This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39302e302f32342d3234203d3e20313334373638.roa
File: 3130332e3233362e39302e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier: Skl4e+rJ1dtAOtaTNOj0Ljy1UES8/Pu9rZsNpAi41bY=
Subject key identifier: 69:8E:1A:B3:09:3B:6D:CF:DF:AA:AE:05:01:BF:29:8E:34:63:5F:F6
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 7893D5F4651EA14B9A6024644807EC1C5274C5D6
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39302e302f32342d3234203d3e20313334373638.roa
Signing time: Tue 20 Jan 2026 02:21:36 +0000
ROA not before: Tue 20 Jan 2026 02:16:36 +0000
ROA not after: Tue 19 Jan 2027 02:21:36 +0000
asID: 134768
IP address blocks: 103.236.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:93:d5:f4:65:1e:a1:4b:9a:60:24:64:48:07:ec:1c:52:74:c5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: Jan 20 02:16:36 2026 GMT
Not After : Jan 19 02:21:36 2027 GMT
Subject: CN=698E1AB3093B6DCFDFAAAE0501BF298E34635FF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:41:26:10:3b:bd:84:40:e5:82:04:3b:fa:
63:24:34:21:10:27:55:de:3b:fd:b2:2c:f2:fc:96:
05:60:10:d3:7b:de:07:69:c9:f4:5a:c8:73:3e:31:
22:e3:5b:8b:65:0a:ac:97:a5:e1:6b:f0:c3:be:67:
6d:d1:9a:60:60:00:36:ac:cd:3c:12:dd:7d:ab:a6:
b6:64:6d:6a:9d:74:d7:28:1f:94:e9:71:18:32:da:
45:12:03:30:61:6c:f0:2f:92:e2:8d:55:c1:11:75:
d5:f5:ce:27:ee:93:98:f7:af:76:2f:37:be:a1:13:
7c:6e:7c:bd:69:dc:29:c9:d9:5a:a7:47:0f:e0:c9:
ff:71:ef:0e:2c:e6:09:f4:a4:f5:15:03:7f:33:df:
63:e8:0a:9d:98:1b:7a:c8:76:f6:2e:f6:2c:fc:81:
32:b2:20:07:dc:0b:df:da:f8:da:00:3b:53:44:ca:
a5:66:09:8f:fd:e9:8c:8d:64:f8:7c:d7:6e:22:b1:
30:2a:c0:c9:72:b9:0d:f4:e0:5f:11:3d:3a:c9:a4:
59:23:dc:62:ce:1e:d0:a7:e4:69:7a:ba:72:73:d6:
7d:fd:3b:09:4f:6c:07:3a:3c:20:b2:45:cb:70:83:
4c:6d:c7:65:43:4d:85:bc:ac:55:df:9e:ae:72:ca:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:1A:B3:09:3B:6D:CF:DF:AA:AE:05:01:BF:29:8E:34:63:5F:F6
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39302e302f32342d3234203d3e20313334373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.90.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:91:27:58:ef:a8:81:08:f0:00:7f:91:21:95:fd:ae:51:a5:
61:c1:fd:32:d6:e3:87:9b:99:97:74:c1:a2:be:16:15:21:86:
c1:36:8a:58:3e:37:9c:97:b5:ab:9a:81:ad:23:ee:b8:9c:bd:
4b:26:83:e6:34:44:f8:c3:59:05:1f:2f:a4:d0:89:da:7b:2e:
53:a3:ae:0a:a5:67:08:15:ca:01:bd:36:af:64:ba:c4:65:03:
a8:8d:dd:45:dd:b2:c2:b4:a2:4c:31:e0:86:00:1d:5e:e3:57:
9c:34:e6:73:1e:1c:02:ec:33:54:6f:27:0f:69:46:10:b6:5a:
68:94:cc:43:46:63:d1:a1:7f:da:c8:83:e6:7c:2d:d0:a1:66:
bd:01:84:2c:29:0b:00:5a:18:f8:96:2d:cd:06:b9:da:fb:ff:
13:e9:78:62:4a:5a:91:77:03:c8:52:8d:6b:70:16:00:26:40:
0c:51:73:19:4a:14:5a:d8:8f:16:e3:a0:fe:ae:31:dc:fe:d6:
ef:f1:d8:0b:d6:a1:04:16:98:40:a8:2e:b1:7b:94:a4:5f:3e:
ff:b5:69:98:c8:de:32:6e:31:1c:b8:64:a4:c4:6f:ef:ff:cb:
2e:cd:8b:64:72:a7:bf:6a:04:02:e3:3e:42:de:dd:f5:2a:c2:
c7:25:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:45 2026 by rpki-client