This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757743107/0/3136332e36312e36322e302f32342d3234203d3e203138343634.roa
File:                     3136332e36312e36322e302f32342d3234203d3e203138343634.roa (raw, json)
Hash identifier:          Y/GbqiSHk47nm9kfLmWEQmvyAU1qdTdaRuJrF/5i1gE=
Subject key identifier:   B4:35:F0:D0:7D:17:FA:C2:EA:48:C8:44:70:3F:18:16:C2:82:34:5E
Certificate issuer:       /CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10
Certificate serial:       2E3BE5167AEED7CD0AFD3514F2AC313F64AC6533
Authority key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/3136332e36312e36322e302f32342d3234203d3e203138343634.roa
Signing time:             Tue 20 Jan 2026 02:22:44 +0000
ROA not before:           Tue 20 Jan 2026 02:17:44 +0000
ROA not after:            Tue 19 Jan 2027 02:22:44 +0000
asID:                     18464
IP address blocks:        163.61.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 04:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3b:e5:16:7a:ee:d7:cd:0a:fd:35:14:f2:ac:31:3f:64:ac:65:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10
        Validity
            Not Before: Jan 20 02:17:44 2026 GMT
            Not After : Jan 19 02:22:44 2027 GMT
        Subject: CN=B435F0D07D17FAC2EA48C844703F1816C282345E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:c2:24:06:b0:d7:5c:59:91:ca:a6:04:d2:
                    e3:a6:d7:41:df:f1:87:30:93:e4:e3:04:82:fd:ac:
                    b1:e2:33:37:bb:4c:8a:e6:ea:f6:b4:e2:23:22:a4:
                    f4:da:93:e1:31:9c:84:53:f7:34:e2:82:0d:fa:6b:
                    b4:6d:0d:e6:5f:96:ba:33:9c:b7:0a:b1:33:5e:e6:
                    fe:3e:95:64:1a:53:bf:1d:cb:23:a1:bf:38:db:43:
                    ae:49:18:26:8b:3d:58:7f:40:ea:69:44:c4:bc:9e:
                    ab:27:bd:f7:be:f2:88:7e:78:27:00:d6:f0:ef:ed:
                    e0:5c:a3:8e:2a:e9:e9:63:22:5c:5e:07:29:57:f8:
                    38:60:b5:91:15:7a:31:c3:cb:6d:55:fe:f0:25:90:
                    f4:4c:02:ff:4d:35:e3:1d:a9:6a:cd:d4:37:f2:d7:
                    01:76:d4:ed:6d:2c:0b:7a:9d:95:de:e2:85:bc:9d:
                    f3:1b:00:e8:a7:a1:0e:66:fa:0a:32:ad:b9:60:9b:
                    48:f3:67:0f:c9:7d:e7:b3:66:fa:bc:d7:74:bd:8b:
                    b1:7a:e9:e1:c4:40:5a:2a:74:6c:35:8b:5c:20:85:
                    d6:cc:2a:71:b1:71:dc:2c:9d:19:2c:aa:03:e6:ad:
                    a3:62:81:fd:79:88:bc:69:1c:02:1a:b5:62:a3:28:
                    d0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:35:F0:D0:7D:17:FA:C2:EA:48:C8:44:70:3F:18:16:C2:82:34:5E
            X509v3 Authority Key Identifier:
                keyid:45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/3136332e36312e36322e302f32342d3234203d3e203138343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:75:c6:c9:c1:93:bb:bc:2a:54:ee:6f:73:1b:6b:15:6d:20:
         65:8b:df:a3:db:60:17:80:5d:51:62:cb:ca:4d:ff:ac:72:2f:
         37:95:b3:42:17:30:8f:86:67:f4:5b:fd:71:07:6d:6b:16:85:
         71:24:2f:20:62:cc:5e:d7:48:ec:13:16:6e:4e:be:e7:c4:45:
         ef:eb:ca:d4:23:09:fb:9e:0d:2a:b3:de:00:60:98:78:ba:09:
         ac:05:da:39:18:54:2c:96:89:a6:07:7f:fc:ec:aa:a3:8e:7c:
         44:ff:7c:6c:18:ab:3d:83:6f:49:96:ee:fa:5e:1b:dd:4c:8c:
         ae:cc:8b:53:82:e5:ef:35:0c:b5:97:c5:8e:b5:d0:ef:8e:9d:
         59:a6:9d:ef:e9:aa:9b:70:ee:be:53:ab:54:be:ed:54:45:b4:
         c6:fc:66:2a:88:ea:67:7b:e7:4d:94:8f:a7:12:26:2f:bf:aa:
         bd:20:73:4b:de:c3:53:e2:cf:61:25:76:75:f6:31:e8:7b:c4:
         1f:56:6f:11:a9:90:63:ad:29:4a:4a:e4:8e:2d:56:29:51:25:
         88:88:d3:22:da:bc:7e:15:1c:d0:e0:6a:72:c9:f3:b6:be:af:
         e8:9c:f4:aa:27:c1:d7:ed:5b:c3:2b:f6:f4:07:7d:49:74:5c:
         c3:e7:4d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 14:12:49 2026 by rpki-client