This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3130332e3233362e35322e302f32322d3234203d3e2034383136.roa
File: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (raw, json)
Hash identifier: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=
Subject key identifier: 1E:F1:DE:37:66:68:5D:9D:7D:CA:87:38:C7:41:F2:0E:B8:21:DD:FD
Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337
Certificate serial: 7C3E4EEEB705867C22996E6574427A9FB7DA202D
Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3130332e3233362e35322e302f32322d3234203d3e2034383136.roa
Signing time: Tue 20 Jan 2026 02:08:26 +0000
ROA not before: Tue 20 Jan 2026 02:03:26 +0000
ROA not after: Tue 19 Jan 2027 02:08:26 +0000
asID: 4816
IP address blocks: 103.236.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 13:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:3e:4e:ee:b7:05:86:7c:22:99:6e:65:74:42:7a:9f:b7:da:20:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337
Validity
Not Before: Jan 20 02:03:26 2026 GMT
Not After : Jan 19 02:08:26 2027 GMT
Subject: CN=1EF1DE3766685D9D7DCA8738C741F20EB821DDFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:ce:f8:de:9b:3a:54:d6:3a:db:b9:cc:9d:
0c:18:2a:81:34:0c:90:2f:53:61:d1:43:4e:73:ae:
2f:70:42:63:24:d8:14:fa:a4:dc:45:55:eb:bd:a8:
15:9e:25:79:1b:7b:67:b9:9e:88:7c:8c:35:a4:bc:
75:6e:2a:85:88:b4:f4:bd:4a:a7:4d:1a:78:c8:b9:
aa:41:d6:38:f4:4d:8e:0d:5b:e7:e0:d0:e3:94:44:
70:92:56:56:a1:77:3e:6d:c6:02:62:f6:ed:5d:ae:
d6:03:79:a5:55:40:16:89:54:1d:45:40:3e:58:9d:
66:11:5a:c8:42:da:06:99:b1:e1:88:f2:55:98:98:
82:c8:4b:46:32:39:7f:64:d4:11:b7:96:d3:34:61:
c2:e9:ff:bb:e7:be:20:6f:49:13:fc:cf:ab:3e:09:
37:fd:db:21:ab:09:9a:d4:57:f8:91:bf:d6:6f:da:
e2:f2:83:af:8c:31:a3:33:fb:96:e7:20:15:55:c3:
ce:cc:b5:0c:ce:86:82:54:a6:f0:a9:6c:e4:7c:fa:
e3:99:6d:f0:18:72:f2:8a:28:d3:b2:a7:4e:ef:a7:
75:e2:48:62:c2:c5:e7:df:b5:6c:5a:c8:42:62:0f:
85:51:00:d1:76:19:26:c6:a4:62:6e:af:e9:7d:2e:
a6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F1:DE:37:66:68:5D:9D:7D:CA:87:38:C7:41:F2:0E:B8:21:DD:FD
X509v3 Authority Key Identifier:
keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3130332e3233362e35322e302f32322d3234203d3e2034383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.52.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:b1:18:83:af:2c:66:23:d3:17:c2:21:97:de:9e:53:85:54:
ac:2a:5c:3e:7a:96:e2:df:bd:48:00:3d:0e:5b:b3:0d:f2:64:
7f:8c:21:68:71:b0:5c:5b:ff:af:07:d5:c1:73:c6:c8:8d:52:
72:a3:d6:06:55:b3:df:84:87:6f:8d:35:13:85:b5:a3:e0:2e:
f9:06:76:d3:e7:d0:30:f0:a1:f0:54:0f:ac:34:24:60:fb:1f:
21:39:5e:04:94:a8:3b:ba:99:86:2e:90:74:e7:78:2f:c9:26:
a6:b5:c7:ca:d9:9c:ad:99:a8:c3:3f:9d:ef:b9:c1:ea:dc:92:
3f:a1:71:56:52:e6:79:c2:80:3d:1b:ed:f9:7e:dd:67:b2:22:
5f:6f:d9:cc:e2:07:b9:d7:9d:07:77:fd:09:ac:f2:6f:6d:5c:
03:02:78:0a:d6:86:c0:1e:dc:41:8a:3c:52:93:0c:58:8d:49:
db:1c:dd:3f:5a:60:dc:39:35:60:d4:83:b6:1e:2c:da:7c:58:
99:d3:85:16:86:b4:7f:3b:93:e2:01:d7:6e:41:f7:b0:93:df:
8a:f0:b3:d1:96:1c:1f:0d:b4:40:56:b5:b1:c2:3f:0e:cc:5d:
bb:a6:04:55:a6:a2:49:1e:05:2c:e1:5e:01:96:e0:bf:ca:cc:
71:e0:e9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:04:37 2026 by rpki-client