This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39342e302f32342d3234203d3e20313334373638.roa
File: 3130332e3233362e39342e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier: dlJEPhJ4SdakwYO2ie7N0eATL3HoBEYzOtytRAt3+Cg=
Subject key identifier: 96:3F:21:63:DD:E4:35:AA:4B:CB:10:0A:50:AB:3E:E5:6D:38:0C:7B
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 0D9E878B3A2DA46522A018DC8725F314CBDFDB73
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39342e302f32342d3234203d3e20313334373638.roa
Signing time: Tue 20 Jan 2026 02:21:35 +0000
ROA not before: Tue 20 Jan 2026 02:16:35 +0000
ROA not after: Tue 19 Jan 2027 02:21:35 +0000
asID: 134768
IP address blocks: 103.236.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:9e:87:8b:3a:2d:a4:65:22:a0:18:dc:87:25:f3:14:cb:df:db:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: Jan 20 02:16:35 2026 GMT
Not After : Jan 19 02:21:35 2027 GMT
Subject: CN=963F2163DDE435AA4BCB100A50AB3EE56D380C7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:03:d1:c4:3e:cf:26:73:b7:39:a0:48:ce:
c0:8a:53:c6:8e:58:9c:a9:be:e8:7e:8e:e4:c4:2f:
af:1e:92:3c:59:c4:d3:a7:2a:21:dd:49:9a:14:5a:
61:d4:a8:4b:31:90:ee:ff:a4:17:16:11:5c:c4:8a:
ff:d2:0a:6a:da:c6:95:d7:08:e0:4a:56:60:f7:61:
e7:cc:5f:0e:54:ac:23:bb:34:ae:65:f4:59:aa:a8:
12:ed:22:73:1e:db:e6:75:6c:ab:db:de:3e:2b:dc:
8e:4a:c3:8b:58:b1:f2:8c:1f:fb:12:1f:bd:01:e3:
68:46:ff:97:9f:76:60:99:e4:1f:b9:9a:9e:1a:1d:
d1:c0:74:0f:c8:0e:60:55:51:9a:92:e5:ad:a8:8d:
35:ba:72:4a:b8:64:a9:3d:81:b7:15:38:07:67:21:
7e:3a:b4:98:9c:66:f7:ec:e1:88:e0:a5:d5:a7:1c:
12:62:17:74:f5:09:bb:1c:e7:4c:9d:3f:5b:37:de:
59:e1:80:ab:09:12:72:dc:c5:54:3c:67:98:c7:dc:
bd:11:3a:d2:08:5e:ca:03:18:18:60:d7:45:38:ef:
1e:eb:99:a0:a4:0e:19:0e:da:62:2d:98:7c:86:15:
af:23:d1:a2:ec:1a:d4:5e:2d:6a:8e:72:b3:33:01:
eb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3F:21:63:DD:E4:35:AA:4B:CB:10:0A:50:AB:3E:E5:6D:38:0C:7B
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39342e302f32342d3234203d3e20313334373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.94.0/24
Signature Algorithm: sha256WithRSAEncryption
97:28:e3:6c:76:37:e1:0a:e4:c1:62:50:1b:63:db:26:38:4c:
fc:38:e6:dc:dd:40:da:e0:5e:1a:92:b7:5f:c6:82:3f:ac:75:
cb:5f:23:ef:b7:cb:e1:fb:e6:5c:6e:d6:eb:f5:97:03:94:63:
3e:8b:ff:f9:a9:6d:a2:ff:78:14:71:3d:b5:04:37:5c:3a:02:
56:74:34:37:d4:48:29:d8:e7:c5:f9:58:97:69:49:cf:1e:80:
5c:ba:55:97:ed:84:cc:e0:28:fb:06:8f:74:e4:82:89:09:ea:
99:df:ca:89:20:6d:5c:f3:3c:f6:86:8b:a1:1f:c6:52:e1:64:
a4:ba:1a:ea:61:92:f9:55:75:b6:ef:b1:09:86:68:67:26:62:
78:d8:9c:cf:2e:40:f0:25:5a:74:65:30:77:95:b0:2f:ba:da:
ce:ff:0d:b1:cf:3b:91:18:ed:67:e5:0a:b9:8d:f0:6b:53:4b:
0f:f5:10:2a:63:f3:50:52:db:89:a4:f1:a2:0f:f0:da:31:55:
2a:bf:36:5e:06:5a:93:76:9b:fe:21:77:69:ae:d4:9e:b8:36:
a8:00:fe:6b:ed:38:53:44:95:53:89:03:b6:ca:8c:1e:28:c1:
d2:ad:31:2e:bc:ab:54:c8:2a:35:02:42:b6:96:a8:03:5f:83:
8b:c2:57:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:44 2026 by rpki-client