This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38332e302f32342d3234203d3e20313334373638.roa
File: 3130332e3233362e38332e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier: IXRSh4knNYOGfv2hD8obZURiJ3l41pwRsYuDZxpwy30=
Subject key identifier: 08:44:73:8F:B7:1A:EB:01:07:7D:89:9C:AC:F9:B4:C9:7E:70:5D:E6
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 5D0CE825C71EEDB07D7A8B230FA719CE214061A5
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38332e302f32342d3234203d3e20313334373638.roa
Signing time: Tue 20 Jan 2026 02:21:35 +0000
ROA not before: Tue 20 Jan 2026 02:16:35 +0000
ROA not after: Tue 19 Jan 2027 02:21:35 +0000
asID: 134768
IP address blocks: 103.236.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:0c:e8:25:c7:1e:ed:b0:7d:7a:8b:23:0f:a7:19:ce:21:40:61:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: Jan 20 02:16:35 2026 GMT
Not After : Jan 19 02:21:35 2027 GMT
Subject: CN=0844738FB71AEB01077D899CACF9B4C97E705DE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:78:0e:9e:7c:15:a6:19:9a:b0:a0:3a:72:
f9:cf:51:8c:d0:c6:96:5a:38:78:ed:81:21:35:ac:
5a:89:fe:92:81:b9:d8:2e:73:8f:44:c2:49:ca:7a:
0b:98:90:af:53:f2:35:87:cf:4a:b0:36:30:90:1a:
d1:92:7c:20:d1:07:7e:ac:ce:1d:61:d7:6a:99:6e:
f9:12:f3:d3:63:e3:42:28:52:a1:d6:69:0a:58:24:
cd:94:1b:e6:82:71:c2:2d:7f:9b:4d:2e:ea:2a:9e:
2f:77:2c:6b:35:d0:4b:90:b2:59:05:9d:da:c2:34:
d8:fc:24:e2:46:7b:57:d9:21:08:c8:16:b7:c9:68:
c1:66:2e:96:c4:b0:ba:17:2f:af:d7:8d:07:79:05:
4e:a0:3f:c7:0c:20:a9:04:3d:f5:3b:81:96:2d:1b:
50:33:3d:81:8f:2f:27:10:ee:d3:81:f2:86:40:6c:
98:3e:0b:5b:3b:5b:fa:40:3f:69:9f:5b:72:4b:19:
f8:b9:79:57:b0:3f:50:e1:d1:41:3a:cf:84:3b:f8:
82:fe:8f:05:81:cc:11:36:1f:62:3b:b2:38:ae:c7:
ea:b7:74:c7:2b:c9:98:29:c9:9c:76:31:53:5d:06:
3a:36:62:e3:0f:60:c2:2f:78:d0:e9:bc:db:ae:1b:
e3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:44:73:8F:B7:1A:EB:01:07:7D:89:9C:AC:F9:B4:C9:7E:70:5D:E6
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38332e302f32342d3234203d3e20313334373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.83.0/24
Signature Algorithm: sha256WithRSAEncryption
65:52:54:24:8b:11:c4:2e:39:c5:78:e3:35:7e:e3:b4:a9:f2:
be:73:b4:8e:aa:22:3e:45:bf:92:39:15:d6:f1:c2:56:4e:f6:
69:81:ba:61:ec:1a:3d:22:99:3f:40:a9:fc:93:85:86:a2:d4:
91:da:05:8d:d0:4a:0a:3e:24:82:87:a2:e9:e3:af:50:14:57:
77:fe:a6:cc:f6:d9:b7:83:91:d8:b3:84:59:c3:fe:b2:57:d2:
b8:38:59:15:0f:d9:d3:36:e2:23:cd:9d:ce:4d:e4:a6:c9:c4:
e5:ff:21:01:1a:29:1d:0f:95:44:93:e4:91:9c:79:76:46:97:
c2:c3:28:d7:ba:16:41:17:0a:9d:ce:0e:32:fa:3e:a3:2a:ad:
81:13:22:dd:ec:72:13:3e:d8:cf:f8:be:59:4e:ff:08:bc:2b:
3c:03:32:69:54:f2:17:81:aa:02:63:24:ec:04:d7:5b:57:21:
81:ce:b1:b7:51:ca:3c:9a:98:d3:8f:bd:b4:13:f1:21:27:87:
12:51:6e:87:cf:85:c1:9b:51:c0:5c:15:b8:cf:44:c4:d2:04:
b3:c3:d1:06:94:12:bd:9c:2d:48:f2:83:e0:c9:91:40:30:f3:
ea:1a:d6:fb:c5:20:d8:f5:5c:c3:c6:42:cf:79:ee:25:03:e4:
fc:00:25:3b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUXQzoJcce7bB9eosjD6cZziFAYaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3
NkVBQUExNTAeFw0yNjAxMjAwMjE2MzVaFw0yNzAxMTkwMjIxMzVaMDMxMTAvBgNV
BAMTKDA4NDQ3MzhGQjcxQUVCMDEwNzdEODk5Q0FDRjlCNEM5N0U3MDVERTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDsngOnnwVphmasKA6cvnPUYzQ
xpZaOHjtgSE1rFqJ/pKBudguc49EwknKeguYkK9T8jWHz0qwNjCQGtGSfCDRB36s
zh1h12qZbvkS89Nj40IoUqHWaQpYJM2UG+aCccItf5tNLuoqni93LGs10EuQslkF
ndrCNNj8JOJGe1fZIQjIFrfJaMFmLpbEsLoXL6/XjQd5BU6gP8cMIKkEPfU7gZYt
G1AzPYGPLycQ7tOB8oZAbJg+C1s7W/pAP2mfW3JLGfi5eVewP1Dh0UE6z4Q7+IL+
jwWBzBE2H2I7sjiux+q3dMcryZgpyZx2MVNdBjo2YuMPYMIveNDpvNuuG+ObAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUCERzj7ca6wEHfYmcrPm0yX5wXeYwHwYDVR0j
BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4
RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy
MzMzNjJlMzgzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfsUzANBgkqhkiG9w0BAQsFAAOCAQEAZVJUJIsRxC45xXjjNX7j
tKnyvnO0jqoiPkW/kjkV1vHCVk72aYG6YewaPSKZP0Cp/JOFhqLUkdoFjdBKCj4k
goei6eOvUBRXd/6mzPbZt4OR2LOEWcP+slfSuDhZFQ/Z0zbiI82dzk3kpsnE5f8h
ARopHQ+VRJPkkZx5dkaXwsMo17oWQRcKnc4OMvo+oyqtgRMi3exyEz7Yz/i+WU7/
CLwrPAMyaVTyF4GqAmMk7ATXW1chgc6xt1HKPJqY04+9tBPxISeHElFuh8+FwZtR
wFwVuM9ExNIEs8PRBpQSvZwtSPKD4MmRQDDz6hrW+8Ug2PVcw8ZCz3nuJQPk/AAl
Ow==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:41 2026 by rpki-client