This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39352e302f32342d3234203d3e20313334373638.roa
File: 3130332e3233362e39352e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier: rCUs2lLW5jslZo2evC1goJLjh5sDaBX8K38XoSI79XY=
Subject key identifier: 6B:8A:37:69:B5:AD:42:31:90:BC:5F:D6:E1:21:B0:E2:C8:F0:30:87
Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial: 2A98047863505B4EEC4BE4BFADE37E4AE233A9A6
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39352e302f32342d3234203d3e20313334373638.roa
Signing time: Tue 20 Jan 2026 02:21:36 +0000
ROA not before: Tue 20 Jan 2026 02:16:36 +0000
ROA not after: Tue 19 Jan 2027 02:21:36 +0000
asID: 134768
IP address blocks: 103.236.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 10:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:98:04:78:63:50:5b:4e:ec:4b:e4:bf:ad:e3:7e:4a:e2:33:a9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Validity
Not Before: Jan 20 02:16:36 2026 GMT
Not After : Jan 19 02:21:36 2027 GMT
Subject: CN=6B8A3769B5AD423190BC5FD6E121B0E2C8F03087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:7f:dd:5a:a5:38:1f:bd:c0:68:9c:e6:61:
68:3f:f9:71:39:a8:23:d2:6e:ab:c5:13:b9:66:3d:
b8:0f:4d:9e:c8:a4:40:8c:a9:d6:3b:ff:17:da:b5:
fc:f5:e7:05:a9:15:91:15:fc:4d:ed:62:8e:58:78:
01:27:b4:e9:a4:0c:a2:41:5e:f0:60:1a:13:91:d3:
3e:bf:9f:a0:40:21:e4:e2:71:8a:d5:04:ea:f9:98:
b1:dd:47:d0:84:4e:2a:82:6d:0a:5d:38:e9:15:79:
0d:a3:a4:f6:6a:01:15:bb:43:b9:18:7c:03:1a:ce:
be:e5:33:8e:ec:ca:bf:fe:9d:82:bf:16:fd:19:22:
98:0b:d6:b8:b3:8e:6b:a7:9f:eb:1e:e0:3c:41:8c:
6a:38:27:19:b2:ec:db:16:71:31:56:91:cc:b2:cb:
df:53:82:b7:01:69:53:03:d4:ff:41:ca:1c:4f:e9:
f0:53:54:26:70:4e:c6:45:52:5a:fd:f1:2e:d6:43:
ff:d3:95:3f:6f:3a:f4:9b:44:1d:7f:43:1d:36:ae:
d9:d6:62:9f:d7:8d:6f:22:5f:5c:f1:2c:08:4f:75:
6a:18:38:00:87:e2:82:12:5f:e9:2f:57:15:3e:9f:
4a:d8:35:d0:b3:b9:6d:73:af:8b:97:68:32:c7:fb:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8A:37:69:B5:AD:42:31:90:BC:5F:D6:E1:21:B0:E2:C8:F0:30:87
X509v3 Authority Key Identifier:
keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39352e302f32342d3234203d3e20313334373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.95.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d1:cb:54:01:ec:c1:70:d2:1f:27:31:4f:5e:65:33:c6:68:
93:20:14:07:7f:3b:37:18:0a:28:18:fd:c9:66:49:b4:f8:6e:
3b:d4:1a:ac:75:68:00:99:20:c4:91:89:d0:e7:74:d5:07:ed:
75:45:d5:fb:17:c8:23:62:0c:4b:f6:70:04:ef:19:c8:1f:0d:
31:68:23:81:5d:44:86:0d:b8:1f:c3:26:91:13:42:45:1c:df:
80:58:38:cc:a8:2b:ba:7c:e3:6a:6d:5e:2a:26:39:8a:71:91:
e6:da:85:e5:47:3a:46:30:0b:7d:1b:ce:f1:54:f2:10:a8:2f:
f7:a8:36:fe:e3:e3:8d:0c:97:fb:51:09:34:db:64:be:33:04:
57:22:66:4f:bb:b1:e8:c3:6a:fa:5d:03:d1:c5:2d:2f:59:94:
5c:9b:4f:31:25:c9:cd:89:ae:de:23:85:ce:6d:0a:af:60:a1:
07:fc:df:76:77:36:cf:0f:e7:21:e5:e7:01:d3:ff:30:68:e6:
06:5f:dc:66:18:3e:f3:32:b0:60:39:fc:2e:e7:e9:fc:8c:23:
74:2d:7d:ee:0b:50:d8:16:a7:91:b3:a7:84:eb:84:e2:74:49:
46:06:00:27:da:2c:97:ad:f0:0d:50:da:96:b3:18:aa:09:72:
b9:1d:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:44 2026 by rpki-client