This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133312e3132382e302f31372d3332203d3e203538353933.roa File: 35322e3133312e3132382e302f31372d3332203d3e203538353933.roa (raw, json) Hash identifier: RDf3SYXo4Ea1wuB9olxpjnqUjJTNs4/UFcrcG5ZHM4k= Subject key identifier: CA:7C:6B:EA:49:7C:D6:68:1C:DA:4F:AE:70:CF:12:3E:65:E8:BE:4F Certificate issuer: /CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Certificate serial: 59FBD88D3F939B53EF704F5624A57B8C296C005F Authority key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133312e3132382e302f31372d3332203d3e203538353933.roa Signing time: Tue 20 Jan 2026 02:08:25 +0000 ROA not before: Tue 20 Jan 2026 02:03:25 +0000 ROA not after: Tue 19 Jan 2027 02:08:25 +0000 asID: 58593 IP address blocks: 52.131.128.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 17:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:fb:d8:8d:3f:93:9b:53:ef:70:4f:56:24:a5:7b:8c:29:6c:00:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Validity Not Before: Jan 20 02:03:25 2026 GMT Not After : Jan 19 02:08:25 2027 GMT Subject: CN=CA7C6BEA497CD6681CDA4FAE70CF123E65E8BE4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:87:6f:96:e1:c9:5c:96:22:b2:df:6e:ea:50: a8:ae:5c:57:43:c9:57:78:09:ce:58:98:a5:b8:37: d8:0d:a5:80:3e:b8:d9:3a:70:6e:17:8d:b3:30:72: a0:36:1d:ef:0a:a6:ae:5e:1c:c0:39:b0:08:05:6c: 05:9d:f6:7d:86:13:d8:2b:23:e8:75:92:00:70:91: 9b:71:7e:72:2b:2d:d2:a5:8e:d3:6b:50:a4:8b:e3: 00:f9:fc:1c:61:3a:ef:04:da:9c:b3:17:b6:50:9a: a0:a0:14:eb:ee:90:d4:92:c4:7d:0e:36:e4:66:1c: e9:9f:31:72:55:65:6e:25:f9:48:de:d0:8c:20:75: 15:13:b1:c4:cf:36:70:ff:d7:4c:82:6e:e8:63:7c: e6:c0:6e:f7:6e:09:87:c5:37:b2:a5:93:6d:11:b9: d5:30:b6:77:75:62:6c:bb:b8:e7:5e:8a:8f:76:c3: 4a:92:24:41:41:03:1e:44:0c:81:35:f6:9e:8a:9c: dc:17:c7:d5:3c:12:df:36:f9:95:5f:3c:11:c6:41: cd:1f:9f:82:4b:9e:cd:cc:b5:bf:d8:c8:f9:f7:00: e0:0c:ee:c5:d5:82:41:c3:df:eb:9c:7d:76:70:6c: bb:ec:ba:a5:fb:90:20:1f:f3:ac:dd:f0:98:fe:70: fe:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7C:6B:EA:49:7C:D6:68:1C:DA:4F:AE:70:CF:12:3E:65:E8:BE:4F X509v3 Authority Key Identifier: keyid:7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/35322e3133312e3132382e302f31372d3332203d3e203538353933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.131.128.0/17 Signature Algorithm: sha256WithRSAEncryption 90:6a:4a:86:bd:b3:9d:51:e7:4c:35:af:63:96:0a:26:3b:e3: 49:99:b8:13:fa:c4:1b:4b:74:1f:7d:33:ed:d2:9d:73:69:5a: f8:b2:43:17:75:4a:4a:51:08:c3:f8:8f:2d:a2:9e:42:a3:de: 9f:d8:eb:6c:2c:10:de:af:52:52:7a:89:bb:33:47:d9:52:dd: 9f:86:6f:27:5a:2c:40:72:9c:6f:f5:72:ba:64:34:79:c2:52: 06:02:65:d2:85:d6:cf:6a:1d:15:10:8a:e2:85:35:d3:77:f0: b3:00:1f:ce:2d:16:86:88:1e:c7:ba:f5:2e:1a:98:46:9c:e4: 72:cc:5e:bf:67:0f:2a:93:23:b8:7f:0f:9b:48:9c:da:e8:cf: 3c:2e:9e:03:21:d7:75:63:3b:d9:e3:52:6a:50:94:7b:58:99: f2:56:07:6a:de:6d:4e:c1:3c:b8:41:20:9b:d9:70:24:ea:1a: 57:e8:06:c8:35:7f:de:2b:6e:af:3a:19:6d:b1:d0:88:33:35: 58:45:79:3d:3c:e1:e4:70:e9:d1:e1:33:5e:68:45:14:86:32: 99:44:38:aa:24:b3:27:ae:dc:3b:5f:e5:0e:b0:1c:f0:eb:f2: f3:83:de:e5:19:62:e1:e5:d7:cc:d4:8f:57:42:d1:04:e4:b9: 77:a4:4e:52 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUWfvYjT+Tm1PvcE9WJKV7jClsAF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMy ODQ4RjA1RjAeFw0yNjAxMjAwMjAzMjVaFw0yNzAxMTkwMjA4MjVaMDMxMTAvBgNV BAMTKENBN0M2QkVBNDk3Q0Q2NjgxQ0RBNEZBRTcwQ0YxMjNFNjVFOEJFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCth2+W4clcliKy327qUKiuXFdD yVd4Cc5YmKW4N9gNpYA+uNk6cG4XjbMwcqA2He8Kpq5eHMA5sAgFbAWd9n2GE9gr I+h1kgBwkZtxfnIrLdKljtNrUKSL4wD5/BxhOu8E2pyzF7ZQmqCgFOvukNSSxH0O NuRmHOmfMXJVZW4l+Uje0IwgdRUTscTPNnD/10yCbuhjfObAbvduCYfFN7Klk20R udUwtnd1Ymy7uOdeio92w0qSJEFBAx5EDIE19p6KnNwXx9U8Et82+ZVfPBHGQc0f n4JLns3Mtb/YyPn3AOAM7sXVgkHD3+ucfXZwbLvsuqX7kCAf86zd8Jj+cP4XAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUynxr6kl81mgc2k+ucM8SPmXovk8wHwYDVR0j BBgwFoAUfqyeQ8j65+1bYVlCPWDqcyhI8F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTg3Nzg5MS8xLzdFQUM5RTQzQzhGQUU3RUQ1QjYxNTk0MjNENjBF QTczMjg0OEYwNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MzIyMTk3MTg3Nzg5MS8xLzM1MzIyZTMxMzMz MTJlMzEzMjM4MmUzMDJmMzEzNzJkMzMzMjIwM2QzZTIwMzUzODM1MzkzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBzSDgDANBgkqhkiG9w0BAQsFAAOCAQEAkGpKhr2znVHnTDWvY5YKJjvj SZm4E/rEG0t0H30z7dKdc2la+LJDF3VKSlEIw/iPLaKeQqPen9jrbCwQ3q9SUnqJ uzNH2VLdn4ZvJ1osQHKcb/VyumQ0ecJSBgJl0oXWz2odFRCK4oU103fwswAfzi0W hogex7r1LhqYRpzkcsxev2cPKpMjuH8Pm0ic2ujPPC6eAyHXdWM72eNSalCUe1iZ 8lYHat5tTsE8uEEgm9lwJOoaV+gGyDV/3iturzoZbbHQiDM1WEV5PTzh5HDp0eEz XmhFFIYymUQ4qiSzJ67cO1/lDrAc8Ovy84Pe5Rli4eXXzNSPV0LRBOS5d6ROUg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:38 2026 by rpki-client