This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38342e302f32342d3234203d3e20313334373638.roa
File: 3130332e3233362e38342e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier: McHzjJ5wVLbdTRiTrqD8KvankR4b3nkLfEKzU/ygr+w=
Subject key identifier: 43:0B:A5:18:CC:36:98:14:B4:14:CF:2B:29:C7:23:73:6E:EC:06:AA
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 2CA8BA4BCD4DE9F189D9137BC1D65F715F85954D
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38342e302f32342d3234203d3e20313334373638.roa
Signing time: Tue 20 Jan 2026 02:21:34 +0000
ROA not before: Tue 20 Jan 2026 02:16:34 +0000
ROA not after: Tue 19 Jan 2027 02:21:34 +0000
asID: 134768
IP address blocks: 103.236.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a8:ba:4b:cd:4d:e9:f1:89:d9:13:7b:c1:d6:5f:71:5f:85:95:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: Jan 20 02:16:34 2026 GMT
Not After : Jan 19 02:21:34 2027 GMT
Subject: CN=430BA518CC369814B414CF2B29C723736EEC06AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:03:7c:94:e9:b6:17:eb:68:76:29:d5:1d:
78:10:67:44:7c:f6:53:84:a5:5f:7f:2d:3a:dc:4d:
0c:e0:a9:8d:f0:3c:fc:d6:b8:32:54:db:91:9c:58:
d3:a6:70:e3:77:a4:e4:b3:0b:a0:98:85:77:9c:bb:
b6:1a:39:f6:b8:84:b3:ca:61:85:7a:86:c8:5b:1a:
d3:fa:99:f9:ee:c4:3f:65:de:22:ff:f8:e4:41:d8:
2c:f3:4e:81:04:02:96:e0:a1:d5:39:b0:ca:c6:74:
fa:af:18:2c:cd:00:ad:cf:a0:af:ad:a5:ee:8e:04:
2b:d1:b9:91:31:3b:97:75:92:9b:f8:80:d9:8f:e6:
c7:4d:e0:c7:8d:60:f2:48:b8:b9:fc:80:40:08:ee:
5b:4a:86:89:f1:45:ba:6e:59:fa:cf:40:48:b5:4b:
be:8e:91:5f:d0:87:6d:28:3b:57:49:34:2f:d4:a4:
fd:a3:41:cc:89:6b:c7:83:f5:2d:30:96:db:a8:a8:
02:26:e9:bb:f3:e5:25:82:b0:da:ea:8c:04:7f:78:
82:84:49:ba:5c:50:01:61:e9:4b:7a:a0:08:99:88:
e1:74:e0:0e:6d:9e:ad:c5:49:ae:ab:ae:a3:fb:80:
69:88:5d:e3:ee:3b:c2:1c:6f:2f:93:89:ef:4f:e9:
fd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0B:A5:18:CC:36:98:14:B4:14:CF:2B:29:C7:23:73:6E:EC:06:AA
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38342e302f32342d3234203d3e20313334373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.84.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a2:40:23:aa:a4:b1:97:e6:f2:85:2f:9a:23:27:b7:c8:4e:
ee:c5:1d:21:62:b7:6a:4e:33:4c:b3:08:bd:29:a4:62:0a:34:
f1:06:dd:b2:dc:c0:98:1e:53:8a:b3:0a:d4:5e:67:55:5a:be:
07:f8:83:58:8b:5a:7e:a5:8d:d2:3f:d2:57:51:65:f0:a0:0a:
a8:5b:e2:0a:73:b6:0c:a1:99:f2:a5:ce:7b:b9:03:b3:9e:3f:
e4:ac:b5:2f:d7:94:0a:0e:4d:7c:16:8b:8b:ed:8e:ec:6d:73:
64:c8:1f:cb:92:79:4a:62:76:e5:37:5e:a1:aa:49:8f:43:9b:
3a:5e:1e:3c:96:de:1c:b3:f7:d5:eb:4c:d7:f6:8c:56:91:89:
33:9e:93:37:24:b1:5a:e9:f7:69:a7:5f:87:1c:9a:9e:b6:eb:
2f:d7:62:12:40:e4:aa:e2:10:9b:d0:e3:4b:28:6e:14:b9:5c:
8a:c8:8f:ba:ba:c9:90:ac:90:92:0a:81:8b:89:63:dd:c9:cc:
5e:a7:dc:44:f5:34:d1:3b:e3:a5:29:06:6b:75:82:5f:cc:a9:
d2:dc:97:de:17:65:7a:e5:9c:ce:f0:70:2a:1f:36:70:46:e1:
97:6b:6f:9a:9b:e9:bf:ab:92:ef:b8:a2:12:18:15:55:8d:5f:
d8:80:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:43 2026 by rpki-client