This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3235322e302f32322d3234203d3e203632333837.roa
File:                     3131392e35392e3235322e302f32322d3234203d3e203632333837.roa (raw, json)
Hash identifier:          6erJBvMpCVcq1Po4iDG3SD4Zw/2rxYqy1EMsEVwFLYo=
Subject key identifier:   D4:25:FF:89:0A:37:85:87:B1:66:EB:C0:4C:3E:B7:9C:57:95:17:68
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       182E637D6D0ECE6B25A2F55686334D00A4C07920
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3235322e302f32322d3234203d3e203632333837.roa
Signing time:             Thu 22 Jan 2026 08:11:40 +0000
ROA not before:           Thu 22 Jan 2026 08:06:40 +0000
ROA not after:            Thu 21 Jan 2027 08:11:40 +0000
asID:                     62387
IP address blocks:        119.59.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 10:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2e:63:7d:6d:0e:ce:6b:25:a2:f5:56:86:33:4d:00:a4:c0:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jan 22 08:06:40 2026 GMT
            Not After : Jan 21 08:11:40 2027 GMT
        Subject: CN=D425FF890A378587B166EBC04C3EB79C57951768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d8:4a:13:0a:e0:dc:05:3e:a0:b2:ec:14:2d:
                    ed:6a:57:e0:2d:bc:32:a4:b4:d7:05:ce:d7:4e:46:
                    1f:3f:b3:89:f8:fb:13:da:b7:e9:7b:83:00:53:48:
                    2d:db:84:e5:e6:9f:c2:57:ff:9e:de:c7:28:3f:e3:
                    8d:4e:ef:a0:27:d0:8a:df:8d:08:50:b5:3d:5b:ef:
                    27:b3:81:99:cb:97:30:8d:14:c2:6f:d2:61:e7:36:
                    68:9e:a5:76:04:21:23:35:84:33:af:11:36:3f:78:
                    4d:fd:63:74:52:98:81:b7:c5:5a:5f:0e:61:43:1c:
                    22:41:02:5e:cd:38:02:1e:1a:4d:a4:12:f3:7d:e4:
                    2d:90:cc:b3:7f:8c:c4:cc:65:bc:19:00:f1:c1:e8:
                    fb:af:22:74:fa:5b:d8:0e:3c:bd:a7:cc:26:f5:26:
                    99:75:e4:d1:22:a7:4a:2f:65:9e:b9:c9:a6:81:64:
                    ec:f3:bd:b5:96:f9:ea:88:72:b1:54:67:df:44:b5:
                    22:4c:f6:4f:fb:de:87:d1:ce:d5:f7:33:fa:16:1a:
                    ef:fd:fd:0d:9d:3d:24:8e:80:ea:fd:e2:c1:4b:a6:
                    73:72:e7:2d:b1:cc:06:22:73:23:53:66:d1:17:2f:
                    d9:78:a0:57:1e:01:46:28:a9:bd:74:9c:12:5a:d3:
                    bd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:25:FF:89:0A:37:85:87:B1:66:EB:C0:4C:3E:B7:9C:57:95:17:68
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3235322e302f32322d3234203d3e203632333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:b6:29:1b:ed:61:62:a5:31:b4:a1:b1:ac:44:b6:5f:31:
         bd:06:55:ab:59:50:aa:f2:41:9a:1a:46:16:e4:bb:a6:a5:aa:
         1f:68:70:0f:cd:62:32:00:c7:0c:01:8a:07:59:b7:69:c6:df:
         85:06:77:21:31:aa:29:5f:bf:2a:50:e2:79:79:0a:00:a9:20:
         7a:e9:c1:6a:ff:fc:4a:40:21:e7:b8:1f:27:db:f2:4b:ce:80:
         9a:ab:30:44:fe:bf:7a:57:80:c6:7b:0a:db:66:88:56:fe:1c:
         23:f8:06:af:d4:9f:62:2a:02:a5:8a:a2:01:9a:53:20:68:30:
         20:eb:4f:4d:15:b2:df:11:c0:ea:b6:f8:cc:d9:cb:71:41:11:
         79:a1:9d:83:b9:30:de:34:d1:7c:3b:4f:c4:8a:ea:6b:f5:e2:
         ce:65:23:43:8f:b3:2e:5a:bd:87:4c:6b:44:d5:b1:d6:94:29:
         7d:d8:c0:55:01:42:d9:d1:8f:5e:89:0d:45:25:2a:88:77:b9:
         bc:a2:69:ac:5e:75:6c:61:ed:7a:22:de:f1:45:13:3b:f6:51:
         72:f0:91:1c:a5:f4:bd:60:ee:d7:e0:1b:e4:19:db:01:f8:a9:
         a8:18:4e:15:5c:39:ad:90:c6:ac:33:ac:88:b7:53:5d:c5:f4:
         8f:7d:68:b4
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUGC5jfW0OzmslovVWhjNNAKTAeSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjAxMjIwODA2NDBaFw0yNzAxMjEwODExNDBaMDMxMTAvBgNV
BAMTKEQ0MjVGRjg5MEEzNzg1ODdCMTY2RUJDMDRDM0VCNzlDNTc5NTE3NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2EoTCuDcBT6gsuwULe1qV+At
vDKktNcFztdORh8/s4n4+xPat+l7gwBTSC3bhOXmn8JX/57exyg/441O76An0Irf
jQhQtT1b7yezgZnLlzCNFMJv0mHnNmiepXYEISM1hDOvETY/eE39Y3RSmIG3xVpf
DmFDHCJBAl7NOAIeGk2kEvN95C2QzLN/jMTMZbwZAPHB6PuvInT6W9gOPL2nzCb1
Jpl15NEip0ovZZ65yaaBZOzzvbWW+eqIcrFUZ99EtSJM9k/73ofRztX3M/oWGu/9
/Q2dPSSOgOr94sFLpnNy5y2xzAYicyNTZtEXL9l4oFceAUYoqb10nBJa0731AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU1CX/iQo3hYexZuvATD63nFeVF2gwHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTUyNTI1MS8wLzMxMzEzOTJlMzUz
OTJlMzIzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMjMzMzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAnc7/DANBgkqhkiG9w0BAQsFAAOCAQEAF9S2KRvtYWKlMbShsaxEtl8x
vQZVq1lQqvJBmhpGFuS7pqWqH2hwD81iMgDHDAGKB1m3acbfhQZ3ITGqKV+/KlDi
eXkKAKkgeunBav/8SkAh57gfJ9vyS86AmqswRP6/eleAxnsK22aIVv4cI/gGr9Sf
YioCpYqiAZpTIGgwIOtPTRWy3xHA6rb4zNnLcUEReaGdg7kw3jTRfDtPxIrqa/Xi
zmUjQ4+zLlq9h0xrRNWx1pQpfdjAVQFC2dGPXokNRSUqiHe5vKJprF51bGHteiLe
8UUTO/ZRcvCRHKX0vWDu1+Ab5BnbAfipqBhOFVw5rZDGrDOsiLdTXcX0j31otA==
-----END CERTIFICATE-----
Generated at Thu Jan 22 15:30:35 2026 by rpki-client