This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133312e302e302f31372d3332203d3e203538353933.roa File: 35322e3133312e302e302f31372d3332203d3e203538353933.roa (raw, json) Hash identifier: XxUvbwE08xpcTt8/cgh/Tt51+k5+EoVDyDrSrQ6xvUg= Subject key identifier: 84:1C:57:7D:DA:AD:D4:26:65:B5:CF:E4:F3:F2:9B:24:E2:F4:4F:32 Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 5AD34D407DF2BF63A7D9AA2088E247AB35503894 Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133312e302e302f31372d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:24 +0000 ROA not before: Tue 20 Jan 2026 02:03:24 +0000 ROA not after: Tue 19 Jan 2027 02:08:24 +0000 asID: 58593 IP address blocks: 52.131.0.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d3:4d:40:7d:f2:bf:63:a7:d9:aa:20:88:e2:47:ab:35:50:38:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:24 2026 GMT Not After : Jan 19 02:08:24 2027 GMT Subject: CN=841C577DDAADD42665B5CFE4F3F29B24E2F44F32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:eb:cf:86:e2:08:8b:c8:09:cb:c5:3d:cc:3f: 7e:d0:88:f2:62:93:19:8f:4f:d5:fe:1c:99:d4:7c: dd:7e:0b:d9:09:0b:52:20:a7:b2:7a:9d:4b:c7:8c: 41:48:f4:9e:21:db:ab:30:fa:c5:6e:4f:ab:99:37: 43:24:a4:01:3e:49:4d:e0:19:66:63:88:3f:95:2d: 05:ae:ba:33:91:96:20:b3:5a:fb:c6:3d:b1:64:5a: b2:27:12:ad:9e:f3:57:a1:fd:c4:95:68:b3:5a:d5: 05:be:a4:cf:32:b8:f4:09:57:53:9c:86:d0:85:ae: fa:63:42:a1:2d:24:d1:e6:96:5e:99:f8:92:f4:52: 82:0c:27:26:df:c5:55:b1:9d:c0:39:6a:81:99:5c: 3c:e9:57:bd:1c:d7:9e:ec:a2:ea:e6:68:2a:61:ed: ac:23:bf:19:96:c8:ac:78:19:9b:0d:de:63:9f:75: 5d:35:87:0b:f5:80:88:88:95:d8:fb:05:b5:2f:4c: d7:c5:d7:9a:5a:9b:11:e4:b2:ad:d2:2a:11:07:60: 58:dc:15:cc:5e:fe:71:03:67:61:92:40:84:ea:f3: 91:93:5f:71:11:48:91:42:62:16:4f:45:89:3b:52: fc:4e:1e:0f:ff:b1:f2:18:91:82:f5:81:5a:47:a5: 00:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1C:57:7D:DA:AD:D4:26:65:B5:CF:E4:F3:F2:9B:24:E2:F4:4F:32 X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133312e302e302f31372d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.131.0.0/17 Signature Algorithm: sha256WithRSAEncryption 92:a8:dd:96:ee:39:00:42:e2:0e:1a:13:bf:28:ab:b8:c5:f4: ec:62:f4:45:d3:3a:68:4b:9f:7c:0a:6b:3d:b4:7a:6f:a8:27: b5:68:1c:7f:32:02:a9:a2:99:0a:14:06:ef:07:2d:a9:aa:63: 1c:b3:58:a5:56:8a:aa:86:92:21:9d:af:35:54:8b:5e:89:15: 95:08:39:c8:f9:0f:bb:85:f9:a9:fd:a0:1a:7d:05:37:3d:f3: 88:d4:95:bb:00:96:82:c2:73:5a:b7:a4:75:a6:59:fd:59:12: bd:46:89:f1:5a:e1:64:e2:45:f2:7a:09:b0:f7:eb:33:8e:0c: 6d:02:f8:27:5c:df:56:1a:a0:6a:96:73:2f:93:47:63:2d:37: 35:08:28:02:2b:e1:ca:ea:3d:3f:14:e2:71:4f:51:0c:c6:a5: 8d:6f:63:34:1e:a9:c0:ab:d6:d5:5c:97:0e:f9:b3:4f:44:72: c9:0c:4b:13:74:65:0b:a6:17:48:92:05:4c:18:53:68:a5:4f: 82:39:2b:a8:4b:e6:6f:f4:c3:65:76:a4:73:12:0e:ff:79:f8: 1f:ec:4f:fd:f5:b2:f4:19:c1:f4:43:b2:6b:ff:df:cf:65:e2: a2:7a:d9:ae:74:a4:ac:16:f3:c8:87:4c:b2:19:92:65:92:8d: aa:ce:84:0e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUWtNNQH3yv2On2aogiOJHqzVQOJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjRaFw0yNzAxMTkwMjA4MjRaMDMxMTAvBgNV BAMTKDg0MUM1NzdEREFBREQ0MjY2NUI1Q0ZFNEYzRjI5QjI0RTJGNDRGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq68+G4giLyAnLxT3MP37QiPJi kxmPT9X+HJnUfN1+C9kJC1Igp7J6nUvHjEFI9J4h26sw+sVuT6uZN0MkpAE+SU3g GWZjiD+VLQWuujORliCzWvvGPbFkWrInEq2e81eh/cSVaLNa1QW+pM8yuPQJV1Oc htCFrvpjQqEtJNHmll6Z+JL0UoIMJybfxVWxncA5aoGZXDzpV70c157sourmaCph 7awjvxmWyKx4GZsN3mOfdV01hwv1gIiIldj7BbUvTNfF15pamxHksq3SKhEHYFjc Fcxe/nEDZ2GSQITq85GTX3ERSJFCYhZPRYk7UvxOHg//sfIYkYL1gVpHpQC9AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUhBxXfdqt1CZltc/k8/KbJOL0TzIwHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkxLzEvMzUzMjJlMzEzMzMx MmUzMDJlMzAyZjMxMzcyZDMzMzIyMDNkM2UyMDM1MzgzNTM5MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAc0gwAwDQYJKoZIhvcNAQELBQADggEBAJKo3ZbuOQBC4g4aE78oq7jF9Oxi9EXT OmhLn3wKaz20em+oJ7VoHH8yAqmimQoUBu8HLamqYxyzWKVWiqqGkiGdrzVUi16J FZUIOcj5D7uF+an9oBp9BTc984jUlbsAloLCc1q3pHWmWf1ZEr1GifFa4WTiRfJ6 CbD36zOODG0C+Cdc31YaoGqWcy+TR2MtNzUIKAIr4crqPT8U4nFPUQzGpY1vYzQe qcCr1tVclw75s09EcskMSxN0ZQumF0iSBUwYU2ilT4I5K6hL5m/0w2V2pHMSDv95 +B/sT/31svQZwfRDsmv/389l4qJ62a50pKwW88iHTLIZkmWSjarOhA4= -----END CERTIFICATE-----Generated at Sun Jan 25 13:55:21 2026 by rpki-client