This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3130332e3233362e36342e302f32322d3234203d3e2034383136.roa
File: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (raw, json)
Hash identifier: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=
Subject key identifier: 8A:E8:10:13:24:EB:1C:64:02:A6:C2:38:5D:26:D3:31:82:D3:A4:B0
Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337
Certificate serial: 3488E80C218BF727EF6286D3F9B41DC350CF3D68
Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3130332e3233362e36342e302f32322d3234203d3e2034383136.roa
Signing time: Tue 20 Jan 2026 02:08:26 +0000
ROA not before: Tue 20 Jan 2026 02:03:26 +0000
ROA not after: Tue 19 Jan 2027 02:08:26 +0000
asID: 4816
IP address blocks: 103.236.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 13:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:88:e8:0c:21:8b:f7:27:ef:62:86:d3:f9:b4:1d:c3:50:cf:3d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337
Validity
Not Before: Jan 20 02:03:26 2026 GMT
Not After : Jan 19 02:08:26 2027 GMT
Subject: CN=8AE8101324EB1C6402A6C2385D26D33182D3A4B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:28:18:29:e4:ef:79:28:09:52:3d:94:c6:
8f:59:e5:c0:79:b7:75:b1:4f:29:c1:6c:20:70:e3:
f0:f2:6b:62:1a:bb:45:bd:49:e2:e0:1e:2b:59:64:
b0:a1:9a:ca:01:d5:40:14:b5:6b:18:a5:16:c4:3b:
96:fa:63:0b:70:74:63:68:6a:7c:e4:a4:54:a5:9f:
c0:fc:88:1e:15:27:af:ee:74:67:6e:4d:9c:85:85:
32:3c:d2:fa:62:05:86:cd:46:70:41:82:86:01:d6:
ac:23:51:1c:fe:2e:fe:6f:e9:94:d1:06:8d:cd:4b:
d7:9d:4c:d1:46:46:ca:f4:18:a3:7c:e2:8e:cc:38:
6c:8d:78:30:4c:39:5c:0f:b1:e5:34:8e:29:21:6b:
b1:44:9e:09:f3:66:47:24:26:86:41:4c:8a:2c:ac:
67:af:cd:fa:43:d4:7d:7d:8b:ba:3b:87:fe:fe:cd:
43:9c:aa:28:14:f5:7b:41:34:7f:33:6d:cb:9c:f3:
73:9d:29:74:81:f8:fa:15:03:6e:fd:24:75:bc:88:
2f:a7:f1:34:f6:a2:e2:de:58:d8:a2:2f:cb:fb:7e:
8e:3e:12:58:c8:97:8c:fc:5b:a0:00:8c:95:86:bc:
50:30:da:ba:6d:11:be:d5:ac:3f:19:57:89:69:93:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E8:10:13:24:EB:1C:64:02:A6:C2:38:5D:26:D3:31:82:D3:A4:B0
X509v3 Authority Key Identifier:
keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/3130332e3233362e36342e302f32322d3234203d3e2034383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.236.64.0/22
Signature Algorithm: sha256WithRSAEncryption
19:a1:49:ff:55:c4:81:4c:7d:3c:f5:94:6f:91:bf:9e:27:60:
01:9b:1f:2c:a0:8c:bd:38:1c:a6:70:94:f9:cf:4b:d8:44:c1:
ad:90:6b:91:b3:3f:6b:69:91:8e:af:40:9f:6a:4f:27:0b:55:
30:74:de:a4:2d:f3:19:d0:38:9c:62:94:cd:5e:e8:ac:4a:e5:
95:21:2e:2d:af:28:76:08:60:99:e7:10:21:b2:85:42:64:32:
90:00:4e:43:35:4f:ce:3c:27:d8:07:85:7c:7d:b9:47:03:6d:
c7:19:10:5e:9b:fa:6a:05:71:4b:a6:ec:0a:4d:b0:00:da:76:
6a:27:d9:23:27:a5:dc:6a:00:eb:95:37:4d:73:b0:c4:b5:cb:
9f:2d:ea:eb:18:c4:2c:90:e6:e8:c3:45:a7:8f:67:27:dd:92:
fa:fd:b4:1d:0a:93:ba:b8:4f:65:cf:44:3f:98:4b:0e:53:4a:
7a:3b:5d:1c:66:8a:c9:a4:44:38:6a:b9:72:dd:ea:fb:31:01:
d6:f6:15:f1:56:dc:aa:0a:f9:68:64:66:49:b5:a8:5f:a3:00:
74:73:ed:61:4d:45:91:79:71:d7:f8:d2:cc:b6:b4:9e:35:09:
7b:07:c9:50:50:67:90:19:00:ed:fa:5b:9e:68:76:5e:4e:27:
cc:62:c4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:50:27 2026 by rpki-client