This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3332203d3e203632343638.roa
File:                     34332e3235342e3139322e302f32322d3332203d3e203632343638.roa (raw, json)
Hash identifier:          bobpjRftY4EVuVK7RVubsSzMLbBd0b7awOTlrxaV/28=
Subject key identifier:   4F:ED:6F:53:4F:42:3C:36:31:AA:D1:78:6E:AC:3E:72:20:96:10:BD
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       17DCEDF4680104552221D9F7406CC16248F097A0
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3332203d3e203632343638.roa
Signing time:             Tue 20 Jan 2026 02:20:23 +0000
ROA not before:           Tue 20 Jan 2026 02:15:23 +0000
ROA not after:            Tue 19 Jan 2027 02:20:23 +0000
asID:                     62468
IP address blocks:        43.254.192.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 03:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:dc:ed:f4:68:01:04:55:22:21:d9:f7:40:6c:c1:62:48:f0:97:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Jan 20 02:15:23 2026 GMT
            Not After : Jan 19 02:20:23 2027 GMT
        Subject: CN=4FED6F534F423C3631AAD1786EAC3E72209610BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4f:d1:79:10:d6:f3:e0:a2:52:f1:3f:4b:a9:
                    c0:16:be:b0:08:82:1a:c1:17:0c:f1:85:9a:27:88:
                    0e:06:6d:2a:82:a6:5b:d0:f5:26:95:18:37:05:0c:
                    46:8d:70:6b:93:1e:a9:8d:93:7c:b1:47:d3:2f:24:
                    d3:dd:38:eb:ef:fd:61:23:26:d8:b4:45:9a:5f:cd:
                    87:fa:19:41:1e:0c:50:76:20:b7:df:11:f5:32:8f:
                    ca:57:68:f3:f3:31:6f:cd:f8:9b:fa:94:6d:cf:f1:
                    b4:2d:6c:c8:a5:52:2e:5c:97:c3:84:f6:b9:62:37:
                    2f:4d:9a:cc:36:35:8f:02:8f:d2:3e:74:33:41:f9:
                    70:0d:a2:ad:59:95:96:c7:7c:be:d2:fb:ae:89:61:
                    7c:4f:21:48:fd:81:3a:29:bf:f1:fe:9c:69:6f:2e:
                    41:eb:a9:db:21:a8:5e:99:28:42:d3:6d:fe:25:61:
                    d2:b5:12:a2:d3:4c:93:c2:9e:5a:29:35:66:b7:c6:
                    a3:c5:12:de:9a:94:e4:e8:e1:c7:01:ce:7b:69:36:
                    f5:15:47:bf:6f:23:67:97:29:aa:90:9b:10:e6:84:
                    c9:92:b5:92:90:3b:f0:9a:f5:24:23:f9:a2:38:92:
                    3b:99:d2:7f:60:34:ab:01:8d:a8:23:12:a0:91:06:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:ED:6F:53:4F:42:3C:36:31:AA:D1:78:6E:AC:3E:72:20:96:10:BD
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3332203d3e203632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:d0:22:f1:da:e5:20:37:d2:bc:1f:13:34:e9:47:95:c4:fb:
         0c:34:5e:cd:c5:40:d6:eb:11:02:04:00:95:d1:a8:33:5f:df:
         5e:a2:4a:c1:00:f7:2b:2a:b7:6d:5e:62:f9:b9:77:14:79:84:
         39:c4:d8:14:6d:42:ec:dd:19:d8:4a:36:d3:ae:6b:a3:81:1e:
         93:35:0f:66:3c:54:73:8f:0c:5e:52:55:61:fd:b8:69:bb:20:
         d0:69:58:77:18:77:1b:67:df:51:c7:48:d0:e9:7a:72:66:de:
         3b:2d:55:f8:a0:76:71:cf:40:9e:cf:6f:ef:20:e4:f9:7a:14:
         2e:8e:74:00:b0:3c:c1:c0:9d:77:46:62:de:96:64:d6:77:fd:
         11:67:26:61:6c:93:0f:b3:d9:b1:d5:b4:95:b3:46:4f:f8:e9:
         46:fa:b5:10:5b:dd:f9:2d:22:e1:66:1f:2b:3e:d3:82:c0:1c:
         94:fe:58:3a:bd:e1:7d:e3:04:75:d4:b4:c9:1b:53:44:d8:7d:
         e5:af:c1:de:b9:c5:60:b8:78:a0:d8:f5:b5:34:74:c4:ec:b3:
         85:93:1d:78:2c:e1:72:6e:3d:51:76:4d:1b:fd:24:55:6b:65:
         56:36:d2:db:a5:52:49:bc:cc:7c:6e:fb:aa:40:5a:92:ec:de:
         92:46:13:dc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 18:04:44 2026 by rpki-client