This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39362e302f32322d3232203d3e203337393639.roa
File: 3130332e39382e39362e302f32322d3232203d3e203337393639.roa (raw, json)
Hash identifier: h9WXMWDymxQDY/QK9E51g64sUZ5u+JliT0Z+Wmwqwx4=
Subject key identifier: 8A:37:FF:78:18:7B:16:AE:D3:F3:1B:61:20:4B:12:26:AE:F3:C9:85
Certificate issuer: /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial: 53EAD5CEC6CAFDB54FF84A40EBE5A1A5BFC89A7B
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39362e302f32322d3232203d3e203337393639.roa
Signing time: Tue 20 Jan 2026 02:23:48 +0000
ROA not before: Tue 20 Jan 2026 02:18:48 +0000
ROA not after: Tue 19 Jan 2027 02:23:48 +0000
asID: 37969
IP address blocks: 103.98.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ea:d5:ce:c6:ca:fd:b5:4f:f8:4a:40:eb:e5:a1:a5:bf:c8:9a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Validity
Not Before: Jan 20 02:18:48 2026 GMT
Not After : Jan 19 02:23:48 2027 GMT
Subject: CN=8A37FF78187B16AED3F31B61204B1226AEF3C985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:2c:70:4c:5c:4a:98:74:11:c5:44:f4:f6:
02:fa:a1:c1:c3:cf:88:bd:f8:0a:a1:4b:45:e3:87:
44:7d:9c:82:08:e4:bd:63:fa:60:26:81:d5:4a:7c:
07:ae:de:8c:81:55:98:29:21:a2:a6:80:6a:72:e1:
95:91:39:24:48:4d:4e:28:60:e4:ad:da:51:38:8b:
57:98:dc:90:39:de:c1:fa:ab:4d:d5:71:2b:cb:a7:
25:e7:92:75:eb:83:25:1a:02:7b:79:52:4d:4a:d4:
51:4a:ec:14:ef:25:1b:84:68:78:70:61:eb:09:a6:
cb:ae:c7:ef:5e:c2:63:2d:8c:c6:90:0e:e1:fd:1b:
a6:26:aa:c5:77:6a:38:1f:14:28:32:56:33:d1:a2:
4a:5c:42:b3:b3:06:bf:ef:ff:86:3d:87:37:af:6c:
4c:9d:c6:7d:16:bc:52:03:b3:3a:7c:c1:69:94:1b:
70:14:75:45:ef:b8:19:3c:30:ee:12:fa:f9:52:fa:
0d:6a:d3:9d:53:93:2f:b9:69:7c:d2:d7:0a:9e:a3:
44:58:e6:02:80:e8:f0:a2:72:65:a0:95:6b:fb:82:
cf:9c:09:87:81:99:35:78:82:3d:b7:5b:5f:f6:1b:
ad:c2:3d:4b:52:e7:86:b3:d7:ad:3d:83:3f:43:fb:
5f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:37:FF:78:18:7B:16:AE:D3:F3:1B:61:20:4B:12:26:AE:F3:C9:85
X509v3 Authority Key Identifier:
keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39362e302f32322d3232203d3e203337393639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.98.96.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:95:8c:76:00:d7:12:2e:33:f2:f6:de:b0:49:05:47:19:88:
47:da:58:9a:cc:a3:75:18:0a:64:7e:f9:04:fd:4f:93:13:bf:
e3:cd:7f:ff:8f:d1:45:ee:03:40:c6:dc:2d:3c:c6:c1:4d:94:
d1:3c:72:b8:1a:1f:ab:18:08:39:34:b3:e9:d2:81:b4:1e:23:
24:d2:05:c8:07:47:b1:1c:f9:b9:88:0f:4e:10:6d:88:d6:0b:
1d:fe:b7:28:10:28:f0:c5:b1:77:52:b0:59:aa:08:05:53:4e:
29:ca:da:6c:df:54:27:76:8e:00:c4:83:f5:a7:65:ea:ea:61:
90:f5:7e:16:c6:b9:7e:9c:9b:5a:67:d4:fe:f8:40:c3:01:ac:
cf:f0:b3:0c:cf:ec:93:b1:00:8d:f6:17:a2:f3:a9:0b:47:2e:
f8:8f:2e:c4:77:29:2b:0e:7e:68:b8:0a:5c:1a:ac:80:38:b8:
d6:cc:50:27:44:95:ec:00:09:48:98:ab:2c:23:d2:0c:d1:76:
34:7f:61:5e:a8:d0:4a:ec:10:28:43:04:14:73:73:72:f0:01:
4c:46:c6:2b:9c:29:b7:bf:57:3f:22:e6:f7:ad:23:b1:92:1c:
65:83:bd:69:e7:0a:a9:87:5e:2b:9c:08:cb:0f:da:72:b2:4c:
ec:69:d3:1d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUU+rVzsbK/bVP+EpA6+Whpb/ImnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0
RjhFMzgyNzAeFw0yNjAxMjAwMjE4NDhaFw0yNzAxMTkwMjIzNDhaMDMxMTAvBgNV
BAMTKDhBMzdGRjc4MTg3QjE2QUVEM0YzMUI2MTIwNEIxMjI2QUVGM0M5ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3jixwTFxKmHQRxUT09gL6ocHD
z4i9+AqhS0Xjh0R9nIII5L1j+mAmgdVKfAeu3oyBVZgpIaKmgGpy4ZWROSRITU4o
YOSt2lE4i1eY3JA53sH6q03VcSvLpyXnknXrgyUaAnt5Uk1K1FFK7BTvJRuEaHhw
YesJpsuux+9ewmMtjMaQDuH9G6YmqsV3ajgfFCgyVjPRokpcQrOzBr/v/4Y9hzev
bEydxn0WvFIDszp8wWmUG3AUdUXvuBk8MO4S+vlS+g1q051Tky+5aXzS1wqeo0RY
5gKA6PCicmWglWv7gs+cCYeBmTV4gj23W1/2G63CPUtS54az1609gz9D+1/bAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUijf/eBh7Fq7T8xthIEsSJq7zyYUwHwYDVR0j
BBgwFoAUN+ZdPWC0XBQpZ4QVE9jlbU+OOCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NjA4NDg2Ni8wLzM3RTY1RDNENjBCNDVDMTQyOTY3ODQxNTEzRDhF
NTZENEY4RTM4MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0RjhFMzgyNy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ2MDg0ODY2LzAvMzEzMDMzMmUzOTM4
MmUzOTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzMzNzM5MzYzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdiYDANBgkqhkiG9w0BAQsFAAOCAQEAtpWMdgDXEi4z8vbesEkFRxmIR9pY
msyjdRgKZH75BP1PkxO/481//4/RRe4DQMbcLTzGwU2U0TxyuBofqxgIOTSz6dKB
tB4jJNIFyAdHsRz5uYgPThBtiNYLHf63KBAo8MWxd1KwWaoIBVNOKcrabN9UJ3aO
AMSD9adl6uphkPV+Fsa5fpybWmfU/vhAwwGsz/CzDM/sk7EAjfYXovOpC0cu+I8u
xHcpKw5+aLgKXBqsgDi41sxQJ0SV7AAJSJirLCPSDNF2NH9hXqjQSuwQKEMEFHNz
cvABTEbGK5wpt79XPyLm960jsZIcZYO9aecKqYdeK5wIyw/acrJM7GnTHQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:50 2026 by rpki-client