This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36392e302f32342d3234203d3e20313334373638.roa
File: 3130332e3233362e36392e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier: 1APXXm/kYahc2jKgEf2qrO3gmXUmJ2TwDJKYZrfSabI=
Subject key identifier: 64:AC:54:C9:F9:7C:D8:37:08:ED:EA:E6:A8:58:11:32:D8:E0:4D:1E
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 733DBE3F949DBAF7C2C537062A73171435314EA0
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36392e302f32342d3234203d3e20313334373638.roa
Signing time: Tue 20 Jan 2026 02:21:35 +0000
ROA not before: Tue 20 Jan 2026 02:16:35 +0000
ROA not after: Tue 19 Jan 2027 02:21:35 +0000
asID: 134768
IP address blocks: 103.236.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:3d:be:3f:94:9d:ba:f7:c2:c5:37:06:2a:73:17:14:35:31:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: Jan 20 02:16:35 2026 GMT
Not After : Jan 19 02:21:35 2027 GMT
Subject: CN=64AC54C9F97CD83708EDEAE6A8581132D8E04D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:a6:dc:87:29:10:ae:83:dc:9d:7d:bd:d4:
c1:86:bb:d8:51:41:90:e7:73:7a:cf:14:00:e3:a4:
3a:69:cd:19:60:12:5f:19:3c:f3:f3:4c:db:66:a7:
c2:30:d4:8f:a1:b5:0b:6c:db:f0:7e:f5:fb:48:a9:
01:cc:34:fe:0f:a2:7d:14:0c:1f:bd:db:f9:b6:a7:
7d:9d:ba:a6:20:a6:3c:36:67:a6:83:a5:cd:7c:5c:
64:1b:aa:a4:c8:8f:98:af:7b:fc:07:80:b6:39:b6:
30:27:1a:6f:06:ed:9f:ec:ea:0e:9c:28:93:b4:d5:
7a:6f:d8:de:93:bc:c6:2a:d8:c8:ea:36:68:2c:d7:
8a:d8:83:cb:ac:21:16:c5:9c:f7:7f:33:76:5a:36:
09:11:d2:df:0c:ef:df:ad:ff:34:3d:2a:64:22:52:
c5:98:42:23:c0:45:24:c7:63:53:af:77:33:41:a7:
12:75:99:c4:c9:72:d4:74:45:e5:fc:8a:e1:f0:59:
78:1f:7c:42:68:cd:07:52:76:a1:73:86:2f:6c:ff:
96:d5:eb:c6:9f:29:0e:70:77:58:da:0d:66:c8:d3:
5a:87:ce:1d:98:d5:70:95:c2:c8:7b:28:e4:8c:e8:
2d:77:36:27:25:2f:32:d7:dc:aa:ee:20:d6:c2:54:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AC:54:C9:F9:7C:D8:37:08:ED:EA:E6:A8:58:11:32:D8:E0:4D:1E
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36392e302f32342d3234203d3e20313334373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.69.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:11:6d:ce:ae:c1:9e:6c:1c:f2:14:03:da:c7:1b:27:de:79:
18:6d:ed:c3:34:20:8e:01:85:4d:54:b9:d0:69:43:fb:13:bd:
21:c5:ee:14:dc:08:65:72:0b:44:1c:f4:a0:28:93:b1:a9:9c:
0e:49:75:9e:d1:87:6a:d0:55:08:7c:e2:2b:b8:96:be:b8:90:
0e:1f:2d:17:cb:8f:bc:28:4e:17:38:5c:08:15:bd:50:5a:3d:
bd:5b:d4:a8:77:92:88:0b:21:f8:5f:88:23:51:07:69:59:dc:
63:b3:dd:84:04:ba:a6:b5:d5:b4:34:4f:fe:fb:64:12:f0:1c:
ce:84:df:38:e0:b4:6e:e2:2e:be:dc:2c:43:b6:42:fe:5f:58:
c4:9f:80:3b:3e:11:36:44:00:3e:ba:4e:6e:b1:76:1a:a1:b0:
bc:2b:94:a2:1a:1a:c4:5b:10:01:e7:4b:0e:0c:94:94:ad:72:
97:9f:dd:ce:63:13:c9:36:c5:8d:7c:8e:28:d5:1c:32:d1:bb:
44:ac:38:44:53:45:d8:d3:50:d0:64:90:2b:12:aa:72:65:86:
91:0e:a6:62:93:58:64:40:86:e5:34:a3:86:bc:ba:de:1d:c0:
78:50:e5:21:c5:1f:4f:ba:40:52:00:7b:de:4f:55:8e:1f:f7:
4b:d3:90:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:34 2026 by rpki-client