This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/3132342e3232302e302e302f31342d3234203d3e203435303930.roa
File:                     3132342e3232302e302e302f31342d3234203d3e203435303930.roa (raw, json)
Hash identifier:          lmPbNRtj+ouq09Px6mN22kmiy8QTEZ2MlJjaiOQc3b4=
Subject key identifier:   6A:8D:C5:7E:02:1D:6A:E3:C3:4C:AB:B6:F9:AC:01:C5:19:17:90:31
Certificate issuer:       /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial:       62E354C494696C40B77804A172DC1A82A4EDF466
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/3132342e3232302e302e302f31342d3234203d3e203435303930.roa
Signing time:             Tue 20 Jan 2026 02:26:07 +0000
ROA not before:           Tue 20 Jan 2026 02:21:07 +0000
ROA not after:            Tue 19 Jan 2027 02:26:07 +0000
asID:                     45090
IP address blocks:        124.220.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 05:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e3:54:c4:94:69:6c:40:b7:78:04:a1:72:dc:1a:82:a4:ed:f4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
        Validity
            Not Before: Jan 20 02:21:07 2026 GMT
            Not After : Jan 19 02:26:07 2027 GMT
        Subject: CN=6A8DC57E021D6AE3C34CABB6F9AC01C519179031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:42:e3:2f:ad:c7:38:4a:23:b0:02:f9:fa:7d:
                    52:1b:69:20:1d:4b:57:39:a6:54:3c:71:52:46:b7:
                    67:64:35:65:65:ae:1a:95:2c:1f:36:da:b6:1b:d7:
                    9a:a0:6b:78:08:ed:6e:b5:df:9b:0b:94:43:ae:3e:
                    f6:6f:19:65:58:b2:3f:e8:d4:a4:a9:56:2c:62:78:
                    c9:b9:3a:1e:8f:6a:c8:01:d8:1b:09:69:5c:bd:c9:
                    ad:b7:01:d4:45:b0:de:91:1b:40:5d:bc:d1:12:de:
                    3f:53:16:c1:94:f2:33:83:db:d4:4c:f7:2b:57:05:
                    7a:9d:86:08:ca:87:8c:55:b5:03:ac:08:5d:3a:e7:
                    29:b2:da:fe:0c:cb:e5:9b:48:da:10:4e:e2:8e:1a:
                    dd:8b:70:83:eb:01:7f:69:24:4e:c4:4c:ba:e0:a9:
                    18:64:6f:98:f9:2f:86:20:be:af:6f:35:4c:19:34:
                    e4:5a:44:38:de:0b:fc:15:35:7a:a6:6b:23:c6:2b:
                    3a:85:ee:d9:c6:e4:47:c4:ea:e3:fa:f7:79:b8:74:
                    f3:e5:aa:2c:93:96:fc:28:d5:68:a2:63:fc:64:cc:
                    ef:f4:3e:6e:0a:de:71:31:49:8d:5c:49:8c:c7:40:
                    c0:1c:16:1b:1e:4c:30:ee:fb:eb:26:f7:4c:cb:93:
                    45:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8D:C5:7E:02:1D:6A:E3:C3:4C:AB:B6:F9:AC:01:C5:19:17:90:31
            X509v3 Authority Key Identifier:
                keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/3132342e3232302e302e302f31342d3234203d3e203435303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.220.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         68:06:e1:7a:b1:cb:2a:2c:6b:56:32:5b:0a:87:a5:09:ca:57:
         39:53:0f:87:9c:fb:ea:5d:7d:8b:94:c9:2d:38:eb:8d:32:c4:
         63:9e:8d:3e:02:60:50:e6:ba:14:39:78:92:f9:10:86:e0:db:
         a5:d7:b9:74:c7:73:5e:0f:ec:66:ab:fc:2a:e9:aa:d1:2a:50:
         76:f2:48:33:7c:86:ce:e5:02:63:44:de:d7:21:3c:44:8d:e7:
         19:61:38:25:2f:93:eb:26:a7:e6:91:56:08:7e:73:cb:24:57:
         c9:0e:9d:aa:40:44:6f:ae:b3:63:05:7c:34:2f:a3:10:09:49:
         53:e4:5e:bf:3a:d3:01:08:54:cc:99:7c:29:3d:5c:79:4e:4b:
         de:2a:97:e6:81:48:48:1d:4b:55:b1:b3:1b:72:dc:dc:52:89:
         97:0b:cf:d0:59:e1:ac:a2:e9:2e:cf:83:8b:9f:6e:ea:ef:f0:
         64:89:8f:d8:1e:1e:fc:d6:7c:8a:67:cb:9f:2a:04:a7:7a:d0:
         69:78:b0:a6:97:2e:3e:71:41:7a:90:5c:c2:2b:65:a7:62:5c:
         67:54:d0:88:25:a9:83:34:b5:6b:30:49:18:a0:fb:7d:93:27:
         a3:c3:18:18:d9:61:aa:e0:67:9d:0b:92:1d:47:6c:4c:2d:45:
         3d:dc:3a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 17:43:05 2026 by rpki-client