This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e3132382e302f31382d3332203d3e203538353933.roa File: 35322e3133302e3132382e302f31382d3332203d3e203538353933.roa (raw, json) Hash identifier: a7a2yAbEPau4rOfXkuk4CqfYJnYw6MKh/LA/cb7L83c= Subject key identifier: E8:94:CD:92:1C:86:0C:2F:9B:67:D4:9D:2B:3E:99:E5:83:02:01:FA Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 4F9591BD6803BB735F5959EAD4BBCA4C4F6D0732 Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e3132382e302f31382d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:24 +0000 ROA not before: Tue 20 Jan 2026 02:03:24 +0000 ROA not after: Tue 19 Jan 2027 02:08:24 +0000 asID: 58593 IP address blocks: 52.130.128.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:95:91:bd:68:03:bb:73:5f:59:59:ea:d4:bb:ca:4c:4f:6d:07:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:24 2026 GMT Not After : Jan 19 02:08:24 2027 GMT Subject: CN=E894CD921C860C2F9B67D49D2B3E99E5830201FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:67:5a:db:2c:4a:f0:1d:1d:0c:13:fe:9a:2e: 29:35:7e:a5:e3:37:1f:1b:8e:64:09:08:f3:72:51: e3:f5:e2:df:2c:cb:7e:02:a6:d0:c9:e0:ab:e5:79: 31:81:60:8d:a1:ca:ee:16:a6:a4:49:57:38:46:f5: cb:b0:5c:e0:45:86:f0:0a:b8:2d:13:5d:99:74:29: cf:9d:8b:a8:0b:4e:db:d7:1a:5e:3e:8e:63:d2:ab: 9f:f7:95:e6:d9:7d:b1:32:4a:2e:66:7f:64:c9:f5: 32:4b:32:b3:14:58:34:fe:9a:ed:5b:15:82:9b:62: 3b:0e:6a:2d:96:53:37:f2:f7:e8:7d:87:ab:55:c5: c6:ff:57:4d:95:3c:90:29:0f:15:2a:56:e0:03:20: 66:33:36:ca:f5:5a:a3:2c:a5:db:eb:02:94:9f:f7: 10:9f:c6:d5:35:19:17:1a:11:2d:a7:ec:14:86:15: de:c8:99:da:49:03:20:9a:96:65:a8:ac:1b:bb:1a: c3:61:8d:0e:a3:2a:d6:71:28:eb:c6:78:a2:1b:8e: 40:7c:a4:85:89:80:57:ee:ce:96:b2:46:3d:df:e9: 78:9e:7e:6c:68:66:ee:72:63:e8:0d:6e:1f:0c:1b: 4b:65:f4:53:03:7c:bb:dd:25:97:0d:30:78:69:a6: f9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:94:CD:92:1C:86:0C:2F:9B:67:D4:9D:2B:3E:99:E5:83:02:01:FA X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e3132382e302f31382d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.130.128.0/18 Signature Algorithm: sha256WithRSAEncryption 81:ba:21:f9:79:a8:de:ec:c1:e3:aa:ad:97:96:55:f3:75:c3: 58:b8:54:9a:84:36:55:40:5a:30:72:b9:46:ad:42:0d:59:17: 03:02:68:7c:73:95:ff:f2:f4:d4:b7:4e:ef:a7:21:f1:2f:c6: ee:ae:fc:c9:b6:5a:44:81:a7:77:1f:d9:52:bc:18:0e:d5:73: cc:bc:ae:a8:4a:3c:23:b0:3b:ed:54:28:07:e6:81:73:6c:27: 17:82:69:b4:d7:23:79:1d:5a:ee:35:8d:cf:83:60:0d:ad:27: 43:11:e3:3e:e6:f4:a9:5d:e9:7f:89:c0:71:04:ae:3c:0f:aa: 03:d7:1f:0e:70:bf:ba:ef:45:23:bc:a0:87:f2:0a:41:75:e4: 11:1d:ca:03:dc:88:c9:f2:46:05:f4:5a:54:f6:3c:75:b6:7e: f2:7c:73:d4:5c:0e:e9:52:25:91:78:6d:aa:bc:bc:6b:cf:3c: be:8c:c0:f4:bb:7c:53:63:5b:0e:f7:87:03:13:49:47:ef:fc: 7e:7a:71:4c:8d:c0:30:fd:22:19:3c:70:c4:e3:ef:5e:76:e6: 97:c0:fe:e2:87:d4:79:3a:ca:d0:6c:1c:0a:08:cd:8b:77:a0: 56:8d:a1:38:ee:ea:ff:c3:de:d0:19:22:6a:d9:06:2f:85:1d: d4:85:f5:19 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUT5WRvWgDu3NfWVnq1LvKTE9tBzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjRaFw0yNzAxMTkwMjA4MjRaMDMxMTAvBgNV BAMTKEU4OTRDRDkyMUM4NjBDMkY5QjY3RDQ5RDJCM0U5OUU1ODMwMjAxRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVZ1rbLErwHR0ME/6aLik1fqXj Nx8bjmQJCPNyUeP14t8sy34CptDJ4KvleTGBYI2hyu4WpqRJVzhG9cuwXOBFhvAK uC0TXZl0Kc+di6gLTtvXGl4+jmPSq5/3lebZfbEySi5mf2TJ9TJLMrMUWDT+mu1b FYKbYjsOai2WUzfy9+h9h6tVxcb/V02VPJApDxUqVuADIGYzNsr1WqMspdvrApSf 9xCfxtU1GRcaES2n7BSGFd7ImdpJAyCalmWorBu7GsNhjQ6jKtZxKOvGeKIbjkB8 pIWJgFfuzpayRj3f6XiefmxoZu5yY+gNbh8MG0tl9FMDfLvdJZcNMHhppvmpAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU6JTNkhyGDC+bZ9SdKz6Z5YMCAfowHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MzIyMTk3MTg3Nzg5MS8xLzM1MzIyZTMxMzMz MDJlMzEzMjM4MmUzMDJmMzEzODJkMzMzMjIwM2QzZTIwMzUzODM1MzkzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBjSCgDANBgkqhkiG9w0BAQsFAAOCAQEAgboh+Xmo3uzB46qtl5ZV83XD WLhUmoQ2VUBaMHK5Rq1CDVkXAwJofHOV//L01LdO76ch8S/G7q78ybZaRIGndx/Z UrwYDtVzzLyuqEo8I7A77VQoB+aBc2wnF4JptNcjeR1a7jWNz4NgDa0nQxHjPub0 qV3pf4nAcQSuPA+qA9cfDnC/uu9FI7ygh/IKQXXkER3KA9yIyfJGBfRaVPY8dbZ+ 8nxz1FwO6VIlkXhtqry8a888vozA9Lt8U2NbDveHAxNJR+/8fnpxTI3AMP0iGTxw xOPvXnbml8D+4ofUeTrK0GwcCgjNi3egVo2hOO7q/8Pe0BkiatkGL4Ud1IX1GQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:25 2026 by rpki-client