This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e33322e302f31392d3332203d3e203538353933.roa
File: 35322e3133302e33322e302f31392d3332203d3e203538353933.roa (raw, json)
Hash identifier: TaXNna1Dld+PQ4rV4kwEt/hzeJ7wdeyhTCohXgzWwhs=
Subject key identifier: EF:CA:99:8F:46:F2:D1:0B:E2:6D:09:9F:81:78:91:FA:3D:5C:85:A2
Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F
Certificate serial: 6A4C11A798DDECB38D02EE9142E453F3ADD1CDD0
Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e33322e302f31392d3332203d3e203538353933.roa
Signing time: Tue 20 Jan 2026 02:08:24 +0000
ROA not before: Tue 20 Jan 2026 02:03:24 +0000
ROA not after: Tue 19 Jan 2027 02:08:24 +0000
asID: 58593
IP address blocks: 52.130.32.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 17:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:4c:11:a7:98:dd:ec:b3:8d:02:ee:91:42:e4:53:f3:ad:d1:cd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F
Validity
Not Before: Jan 20 02:03:24 2026 GMT
Not After : Jan 19 02:08:24 2027 GMT
Subject: CN=EFCA998F46F2D10BE26D099F817891FA3D5C85A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:f6:7f:fb:5c:8a:a7:68:f7:44:c8:e5:e1:
8e:e6:9f:55:67:ec:62:d3:35:3c:bf:0a:0f:f8:99:
ec:5b:5d:a1:17:ba:f9:a0:a9:11:4c:ed:9e:de:ab:
50:74:b8:ec:94:39:82:0d:1e:d4:fa:73:3b:d0:99:
62:20:7b:f0:0e:28:e4:19:86:fc:28:24:67:ba:30:
35:41:32:da:50:0d:92:ad:17:f7:37:85:f4:95:f1:
3f:8b:06:92:be:51:d5:3c:36:81:e3:b9:80:7a:22:
d1:c1:b6:bb:3a:ac:43:01:0b:2c:81:54:64:e0:e2:
bb:66:3f:66:a0:42:46:96:ed:3e:80:ef:0e:68:95:
4e:75:bf:18:bf:d8:49:42:04:70:8d:0b:0d:5a:78:
80:24:a3:2e:90:cb:63:8d:22:ff:52:d3:46:3c:00:
7a:d9:2e:2d:86:35:e9:32:45:8c:c5:06:10:57:b8:
29:0b:d6:90:a0:bb:93:28:09:a4:65:ba:a9:26:14:
d3:06:21:00:e2:8b:90:11:3d:a0:14:93:b5:76:ea:
c3:25:99:b6:f9:8a:d4:a1:9e:bd:d3:ba:a8:98:9f:
6b:da:6a:80:0d:c9:86:10:86:6d:da:5c:67:5c:59:
76:a9:a6:37:2f:61:b8:2e:01:50:ab:cd:72:ba:b3:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CA:99:8F:46:F2:D1:0B:E2:6D:09:9F:81:78:91:FA:3D:5C:85:A2
X509v3 Authority Key Identifier:
keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e33322e302f31392d3332203d3e203538353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.130.32.0/19
Signature Algorithm: sha256WithRSAEncryption
04:ec:b9:c3:5d:17:20:89:60:ed:6e:72:3b:16:06:39:c2:60:
cd:e5:86:06:2c:0b:1b:90:32:db:c2:74:64:87:87:70:52:01:
62:50:0a:d0:6a:ed:57:7e:20:6b:eb:fe:3d:68:14:60:fa:fc:
03:98:e8:cd:4f:52:69:36:76:51:bd:5c:58:ce:63:c1:d1:08:
87:6d:82:7d:59:6a:a1:1b:42:f5:f9:17:9b:4c:b4:57:b9:c0:
03:40:fb:f6:99:c1:ca:45:8c:45:7a:0d:b0:16:04:15:75:13:
f6:f7:50:3d:e8:24:f6:2b:e3:d6:31:3c:26:5e:19:a1:9c:f2:
7a:40:dd:2f:95:17:63:a6:cf:1f:eb:34:0d:15:41:2d:bc:a8:
03:77:94:c2:6b:19:ca:47:4b:dd:01:9e:07:31:ec:df:43:02:
3e:70:d9:8a:89:cd:31:41:59:68:d9:99:b5:40:da:78:be:cd:
2e:fd:af:5e:1a:d5:b7:38:60:5a:3a:6b:12:ee:71:2f:c6:c3:
74:a8:17:dd:67:67:63:c1:43:4e:fe:da:d8:85:3a:49:b6:1f:
4b:2c:65:4c:d1:06:18:2b:f8:bd:ce:55:9c:e7:2c:61:45:20:
a7:05:3a:4e:94:9f:41:d8:6d:25:a5:bb:1f:ac:53:ab:bd:7c:
5d:c9:91:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:22:29 2026 by rpki-client