This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38392e302f32342d3234203d3e20323136303437.roa
File:                     34352e3234382e38392e302f32342d3234203d3e20323136303437.roa (raw, json)
Hash identifier:          0BoCIwBAFLi7tR9msw69O0FpAUzHzziBf8Rxr/iSelU=
Subject key identifier:   62:46:3B:A1:B2:37:BE:B4:EA:3F:8C:56:4B:8E:E9:11:6D:54:84:DE
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       3026923F695B180B98147C8A46CD17E85D38ABE3
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38392e302f32342d3234203d3e20323136303437.roa
Signing time:             Tue 20 Jan 2026 02:09:33 +0000
ROA not before:           Tue 20 Jan 2026 02:04:33 +0000
ROA not after:            Tue 19 Jan 2027 02:09:33 +0000
asID:                     216047
IP address blocks:        45.248.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:26:92:3f:69:5b:18:0b:98:14:7c:8a:46:cd:17:e8:5d:38:ab:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:33 2026 GMT
            Not After : Jan 19 02:09:33 2027 GMT
        Subject: CN=62463BA1B237BEB4EA3F8C564B8EE9116D5484DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:01:a2:3c:a9:b8:8a:ad:14:62:57:5d:98:
                    f4:6f:f9:40:57:c6:be:31:d3:7b:2f:02:19:9e:79:
                    ed:9c:ee:ce:05:e5:a1:a3:2a:bd:e8:d2:0d:80:c6:
                    56:ea:6b:ed:80:01:3d:6b:9d:88:cd:27:00:74:86:
                    b1:50:b0:c8:45:19:2c:01:57:4b:ed:95:2c:72:85:
                    02:0f:08:d6:0f:26:73:55:ac:09:5d:4c:e9:bc:94:
                    e1:d6:43:9b:2a:93:50:cf:59:df:c9:e6:41:cf:32:
                    83:46:94:b9:81:c5:3f:bc:08:e7:91:71:2a:27:61:
                    4a:ae:a5:c6:e0:27:e1:84:5a:99:a0:93:6d:4c:1a:
                    e6:99:a1:f4:b2:28:a8:98:60:19:95:65:c2:c7:1d:
                    65:d0:86:ab:59:19:58:16:73:39:34:34:a3:dd:ef:
                    1f:12:9e:bb:b3:39:57:c9:ef:aa:70:6a:66:e9:3f:
                    4b:e0:30:65:7f:43:7a:9c:44:70:41:28:40:c4:3d:
                    d6:f7:15:be:07:b6:f6:0c:3b:4a:b4:78:bd:d9:cb:
                    13:44:84:91:0e:dc:29:5d:30:82:0c:84:67:03:60:
                    c7:6e:54:f5:f4:30:79:6d:3f:d6:23:16:ad:61:01:
                    9b:17:ac:e2:13:c9:b6:54:6b:e3:f9:09:ce:46:ec:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:46:3B:A1:B2:37:BE:B4:EA:3F:8C:56:4B:8E:E9:11:6D:54:84:DE
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/34352e3234382e38392e302f32342d3234203d3e20323136303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.248.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:53:a4:fe:3f:a6:af:15:f2:fc:6d:15:96:7b:d3:28:c6:aa:
         ca:c1:31:97:bb:4e:b6:bf:4c:63:8d:f7:39:f3:82:3e:c6:79:
         89:6e:c3:eb:54:cb:bc:2d:e1:7a:fe:42:e4:bb:28:06:5a:4f:
         ea:93:b7:a7:b4:e8:28:b1:72:b0:5c:5c:f0:84:81:d5:5d:dc:
         df:ac:8a:ff:b5:4e:86:0d:0e:72:a1:8a:65:c2:70:ab:0b:8d:
         cd:b3:7f:83:6b:c9:8a:02:7a:06:37:a1:b3:5c:38:db:b1:63:
         eb:8c:6f:73:b8:8d:94:1a:9f:49:7d:76:62:97:00:fd:c9:60:
         bd:17:98:27:bb:9e:c4:c4:21:69:93:c3:98:35:45:b9:e7:c6:
         10:29:e0:8b:2d:6b:b0:32:80:7f:22:c6:1c:1a:8a:1f:a5:fc:
         8f:7f:d7:97:d2:7b:ad:ad:99:78:72:b4:0d:f2:ea:1f:1c:5b:
         8a:7a:5a:86:b9:fc:78:b9:fd:e2:f3:6c:09:61:ee:21:b9:d4:
         ac:28:0f:6d:75:2b:1a:d0:55:91:dc:b5:96:50:e9:70:d2:b2:
         e6:80:e1:c8:1b:3b:28:5f:6d:9e:5f:69:64:8b:bb:79:e0:3f:
         e1:03:c5:c9:06:a2:d4:b7:2d:d7:d0:05:ba:78:27:2c:f1:81:
         89:b8:76:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:55 2026 by rpki-client