This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38382e302f32342d3234203d3e20313334373638.roa
File: 3130332e3233362e38382e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier: w8tS++B/0IJYCExaqVrQ0rf/OPvOHSTuK9esc2n/1Iw=
Subject key identifier: 89:82:84:11:E4:7E:55:C3:C9:04:DE:56:BF:67:5A:ED:30:72:5B:3D
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 66362A568C366A679AF194143E47650746754E04
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38382e302f32342d3234203d3e20313334373638.roa
Signing time: Tue 20 Jan 2026 02:21:34 +0000
ROA not before: Tue 20 Jan 2026 02:16:34 +0000
ROA not after: Tue 19 Jan 2027 02:21:34 +0000
asID: 134768
IP address blocks: 103.236.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:36:2a:56:8c:36:6a:67:9a:f1:94:14:3e:47:65:07:46:75:4e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: Jan 20 02:16:34 2026 GMT
Not After : Jan 19 02:21:34 2027 GMT
Subject: CN=89828411E47E55C3C904DE56BF675AED30725B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:e3:e4:d4:a3:ba:2c:21:d4:86:3f:79:d1:
bf:ef:70:85:8c:da:67:e9:5c:ee:67:b6:f8:f2:f9:
73:77:a9:d9:84:fc:5c:aa:2c:71:04:fe:b9:80:d8:
39:89:1a:5c:ca:83:c9:2c:37:91:38:66:b1:36:7b:
63:94:da:88:a6:b1:c6:b8:b4:73:a3:66:70:95:12:
48:8e:1b:82:76:73:d0:b3:cb:48:42:c4:b9:ef:ed:
b5:87:87:73:ea:2c:21:0d:22:2f:6c:9b:d1:f4:9a:
3e:cd:dc:f8:be:c0:5a:39:d2:cb:e3:a1:98:ce:91:
f8:86:42:d1:df:69:b6:ee:72:68:cc:f4:91:9f:b4:
46:bc:60:79:1b:f3:81:54:da:53:99:9e:5b:88:d4:
a9:ce:eb:1b:bf:64:fe:3a:1f:6a:32:bb:d9:a4:b6:
87:3b:66:96:39:56:8c:cd:8e:4b:10:88:a0:d9:7d:
bb:49:fd:d2:c5:51:60:9b:0b:a2:a2:91:55:da:33:
c8:7f:18:0e:e5:ba:7d:67:e0:29:1a:42:88:31:ab:
e6:2e:72:ef:99:34:3e:4b:ef:3a:1b:5f:52:07:93:
91:5b:9f:1f:df:87:7b:2f:9d:39:30:77:05:ee:a6:
46:ab:4a:e0:94:1b:e7:e4:37:32:72:73:9e:1c:a9:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:82:84:11:E4:7E:55:C3:C9:04:DE:56:BF:67:5A:ED:30:72:5B:3D
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38382e302f32342d3234203d3e20313334373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.88.0/24
Signature Algorithm: sha256WithRSAEncryption
63:3a:8f:20:75:d1:74:1b:83:6f:80:b0:40:84:a5:de:b8:08:
17:be:96:5f:ec:59:92:73:c3:92:95:f0:eb:00:6f:c0:38:5b:
b1:23:59:66:68:17:8e:d6:c8:93:5d:71:20:62:3d:70:51:a1:
d6:ad:8b:7e:7e:d8:89:62:35:3d:c3:e5:f4:00:57:12:b2:e0:
93:74:db:e5:25:e5:f0:3e:e3:cf:9f:a5:2b:e6:f3:52:56:31:
c1:18:30:72:b2:fd:b4:02:18:95:bb:ec:56:a9:27:18:63:c8:
2b:4f:e5:f0:2d:14:ea:48:d3:36:cc:09:60:2a:d7:4b:3d:37:
72:40:0d:75:c7:29:e7:e5:b0:a5:40:41:20:ad:30:e1:71:4f:
7d:f4:b8:8c:0d:e8:9f:3d:f4:f1:af:5c:59:91:93:4c:b6:aa:
99:de:67:7c:70:5c:1c:09:f3:f4:83:07:3b:b9:47:6b:62:76:
db:c5:87:62:cd:d8:2b:03:eb:1c:87:ca:70:54:63:25:a6:3f:
4c:89:f9:aa:3a:d5:81:49:2a:96:f9:a7:6c:91:f7:41:64:28:
98:9b:8c:39:dc:b1:51:6a:f0:36:27:fb:ac:aa:62:fd:29:6c:
86:83:7c:c1:54:10:85:bc:c6:8f:00:6a:5b:c0:c5:e4:f3:55:
51:36:10:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:28 2026 by rpki-client