This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e3131322e302f32302d3332203d3e203538353933.roa File: 35322e3133302e3131322e302f32302d3332203d3e203538353933.roa (raw, json) Hash identifier: X9x1G+66O/IP7eldA7B5QA4a1jvmKEuYQFj2+IV1wr4= Subject key identifier: 41:17:89:70:8F:EE:A9:2B:2D:70:22:6C:16:45:13:3F:EA:50:A5:67 Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 3DE078A68B019CF6833DB749C8C5961C9B4EA65F Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e3131322e302f32302d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:25 +0000 ROA not before: Tue 20 Jan 2026 02:03:25 +0000 ROA not after: Tue 19 Jan 2027 02:08:25 +0000 asID: 58593 IP address blocks: 52.130.112.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e0:78:a6:8b:01:9c:f6:83:3d:b7:49:c8:c5:96:1c:9b:4e:a6:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:25 2026 GMT Not After : Jan 19 02:08:25 2027 GMT Subject: CN=411789708FEEA92B2D70226C1645133FEA50A567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3c:79:53:f9:63:c7:ea:44:98:dd:22:94:26: 8d:de:ed:d2:18:09:c5:c0:90:00:b1:6b:41:f6:c1: c7:bf:9d:d8:b8:77:b1:8d:90:97:2f:c5:f6:10:14: 1a:4d:6c:b1:22:47:3b:32:ce:1f:34:94:13:02:b9: 36:9e:5d:f3:82:76:27:4f:76:93:c8:8f:98:85:46: ab:be:ab:74:40:d1:fa:0d:0d:dc:8e:81:a2:96:ef: aa:9d:10:f0:73:e5:dc:b8:5f:52:9a:7e:4c:b3:fb: 83:01:52:f1:de:91:1a:57:31:09:9b:6a:0c:cd:a8: 4d:3a:08:ba:66:4c:48:f1:9a:34:09:a1:2c:59:6a: c5:e8:75:4a:2b:9b:00:f8:7a:66:17:c5:f4:33:6c: 3c:39:7e:ea:ff:3f:bf:b1:fe:03:af:c2:de:31:7c: 0e:5b:3d:72:f8:0c:e3:e5:2d:f0:1a:52:03:b8:35: 74:ce:d7:85:fd:cf:2d:dd:44:11:68:03:44:13:ae: 77:61:2a:43:e1:74:84:17:21:41:f1:25:b7:00:31: b4:6d:62:5e:eb:ec:22:1c:97:e4:91:d2:73:9d:0c: b7:73:de:7e:22:a3:b4:a7:93:4f:cd:64:e9:b3:aa: 4d:a5:a4:03:ac:46:3b:0d:d3:d1:d5:ec:61:d6:7b: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:17:89:70:8F:EE:A9:2B:2D:70:22:6C:16:45:13:3F:EA:50:A5:67 X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e3131322e302f32302d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.130.112.0/20 Signature Algorithm: sha256WithRSAEncryption 4d:3f:dd:78:3d:24:94:eb:ee:95:f9:1a:b5:0c:c8:df:9c:64: 4e:47:5b:32:1c:96:0a:9b:3c:51:29:45:4d:58:d5:53:65:cc: a1:5f:96:9b:68:3c:a4:67:9b:91:3f:db:84:6c:39:cd:7b:49: 69:ef:99:64:88:4a:01:e3:28:78:04:1a:cb:92:46:10:77:73: 52:4a:93:6a:7c:92:8d:a9:8c:99:3d:aa:4d:24:9d:46:f3:98: 07:d9:6a:dd:cb:55:af:6d:1b:f6:f0:cd:7a:f7:2f:1b:c1:26: fe:e3:76:b7:ac:bd:ca:5b:dd:c8:d7:e0:0c:73:56:05:f2:f7: 62:3c:8e:98:5a:d3:53:73:8d:40:87:2e:22:5e:d9:91:a6:38: ed:a6:28:f2:c3:77:e4:2f:9f:57:86:3e:f7:48:4e:99:3b:42: 31:42:76:10:68:77:ac:31:87:f8:8a:65:51:dd:55:01:0f:a7: 99:3e:4d:b1:91:1f:23:92:f8:c8:87:44:5a:56:ba:b9:e8:7a: 47:91:af:a4:89:a0:58:6e:81:a1:8d:1e:44:83:98:15:13:f9: 83:18:8b:15:8f:ec:e3:a9:ad:63:2d:1c:61:06:03:89:cf:ad: ba:5f:5e:b9:a8:be:4c:71:da:2b:0a:41:f3:8e:8e:41:99:a1: f1:0f:f2:a7 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPeB4posBnPaDPbdJyMWWHJtOpl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjVaFw0yNzAxMTkwMjA4MjVaMDMxMTAvBgNV BAMTKDQxMTc4OTcwOEZFRUE5MkIyRDcwMjI2QzE2NDUxMzNGRUE1MEE1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUPHlT+WPH6kSY3SKUJo3e7dIY CcXAkACxa0H2wce/ndi4d7GNkJcvxfYQFBpNbLEiRzsyzh80lBMCuTaeXfOCdidP dpPIj5iFRqu+q3RA0foNDdyOgaKW76qdEPBz5dy4X1Kafkyz+4MBUvHekRpXMQmb agzNqE06CLpmTEjxmjQJoSxZasXodUormwD4emYXxfQzbDw5fur/P7+x/gOvwt4x fA5bPXL4DOPlLfAaUgO4NXTO14X9zy3dRBFoA0QTrndhKkPhdIQXIUHxJbcAMbRt Yl7r7CIcl+SR0nOdDLdz3n4io7Snk0/NZOmzqk2lpAOsRjsN09HV7GHWewAtAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUQReJcI/uqSstcCJsFkUTP+pQpWcwHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MzIyMTk3MTg3Nzg5MS8xLzM1MzIyZTMxMzMz MDJlMzEzMTMyMmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzUzODM1MzkzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBDSCcDANBgkqhkiG9w0BAQsFAAOCAQEATT/deD0klOvulfkatQzI35xk TkdbMhyWCps8USlFTVjVU2XMoV+Wm2g8pGebkT/bhGw5zXtJae+ZZIhKAeMoeAQa y5JGEHdzUkqTanySjamMmT2qTSSdRvOYB9lq3ctVr20b9vDNevcvG8Em/uN2t6y9 ylvdyNfgDHNWBfL3YjyOmFrTU3ONQIcuIl7ZkaY47aYo8sN35C+fV4Y+90hOmTtC MUJ2EGh3rDGH+IplUd1VAQ+nmT5NsZEfI5L4yIdEWla6ueh6R5GvpImgWG6BoY0e RIOYFRP5gxiLFY/s46mtYy0cYQYDic+tul9euai+THHaKwpB846OQZmh8Q/ypw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:30 2026 by rpki-client