This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39342e302f32332d3233203d3e203337393639.roa
File: 3130332e39382e39342e302f32332d3233203d3e203337393639.roa (raw, json)
Hash identifier: 7vkG5VV1MDFk1IURajr6nf4umbwgCnZ6P/vmnswxNDc=
Subject key identifier: 86:47:E2:FD:37:9E:FC:3B:93:2A:94:A4:C9:C6:ED:B9:4C:87:C4:80
Certificate issuer: /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial: 588F3B47FC4E6384DFE58F3F401FEE28AA29EF16
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39342e302f32332d3233203d3e203337393639.roa
Signing time: Tue 20 Jan 2026 02:23:49 +0000
ROA not before: Tue 20 Jan 2026 02:18:49 +0000
ROA not after: Tue 19 Jan 2027 02:23:49 +0000
asID: 37969
IP address blocks: 103.98.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:8f:3b:47:fc:4e:63:84:df:e5:8f:3f:40:1f:ee:28:aa:29:ef:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Validity
Not Before: Jan 20 02:18:49 2026 GMT
Not After : Jan 19 02:23:49 2027 GMT
Subject: CN=8647E2FD379EFC3B932A94A4C9C6EDB94C87C480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:b5:cc:86:d9:f2:b7:ea:ce:6e:73:c5:21:
c7:ef:3a:c0:e6:a2:96:e6:e9:cf:5f:db:ac:fe:3a:
e5:88:d2:bb:54:1b:4f:9c:c9:53:37:55:85:83:5d:
80:d3:86:bb:df:93:82:36:f3:6b:6d:f3:e4:ab:1a:
9c:43:8d:5a:56:87:70:84:d7:ef:1e:dc:6f:99:8b:
af:18:44:6f:a8:4d:ea:6a:19:17:cb:6d:94:31:dd:
47:6a:b8:85:cc:cc:da:a1:dc:47:19:67:6e:4d:82:
26:9f:02:39:cc:a1:e4:54:55:22:5b:48:01:2d:04:
45:3c:c9:fd:ad:12:ba:88:9f:90:1d:10:10:3f:3c:
6f:b3:0d:a8:d9:34:0c:23:48:9c:da:9b:df:4d:fe:
2d:60:ce:11:a4:d4:ab:13:81:60:78:5b:05:f7:41:
fb:20:6f:0f:e1:ab:98:b2:dc:0e:55:a1:f4:8c:4f:
ed:60:98:4c:57:7c:32:da:04:88:2d:b6:60:6b:3f:
d0:bf:f3:5a:d9:7f:e6:31:9b:b9:22:c8:b4:de:b5:
5d:69:1f:f5:64:e2:fe:22:9a:cf:42:db:10:23:1e:
b3:3d:21:85:fc:71:d1:c6:21:83:fb:df:4d:8d:0a:
d8:e2:71:1b:51:b5:f0:01:ae:f2:ee:26:44:6d:99:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:47:E2:FD:37:9E:FC:3B:93:2A:94:A4:C9:C6:ED:B9:4C:87:C4:80
X509v3 Authority Key Identifier:
keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39342e302f32332d3233203d3e203337393639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.98.94.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:fc:71:bc:22:02:cb:a2:fe:9b:fd:11:a8:3f:97:23:5c:6c:
34:d9:5e:c7:5c:cd:39:01:83:cb:f0:e9:3a:39:ce:3d:5b:69:
d9:aa:fa:e2:09:a2:6f:c1:a2:27:b7:a3:00:7a:1e:48:72:f4:
5c:b5:62:29:63:5a:9b:53:7d:fe:3c:08:fd:03:c1:f1:bd:8e:
de:d5:82:93:d4:3e:7c:96:19:49:2b:c7:61:4c:11:9c:1c:7d:
43:22:ef:28:c7:c6:e7:7e:ce:52:aa:92:71:55:a6:c6:50:c4:
46:37:f0:ff:31:46:2b:e1:bc:d2:7a:89:8e:38:25:84:2b:c3:
f6:fb:ad:bf:f6:c8:5f:44:d7:3e:cd:54:77:9f:32:96:ee:55:
8c:d7:bb:50:85:38:34:8d:d3:6e:4f:e6:b6:a3:f7:3d:11:7b:
27:94:7a:d1:55:e5:0f:f8:48:94:b7:d7:db:eb:47:18:7c:1a:
16:7a:a9:bf:39:91:10:1d:42:b8:e7:64:f3:8a:52:f7:e6:37:
6d:1c:23:54:26:e6:b6:e9:05:57:dc:3d:26:e0:00:f9:2d:65:
03:ce:ec:58:79:5b:82:0f:8f:fc:6d:da:e7:67:fc:23:49:ee:
09:f6:dd:93:b4:61:19:eb:75:19:37:06:a4:bb:5a:fb:b5:a6:
2d:29:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:54 2026 by rpki-client