This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e39362e302f32302d3332203d3e203538353933.roa File: 35322e3133302e39362e302f32302d3332203d3e203538353933.roa (raw, json) Hash identifier: SC40P6NDcdhOegIh1hNUJy6M7bQHc/Eyem9IEbFOErk= Subject key identifier: 35:5D:B7:DC:7E:18:FC:FC:E7:DE:9A:19:9B:9A:DC:D3:B1:86:BC:5D Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 0B4EDBDF677C2163EEF8D5045FEB35EC33036972 Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e39362e302f32302d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:24 +0000 ROA not before: Tue 20 Jan 2026 02:03:24 +0000 ROA not after: Tue 19 Jan 2027 02:08:24 +0000 asID: 58593 IP address blocks: 52.130.96.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4e:db:df:67:7c:21:63:ee:f8:d5:04:5f:eb:35:ec:33:03:69:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:24 2026 GMT Not After : Jan 19 02:08:24 2027 GMT Subject: CN=355DB7DC7E18FCFCE7DE9A199B9ADCD3B186BC5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:40:c7:44:8b:18:dc:39:ef:75:8d:6a:4d: 68:64:77:5b:23:73:cc:81:b7:5d:f6:20:30:59:0c: 4e:2c:a9:6d:3b:2d:6d:d3:73:a9:ac:bf:01:fd:f7: 13:3b:ae:0e:a9:01:04:a6:a0:5e:bc:b3:6d:06:e5: 4c:12:2f:8f:14:49:3d:47:c0:bb:99:04:2e:ab:aa: c8:d6:b6:be:6a:f1:79:49:f0:39:b7:56:79:0b:df: 9d:52:e9:ae:10:25:71:c4:32:1d:c0:a2:3e:ff:b8: 84:b0:4a:ad:79:58:f5:f2:b8:88:47:b6:95:a3:db: a7:6e:8c:b2:82:65:49:dd:f8:fc:11:b3:4f:92:f2: 92:1d:0a:ae:23:1e:5b:09:b1:06:b9:4a:4a:f5:f9: 5e:c5:d5:da:5e:31:c2:41:b3:11:a1:8f:52:55:8b: 06:49:5c:96:64:88:ca:e4:28:37:1c:d3:65:2d:6e: 75:19:93:13:4b:53:1e:33:98:22:be:2f:77:d2:f3: 1f:7f:1e:e5:77:4a:e1:3b:16:18:0f:06:3f:21:b1: 65:13:53:f1:6e:51:b5:33:fd:b0:5f:99:29:30:71: 4b:22:6d:97:3c:1a:c9:06:89:5e:06:52:a7:6c:4b: e2:95:5d:6f:ae:70:db:05:d7:fc:8f:6e:57:26:a8: 6b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5D:B7:DC:7E:18:FC:FC:E7:DE:9A:19:9B:9A:DC:D3:B1:86:BC:5D X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133302e39362e302f32302d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.130.96.0/20 Signature Algorithm: sha256WithRSAEncryption 14:ef:af:4d:2d:5d:b8:89:84:71:67:5d:79:04:13:85:4d:9e: bf:ab:9c:c4:38:04:07:28:78:fe:ae:c0:35:40:45:ab:03:a6: 89:7b:36:09:24:62:d9:82:08:84:ae:5d:76:ce:51:b8:5d:8c: 90:be:23:aa:62:9b:2d:7e:43:68:73:6a:57:41:17:d0:e4:3f: 17:3c:c0:dd:99:ef:45:00:3e:06:6a:84:2d:38:33:f1:67:b1: 99:bb:d2:18:d7:de:6b:10:cb:31:6c:2e:c8:b8:87:61:48:a1: f1:a9:38:08:ac:f2:a7:b6:cd:48:3d:88:43:ed:34:73:6f:4a: 77:e4:4e:8a:e6:4b:7c:92:7a:f8:0b:d0:2a:f6:ae:52:c1:b4: 98:e4:ec:4e:fd:97:81:23:a7:31:48:a5:83:d5:b8:c6:12:89: 8c:5d:0f:3f:0d:18:53:8e:4d:5c:67:9b:2e:09:bc:2c:aa:f4: 26:0c:d6:6c:8d:83:7c:11:87:05:9c:b0:ce:2c:fc:c4:4a:60: d5:06:4b:d7:91:27:dd:5c:31:c5:a9:14:d7:f7:12:b9:7b:57: ef:2f:5e:ad:62:4a:6c:06:d0:9e:8d:09:17:f8:1f:e5:89:d5: 30:0f:e5:c6:af:61:f3:04:e7:a8:28:0c:b1:d4:e8:fd:01:d3: 96:2c:ce:25 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUC07b32d8IWPu+NUEX+s17DMDaXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjRaFw0yNzAxMTkwMjA4MjRaMDMxMTAvBgNV BAMTKDM1NURCN0RDN0UxOEZDRkNFN0RFOUExOTlCOUFEQ0QzQjE4NkJDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8UDHRIsY3DnvdY1qTWhkd1sj c8yBt132IDBZDE4sqW07LW3Tc6msvwH99xM7rg6pAQSmoF68s20G5UwSL48UST1H wLuZBC6rqsjWtr5q8XlJ8Dm3VnkL351S6a4QJXHEMh3Aoj7/uISwSq15WPXyuIhH tpWj26dujLKCZUnd+PwRs0+S8pIdCq4jHlsJsQa5Skr1+V7F1dpeMcJBsxGhj1JV iwZJXJZkiMrkKDcc02UtbnUZkxNLUx4zmCK+L3fS8x9/HuV3SuE7FhgPBj8hsWUT U/FuUbUz/bBfmSkwcUsibZc8GskGiV4GUqdsS+KVXW+ucNsF1/yPblcmqGsHAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUNV233H4Y/Pzn3poZm5rc07GGvF0wHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzEvMzUzMjJlMzEzMzMw MmUzOTM2MmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzUzODM1MzkzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBDSCYDANBgkqhkiG9w0BAQsFAAOCAQEAFO+vTS1duImEcWddeQQThU2ev6uc xDgEByh4/q7ANUBFqwOmiXs2CSRi2YIIhK5dds5RuF2MkL4jqmKbLX5DaHNqV0EX 0OQ/FzzA3ZnvRQA+BmqELTgz8WexmbvSGNfeaxDLMWwuyLiHYUih8ak4CKzyp7bN SD2IQ+00c29Kd+ROiuZLfJJ6+AvQKvauUsG0mOTsTv2XgSOnMUilg9W4xhKJjF0P Pw0YU45NXGebLgm8LKr0JgzWbI2DfBGHBZywziz8xEpg1QZL15En3VwxxakU1/cS uXtX7y9erWJKbAbQno0JF/gf5YnVMA/lxq9h8wTnqCgMsdTo/QHTlizOJQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:48 2026 by rpki-client