This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38362e302f32342d3234203d3e20313334373638.roa
File: 3130332e3233362e38362e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier: 190174A46J2PPle3fVd/gcv6GRKcAbKhFT4VSudw9ac=
Subject key identifier: A3:85:2E:65:F8:5C:AA:65:9F:AA:FC:4D:04:5D:DD:B0:9A:37:58:1F
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 278A000BB1E0CE2A8DF1E9A0F2834CD3E61E90E5
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38362e302f32342d3234203d3e20313334373638.roa
Signing time: Tue 20 Jan 2026 02:21:36 +0000
ROA not before: Tue 20 Jan 2026 02:16:36 +0000
ROA not after: Tue 19 Jan 2027 02:21:36 +0000
asID: 134768
IP address blocks: 103.236.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:8a:00:0b:b1:e0:ce:2a:8d:f1:e9:a0:f2:83:4c:d3:e6:1e:90:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: Jan 20 02:16:36 2026 GMT
Not After : Jan 19 02:21:36 2027 GMT
Subject: CN=A3852E65F85CAA659FAAFC4D045DDDB09A37581F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:55:bd:45:e4:38:2f:db:a9:96:a3:87:0f:
74:61:ec:8e:26:ef:ca:cf:f1:a0:96:ee:db:58:73:
8d:75:ee:80:68:0d:1b:0c:3a:a4:24:a6:fb:e1:6b:
56:3c:f6:cc:db:a5:09:ee:f8:d1:c5:37:6e:4f:cc:
c6:df:e1:67:67:bf:f3:2f:9a:e4:a6:aa:21:72:de:
84:60:db:75:e5:2b:da:a3:e2:64:f8:15:c3:0e:02:
87:b2:8f:f0:f6:f7:ef:07:ba:3e:51:de:82:10:01:
cf:7f:40:70:82:99:e5:d6:79:4a:1f:76:d6:d7:b7:
57:f2:c6:db:5b:88:3a:b4:34:ed:36:33:9b:2f:c1:
ee:15:d1:b3:84:29:42:52:0c:57:3d:dd:6d:25:4a:
66:54:4b:a8:96:b0:de:56:5f:ea:5e:28:c6:70:c1:
0a:5c:09:88:a5:90:b4:4f:05:bb:94:d2:68:d8:24:
66:de:a6:2a:a4:3b:8a:7d:ba:5e:a5:39:82:fd:91:
11:2b:ed:42:0e:8e:f4:16:ba:30:1b:f5:44:10:65:
9d:42:6a:f7:dc:84:07:6b:4d:49:43:c1:2b:6b:a8:
f8:9b:05:34:af:84:5b:27:28:70:c5:de:b1:58:17:
0e:0f:64:4d:d3:1c:5c:3c:51:97:c0:4a:db:bf:be:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:85:2E:65:F8:5C:AA:65:9F:AA:FC:4D:04:5D:DD:B0:9A:37:58:1F
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38362e302f32342d3234203d3e20313334373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.86.0/24
Signature Algorithm: sha256WithRSAEncryption
25:af:50:f1:1a:7f:ca:2c:a2:40:df:0d:79:4e:46:25:25:15:
29:63:89:50:48:d9:7e:4a:d3:6f:b9:7e:d5:88:a3:0d:0a:0e:
80:e0:9a:1f:57:ad:c8:a2:11:c5:49:65:80:f7:6d:66:6a:f3:
5b:d3:57:05:6c:73:d9:f4:90:aa:cc:63:69:9d:78:0b:e8:3e:
7a:a2:7c:80:9a:8e:df:b8:b0:ce:0c:c7:59:f2:92:38:fd:83:
31:71:67:02:63:66:08:68:31:c1:44:f7:c8:1e:8f:39:99:5f:
02:56:ec:40:c5:08:29:dd:7c:d1:a0:8e:e4:4e:51:29:e5:ff:
46:ba:27:08:2f:0a:58:dd:25:57:4b:ba:a9:a4:a9:27:a0:6a:
26:1d:1e:ed:69:c1:c8:65:c0:b9:90:45:cb:96:3d:ce:d4:1c:
f7:9d:98:82:8c:69:4a:a4:7b:08:bb:fc:10:7c:4b:ac:3c:ba:
72:37:b4:8f:96:bc:b1:e7:fd:1e:80:97:6b:5b:e7:1d:46:a8:
a3:6b:87:fe:7c:f6:3d:44:d6:d8:8c:99:b9:a0:8b:1b:4b:9f:
cf:84:39:2e:fc:4b:df:f3:41:fd:42:cb:f2:7e:71:96:9d:73:
74:65:01:20:54:e1:3b:22:2a:87:6c:2f:5b:f1:4e:90:3f:0c:
8f:8d:a3:b2
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUJ4oAC7HgziqN8emg8oNM0+YekOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3
NkVBQUExNTAeFw0yNjAxMjAwMjE2MzZaFw0yNzAxMTkwMjIxMzZaMDMxMTAvBgNV
BAMTKEEzODUyRTY1Rjg1Q0FBNjU5RkFBRkM0RDA0NUREREIwOUEzNzU4MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCylVW9ReQ4L9uplqOHD3Rh7I4m
78rP8aCW7ttYc4117oBoDRsMOqQkpvvha1Y89szbpQnu+NHFN25PzMbf4Wdnv/Mv
muSmqiFy3oRg23XlK9qj4mT4FcMOAoeyj/D29+8Huj5R3oIQAc9/QHCCmeXWeUof
dtbXt1fyxttbiDq0NO02M5svwe4V0bOEKUJSDFc93W0lSmZUS6iWsN5WX+peKMZw
wQpcCYilkLRPBbuU0mjYJGbepiqkO4p9ul6lOYL9kREr7UIOjvQWujAb9UQQZZ1C
avfchAdrTUlDwStrqPibBTSvhFsnKHDF3rFYFw4PZE3THFw8UZfAStu/vmPZAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUo4UuZfhcqmWfqvxNBF3dsJo3WB8wHwYDVR0j
BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4
RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy
MzMzNjJlMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfsVjANBgkqhkiG9w0BAQsFAAOCAQEAJa9Q8Rp/yiyiQN8NeU5G
JSUVKWOJUEjZfkrTb7l+1YijDQoOgOCaH1etyKIRxUllgPdtZmrzW9NXBWxz2fSQ
qsxjaZ14C+g+eqJ8gJqO37iwzgzHWfKSOP2DMXFnAmNmCGgxwUT3yB6POZlfAlbs
QMUIKd180aCO5E5RKeX/RronCC8KWN0lV0u6qaSpJ6BqJh0e7WnByGXAuZBFy5Y9
ztQc952YgoxpSqR7CLv8EHxLrDy6cje0j5a8sef9HoCXa1vnHUaoo2uH/nz2PUTW
2IyZuaCLG0ufz4Q5LvxL3/NB/ULL8n5xlp1zdGUBIFThOyIqh2wvW/FOkD8Mj42j
sg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:38 2026 by rpki-client