3b:06:61:8a:18:3d:82:1f:22:4f:90:ee:5d:27: 77:44:26:00:95:bf:c6:78:60:b6:10:22:2f:2d:d4:86:e9:a8: 73:5f:e8:9f:06:0f:7a:62:a1:69:a4:0c:08:76:36:cc:d8:07: 57:be:b8:23:ec:12:e4:85:62:a3:93:c3:ce:50:33:36:4d:ab: 08:2c:6c:63:92:2c:80:a6:5d:0c:d7:e6:23:5c:e8:01:5f:ce: e5:ac:96:1e:5c:b4:d9:43:e7:38:5c:e0:39:f3:aa:a6:5d:e1: 83:6d:3c:b3:f8:98:f8:f2:2b:38:74:30:74:48:ef:b6:b9:7c: 58:67:d4:9f:f5:04:53:af:65:24:4f:c3:a0:6c:bc:1e:58:c8: eb:b4:35:92:aa:6e:c5:f4:a6:1c:37:e5:d0:6e:d7:93:27:84: 37:cb:0e:af:bb:1d:73:12:e4:11:d6:98:22:2e:96:e5:a9:f8: c2:c3:1e:b6:b6:cf:9d:7b:e3:02:82:c3:50:06:b1:57:89:92: 41:b9:40:0b:ea:e3:88:f6:25:24:a3:b4:98:9b:69:08:23:64: 29:41:6f:e7:9f:a7:7a:aa:d6:58:f3:a0:a6:0e:f5:9f:98:74: 57:f3:06:17 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUMHqRm3CeotH8kOJPLBWfO6CqYkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAxMjAwMjEwMzZaFw0yNzAxMTkwMjE1MzZaMDMxMTAvBgNV BAMTKDVGMjEyRDc2MDcyQTkyMzQ4MDBGQzFBODY5NkVBRTM3NTA4RERDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPYj1YlQj0IfIfynSPM/kIog5s fb81v09MzwOq2wpWmF+WemdY8WrRxesuukcj/4dG5UxfTVRIa6wVGA1YyPrsq/Yc lyYse/qPJzuHMBMibOYGpvngW1iwRRrM7r/jo5TI4NphE6NOCvsh26XnX1BwK9cX UX+FZKG9Dl8aZpWZ8qQ7kVr68qW4Q7JlVIzzN2kqNV7gIDL8ZHafguNbyNy36UKX uHXprHeV6C5wy8mqyTMfPTZfUCxWygj9OUdHKOb3gkLHTiHLirCx6PJqc1w0lIlj 5Cf50eAARH7uRckwLOAL6A/HUxchWMlgqP+GqTmB1WvzUfgqWVY5cb5z6TU3AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUXyEtdgcqkjSAD8GoaW6uN1CN3NUwHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjY4NDgxLzAvMzIzMTMxMmUzMTM1 MzUyZTM4MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9ObWDANBgkqhkiG9w0BAQsFAAOCAQEAl7BLmfAZfEZdV7ECanwe93VpraRg iTsGYYoYPYIfIk+Q7l0nd0QmAJW/xnhgthAiLy3Uhumoc1/onwYPemKhaaQMCHY2 zNgHV764I+wS5IVio5PDzlAzNk2rCCxsY5IsgKZdDNfmI1zoAV/O5ayWHly02UPn OFzgOfOqpl3hg208s/iY+PIrOHQwdEjvtrl8WGfUn/UEU69lJE/DoGy8HljI67Q1 kqpuxfSmHDfl0G7XkyeEN8sOr7sdcxLkEdaYIi6W5an4wsMetrbPnXvjAoLDUAax V4mSQblAC+rjiPYlJKO0mJtpCCNkKUFv55+neqrWWPOgpg71n5h0V/MGFw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:36 2026 by rpki-client