This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e38332e36342e302f32322d3232203d3e203337393639.roa
File: 3130332e38332e36342e302f32322d3232203d3e203337393639.roa (raw, json)
Hash identifier: dVFE7ZjLT8msPl2df750tNHw5+32yu2qtjyfdyG3ykM=
Subject key identifier: 32:75:E0:AA:E3:45:5B:F0:90:49:07:D3:0D:E3:8C:EF:46:06:82:DC
Certificate issuer: /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial: 798FC0DDDC493CA797DBD2E34CE1EDD5C96634DC
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e38332e36342e302f32322d3232203d3e203337393639.roa
Signing time: Tue 20 Jan 2026 02:23:48 +0000
ROA not before: Tue 20 Jan 2026 02:18:48 +0000
ROA not after: Tue 19 Jan 2027 02:23:48 +0000
asID: 37969
IP address blocks: 103.83.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:8f:c0:dd:dc:49:3c:a7:97:db:d2:e3:4c:e1:ed:d5:c9:66:34:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Validity
Not Before: Jan 20 02:18:48 2026 GMT
Not After : Jan 19 02:23:48 2027 GMT
Subject: CN=3275E0AAE3455BF0904907D30DE38CEF460682DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:0e:90:b2:4f:ab:58:54:a4:8c:b3:6b:20:
a9:7a:9d:1b:2c:09:94:e2:f7:3f:d6:cd:e1:ee:2b:
7a:06:2a:81:48:3c:98:c5:c5:8f:7d:12:dc:2e:ef:
1c:41:0d:d6:37:32:65:a7:5e:f5:62:e5:00:1d:82:
45:10:9e:2d:0c:f9:ba:62:f4:a9:ca:15:6d:8b:ad:
1f:c1:fc:e8:37:53:89:b7:6e:43:9f:49:74:5b:f4:
b5:f5:fb:79:2b:59:3d:4c:34:1e:de:a1:66:26:39:
08:d8:38:54:ab:ff:cf:68:5b:3c:b3:b7:5d:5d:76:
1f:4a:e5:74:1e:6c:15:10:4a:62:b1:bb:9a:32:d2:
62:8d:19:7b:2b:9d:18:57:95:96:e2:1f:ef:0a:35:
39:66:2a:b9:0c:ac:77:3c:68:43:4a:a1:49:19:90:
09:44:76:8d:e4:e2:72:9c:25:c9:ca:15:e6:d0:65:
94:7a:a3:da:18:fd:14:c6:03:cc:f1:6b:d9:68:bb:
2a:84:f0:2f:82:23:fd:4b:2e:5e:90:e0:31:91:c6:
3e:e9:c8:21:40:87:bc:5b:93:90:25:88:08:a7:15:
8e:80:eb:0e:83:0e:e6:ef:17:48:db:cf:4b:9d:19:
63:dc:0c:bb:60:98:cb:cc:30:eb:6a:64:f3:bf:62:
ab:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:75:E0:AA:E3:45:5B:F0:90:49:07:D3:0D:E3:8C:EF:46:06:82:DC
X509v3 Authority Key Identifier:
keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e38332e36342e302f32322d3232203d3e203337393639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.64.0/22
Signature Algorithm: sha256WithRSAEncryption
26:2a:12:f5:63:27:04:34:22:4f:0e:e9:18:f5:a2:72:b1:24:
20:9b:24:9c:6f:82:0a:8e:7d:ee:b6:94:95:0e:5d:61:3a:12:
82:21:34:2f:bc:b2:e5:ac:d4:47:bd:2c:a9:b0:01:a9:2f:68:
45:5c:2e:df:e6:7f:19:a9:58:f0:f9:12:28:d7:53:26:2a:cf:
20:75:32:66:20:2e:29:b6:c2:83:f1:1f:9f:f8:f5:45:5d:f2:
dc:69:62:f7:cc:0e:a3:c3:12:51:93:c7:92:78:46:ea:d0:a1:
d7:69:dc:1b:2f:ca:ac:16:a2:5e:7c:71:05:a2:b3:45:1e:af:
79:04:f0:87:be:69:83:e0:59:e5:30:2a:32:2d:dd:c2:1f:d9:
ee:d5:02:8a:0c:00:8f:43:92:12:e0:19:af:a1:e3:0d:98:f6:
97:01:2b:5a:bb:52:4d:71:b1:cb:50:8c:4a:34:47:df:24:c4:
1c:9f:e9:0c:76:68:e2:24:18:18:d5:f7:f5:b1:19:0f:bf:04:
37:65:75:e0:2f:a6:2d:b2:a9:a4:21:15:16:99:9b:27:aa:67:
16:95:a5:3f:c8:d5:24:54:56:c0:16:4e:3e:a4:47:74:fc:62:
cd:47:e4:63:11:b6:cb:f9:01:5c:5e:61:6c:93:37:e8:94:8c:
a1:75:dc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:52 2026 by rpki-client