This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3130302e302f32322d3234203d3e2037303138.roa
File:                     3138302e3232332e3130302e302f32322d3234203d3e2037303138.roa (raw, json)
Hash identifier:          Eb8esf4leiCOE6oK5wlI1LtdjOu3oR8+YIBoDEYxiMI=
Subject key identifier:   38:93:AD:B6:C4:18:0C:9D:1D:05:AF:B4:4E:E5:A5:1A:7C:47:AD:B3
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       199B5AA31BBAF67A6AE74FB9619BE0DB3D006D92
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3130302e302f32322d3234203d3e2037303138.roa
Signing time:             Tue 20 Jan 2026 02:24:54 +0000
ROA not before:           Tue 20 Jan 2026 02:19:54 +0000
ROA not after:            Tue 19 Jan 2027 02:24:54 +0000
asID:                     7018
IP address blocks:        180.223.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9b:5a:a3:1b:ba:f6:7a:6a:e7:4f:b9:61:9b:e0:db:3d:00:6d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:54 2026 GMT
            Not After : Jan 19 02:24:54 2027 GMT
        Subject: CN=3893ADB6C4180C9D1D05AFB44EE5A51A7C47ADB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bb:19:fe:20:10:1a:12:a8:d9:56:cd:cc:f5:
                    6c:2d:27:7e:b5:13:bd:45:17:34:b4:a0:95:de:45:
                    d8:59:d4:9f:32:7c:b4:a4:c7:36:6c:6c:42:43:e4:
                    00:a4:fc:17:50:8d:fb:30:89:4d:cb:29:d5:47:d3:
                    38:41:8b:b2:84:a4:38:a3:b7:40:f5:10:10:69:a4:
                    df:65:bc:88:fe:cf:d6:64:01:eb:2c:6b:a8:2a:51:
                    9d:8e:f9:02:ba:93:24:70:f2:8c:c5:3f:46:a5:19:
                    f3:13:5f:18:1c:e1:68:fb:65:28:2d:79:3f:9e:e9:
                    d8:0e:de:eb:00:10:3b:9a:d4:a4:34:77:37:db:36:
                    4d:83:ad:94:99:d7:93:32:b8:5a:98:35:c0:0e:6f:
                    21:2c:97:68:b2:5f:14:d8:d3:c2:68:f4:b4:42:47:
                    fb:a4:90:dd:47:49:4c:8e:bd:cc:73:4b:09:ec:0f:
                    8c:fe:bd:dc:4e:23:62:d9:c6:d9:1e:71:1f:7b:ca:
                    d0:30:81:f1:bc:27:63:db:5d:45:4f:e8:9b:0a:9a:
                    fd:55:d3:32:0d:f4:85:05:bf:98:da:b3:71:91:39:
                    b8:9c:b9:18:20:55:a8:5a:de:8b:d2:5c:12:dc:f8:
                    14:1d:95:b1:a5:fa:96:a0:5d:ad:1e:a2:0c:14:d4:
                    f6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:93:AD:B6:C4:18:0C:9D:1D:05:AF:B4:4E:E5:A5:1A:7C:47:AD:B3
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3130302e302f32322d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:78:82:20:d1:97:1a:88:1b:a1:81:75:61:a3:26:15:5b:59:
         31:04:4a:53:8d:fc:a5:2c:55:7b:96:e4:01:90:74:42:c9:27:
         ad:d5:6a:cc:c2:00:92:31:85:fb:58:d9:3a:17:c9:46:66:be:
         50:ad:da:81:d4:9e:dc:3a:fe:6e:2a:40:9c:dc:d7:5b:00:85:
         2d:bf:52:0f:94:ce:a8:18:89:d2:17:bb:58:82:3c:e3:e3:81:
         8c:2f:c5:a5:9e:91:33:39:eb:10:f8:3c:af:e6:c3:5b:db:5c:
         0c:e1:60:ab:d2:6f:7d:ff:73:e9:05:91:46:7f:fc:f2:24:84:
         89:ae:b5:cd:2c:96:d0:78:3c:ce:d8:d7:42:07:01:f1:71:45:
         88:71:e3:98:04:d2:9e:28:be:ec:48:6a:e0:9a:a3:8c:28:94:
         01:7b:5e:fe:f7:85:f0:36:15:8c:4b:55:eb:dc:b2:7f:7b:34:
         68:78:60:43:00:8b:ce:cf:6f:26:ff:96:11:99:63:ac:d6:d5:
         0b:23:16:a0:2c:f2:95:52:72:0a:25:40:6f:16:a9:2b:dd:61:
         4c:bd:a6:ca:18:72:fa:8f:ac:16:d0:05:9c:aa:48:10:73:4d:
         7b:0f:85:8e:4b:3b:be:e1:1f:cd:a6:01:dc:71:a3:1e:e4:34:
         37:db:37:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:48 2026 by rpki-client