This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3139362e302f32322d3234203d3e203632333837.roa
File:                     3131392e35392e3139362e302f32322d3234203d3e203632333837.roa (raw, json)
Hash identifier:          kDCF0VWHsEGIlUgollIPMS99YSF2L+kV5LHktY/NTOg=
Subject key identifier:   96:1A:23:62:30:F3:DD:62:06:D9:7F:98:DF:FA:DE:9C:49:BA:39:1B
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       30C96155E8A60CA2F318B49E4E5068000ED7F44F
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3139362e302f32322d3234203d3e203632333837.roa
Signing time:             Tue 20 Jan 2026 02:11:59 +0000
ROA not before:           Tue 20 Jan 2026 02:06:59 +0000
ROA not after:            Tue 19 Jan 2027 02:11:59 +0000
asID:                     62387
IP address blocks:        119.59.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 10:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c9:61:55:e8:a6:0c:a2:f3:18:b4:9e:4e:50:68:00:0e:d7:f4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jan 20 02:06:59 2026 GMT
            Not After : Jan 19 02:11:59 2027 GMT
        Subject: CN=961A236230F3DD6206D97F98DFFADE9C49BA391B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:2b:dc:1b:ad:77:8f:cd:3f:79:b1:c7:ba:
                    c0:d5:ae:23:16:82:71:99:58:a4:ec:c8:61:cf:e3:
                    e2:03:df:45:75:a9:f5:5a:61:e5:02:c2:05:f9:ba:
                    b9:2f:df:e9:93:eb:f2:f3:aa:c3:08:3c:56:1c:c8:
                    e9:ac:44:36:f0:dd:b6:15:e3:1b:5a:4a:17:c7:bd:
                    96:3f:15:eb:33:db:12:ea:05:81:e6:76:4b:29:0f:
                    5a:6e:f6:cd:8e:d0:12:fb:c0:4b:c7:61:5f:b5:0d:
                    c5:7f:57:5d:0e:93:32:26:54:1e:79:a1:8b:c9:d9:
                    e5:c0:1e:12:c8:c1:72:61:b2:e2:4c:e5:da:60:8e:
                    80:1f:50:57:60:ff:89:18:75:e8:40:71:e9:09:05:
                    76:70:a6:8a:e7:9a:ff:a1:68:e7:80:21:9c:22:a0:
                    18:fc:de:08:d6:b1:03:14:f5:93:14:69:99:b0:bc:
                    b8:05:23:ca:a8:56:d5:b8:c9:4b:c6:d5:00:f2:f9:
                    8e:15:73:7c:14:5b:f6:d5:5b:e0:76:0a:59:f7:85:
                    ba:02:5b:63:66:64:5e:0a:c2:eb:3d:46:b2:68:54:
                    65:bf:88:3d:bb:4b:61:5e:79:a7:5f:6b:1a:71:1e:
                    17:b4:28:58:3e:d8:75:8c:a7:02:d0:58:3a:fd:ae:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1A:23:62:30:F3:DD:62:06:D9:7F:98:DF:FA:DE:9C:49:BA:39:1B
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3139362e302f32322d3234203d3e203632333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:9a:07:69:50:be:6e:33:1f:09:7c:c0:57:f0:32:42:0f:
         76:23:c3:64:b6:f4:44:be:de:f3:de:20:da:e5:78:67:ad:28:
         d5:d1:7a:5b:75:64:a2:04:ab:30:13:b0:d0:b0:c8:d2:87:8e:
         a4:4c:64:b0:48:eb:46:21:1b:9b:f2:fb:ce:00:58:49:6b:ed:
         be:06:42:b4:22:17:2e:a8:c6:f7:05:2b:2e:37:11:81:74:dc:
         6b:23:e6:09:e6:d3:e8:ef:e1:9f:15:24:2f:5a:7f:66:c5:8e:
         81:47:e0:ab:d1:e6:21:4f:54:3f:20:56:cb:f5:97:82:89:79:
         ee:6e:37:be:a6:f6:55:75:54:05:62:a1:06:59:38:64:88:4d:
         bc:c8:4c:48:65:c6:c9:89:e7:f8:6c:88:2e:88:f0:4a:38:a1:
         a2:46:c6:24:1f:ba:0b:72:d2:14:c7:e4:4d:0c:0b:54:fe:1c:
         b2:4f:74:49:f1:5b:b1:ca:92:37:50:7d:0a:f1:ea:8f:84:81:
         b4:3d:b3:9f:15:b1:3f:f4:15:c7:26:7b:ea:b9:24:77:13:fc:
         29:e9:3a:ac:1a:00:75:99:1b:b4:ea:cf:4a:20:ba:bf:04:9d:
         fb:71:b7:d1:37:43:b8:cf:48:78:fe:0b:44:b2:d9:db:7c:79:
         b8:5a:9a:d0
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUMMlhVeimDKLzGLSeTlBoAA7X9E8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjAxMjAwMjA2NTlaFw0yNzAxMTkwMjExNTlaMDMxMTAvBgNV
BAMTKDk2MUEyMzYyMzBGM0RENjIwNkQ5N0Y5OERGRkFERTlDNDlCQTM5MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVcivcG613j80/ebHHusDVriMW
gnGZWKTsyGHP4+ID30V1qfVaYeUCwgX5urkv3+mT6/LzqsMIPFYcyOmsRDbw3bYV
4xtaShfHvZY/Fesz2xLqBYHmdkspD1pu9s2O0BL7wEvHYV+1DcV/V10OkzImVB55
oYvJ2eXAHhLIwXJhsuJM5dpgjoAfUFdg/4kYdehAcekJBXZwpornmv+haOeAIZwi
oBj83gjWsQMU9ZMUaZmwvLgFI8qoVtW4yUvG1QDy+Y4Vc3wUW/bVW+B2Cln3hboC
W2NmZF4Kwus9RrJoVGW/iD27S2FeeadfaxpxHhe0KFg+2HWMpwLQWDr9rs7pAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUlhojYjDz3WIG2X+Y3/renEm6ORswHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTUyNTI1MS8wLzMxMzEzOTJlMzUz
OTJlMzEzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMjMzMzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAnc7xDANBgkqhkiG9w0BAQsFAAOCAQEAaF6aB2lQvm4zHwl8wFfwMkIP
diPDZLb0RL7e894g2uV4Z60o1dF6W3VkogSrMBOw0LDI0oeOpExksEjrRiEbm/L7
zgBYSWvtvgZCtCIXLqjG9wUrLjcRgXTcayPmCebT6O/hnxUkL1p/ZsWOgUfgq9Hm
IU9UPyBWy/WXgol57m43vqb2VXVUBWKhBlk4ZIhNvMhMSGXGyYnn+GyILojwSjih
okbGJB+6C3LSFMfkTQwLVP4csk90SfFbscqSN1B9CvHqj4SBtD2znxWxP/QVxyZ7
6rkkdxP8Kek6rBoAdZkbtOrPSiC6vwSd+3G30TdDuM9IeP4LRLLZ23x5uFqa0A==
-----END CERTIFICATE-----
Generated at Thu Jan 22 15:31:46 2026 by rpki-client