This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e302e302f32302d3332203d3e203538353933.roa File: 35322e3133302e302e302f32302d3332203d3e203538353933.roa (raw, json) Hash identifier: Vu2jxMs7CK3kLgU26e5xvo6YxnU5hanMh+ZAQYoDfno= Subject key identifier: 80:4C:6F:8E:1C:65:70:86:1E:7D:E9:B7:85:32:A9:E5:32:04:C9:D3 Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 35B1719F14D53BF646A96E3624590783F76EFAD2 Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e302e302f32302d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:24 +0000 ROA not before: Tue 20 Jan 2026 02:03:24 +0000 ROA not after: Tue 19 Jan 2027 02:08:24 +0000 asID: 58593 IP address blocks: 52.130.0.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b1:71:9f:14:d5:3b:f6:46:a9:6e:36:24:59:07:83:f7:6e:fa:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:24 2026 GMT Not After : Jan 19 02:08:24 2027 GMT Subject: CN=804C6F8E1C6570861E7DE9B78532A9E53204C9D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:80:99:e7:43:75:4e:ca:bf:48:c7:3d:4b:e0: 9a:49:7f:bd:21:34:6e:91:68:f9:f1:52:f6:68:4c: e2:e7:66:f3:b5:b7:a4:14:13:f9:45:12:13:d9:4a: 96:14:b8:9f:d9:2b:66:69:a8:dd:4f:e3:f1:f6:fe: b5:f7:78:44:5a:50:6c:ae:2e:fc:2d:ca:d6:db:4c: cb:ab:03:f1:e9:61:80:dc:ee:44:fe:a4:da:8b:a9: 05:ad:16:5d:4b:79:c5:46:f6:b3:eb:c5:55:52:df: 15:fd:5c:c4:28:b9:db:a1:30:0b:de:53:2e:f4:0c: b1:03:5c:39:d6:b6:80:f8:3a:60:83:2e:8e:10:a0: 07:f8:d7:91:69:7f:63:3e:16:69:63:a8:39:4c:d5: 45:83:29:03:12:7c:50:32:ba:98:4c:f4:5e:e8:ba: 61:e0:af:a9:70:90:86:2f:48:f1:ab:e4:8b:63:62: 02:f2:f2:c7:c6:49:43:d1:48:e9:60:8e:46:7a:37: cf:10:bb:c3:1c:6e:c9:77:09:c1:61:1d:10:aa:c8: fc:45:ac:b9:24:b0:73:85:d7:97:bb:dc:66:a9:bf: ca:37:af:55:70:28:a4:33:f2:29:68:df:3d:41:dc: f3:b9:5a:d3:4f:3d:53:7a:19:ae:86:b4:15:61:99: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4C:6F:8E:1C:65:70:86:1E:7D:E9:B7:85:32:A9:E5:32:04:C9:D3 X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e302e302f32302d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.130.0.0/20 Signature Algorithm: sha256WithRSAEncryption 45:23:63:f1:ba:f9:bc:e9:f9:3a:63:06:a8:10:61:a9:c0:c5: bc:52:70:f7:79:47:de:11:bd:de:b1:86:f8:46:10:17:43:8d: 86:23:f5:18:34:4f:e1:31:a3:c8:7a:64:a5:67:a4:13:34:dd: e8:f8:1c:24:18:1e:a7:51:42:07:b1:d3:39:90:db:ff:a2:02: 94:b7:ea:e8:23:28:ca:fc:1a:17:73:51:95:34:80:f6:22:85: 0c:e7:22:72:50:33:26:12:85:f2:21:25:90:73:c6:4c:0c:82: de:93:de:e6:30:ad:44:ae:69:8e:b3:5c:53:57:f0:04:25:5f: 64:b7:63:6a:27:78:12:71:2a:42:ac:1b:d9:7d:5e:71:46:fd: 90:66:a9:5d:46:6a:88:fc:1e:6f:40:e9:36:d8:f7:37:ba:e4: df:73:9a:00:82:ca:5e:cb:2c:b1:ee:1e:ae:45:ee:44:04:3e: 99:0c:fa:2e:fb:df:ff:87:fc:27:13:cc:38:8a:d9:e1:c3:43: d9:b2:90:0c:77:ec:5e:5e:be:f3:58:f3:da:88:db:79:ed:16: de:57:93:8f:38:be:4c:0d:a8:ed:c5:aa:48:f6:ad:26:e9:3e: 5e:b1:e5:e8:22:f4:63:2a:ad:49:b4:2e:ac:e2:c3:c3:a4:79: be:f9:24:5d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUNbFxnxTVO/ZGqW42JFkHg/du+tIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjRaFw0yNzAxMTkwMjA4MjRaMDMxMTAvBgNV BAMTKDgwNEM2RjhFMUM2NTcwODYxRTdERTlCNzg1MzJBOUU1MzIwNEM5RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCogJnnQ3VOyr9Ixz1L4JpJf70h NG6RaPnxUvZoTOLnZvO1t6QUE/lFEhPZSpYUuJ/ZK2ZpqN1P4/H2/rX3eERaUGyu LvwtytbbTMurA/HpYYDc7kT+pNqLqQWtFl1LecVG9rPrxVVS3xX9XMQouduhMAve Uy70DLEDXDnWtoD4OmCDLo4QoAf415Fpf2M+FmljqDlM1UWDKQMSfFAyuphM9F7o umHgr6lwkIYvSPGr5ItjYgLy8sfGSUPRSOlgjkZ6N88Qu8Mcbsl3CcFhHRCqyPxF rLkksHOF15e73Gapv8o3r1VwKKQz8ilo3z1B3PO5WtNPPVN6Ga6GtBVhmSjdAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUgExvjhxlcIYefem3hTKp5TIEydMwHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzEvMzUzMjJlMzEzMzMw MmUzMDJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDM1MzgzNTM5MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAQ0ggAwDQYJKoZIhvcNAQELBQADggEBAEUjY/G6+bzp+TpjBqgQYanAxbxScPd5 R94Rvd6xhvhGEBdDjYYj9Rg0T+Exo8h6ZKVnpBM03ej4HCQYHqdRQgex0zmQ2/+i ApS36ugjKMr8GhdzUZU0gPYihQznInJQMyYShfIhJZBzxkwMgt6T3uYwrUSuaY6z XFNX8AQlX2S3Y2oneBJxKkKsG9l9XnFG/ZBmqV1Gaoj8Hm9A6TbY9ze65N9zmgCC yl7LLLHuHq5F7kQEPpkM+i773/+H/CcTzDiK2eHDQ9mykAx37F5evvNY89qI23nt Ft5Xk484vkwNqO3Fqkj2rSbpPl6x5egi9GMqrUm0Lqziw8Okeb75JF0= -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:16 2026 by rpki-client