This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3130342e302f32312d3234203d3e2037303138.roa
File:                     3138302e3232332e3130342e302f32312d3234203d3e2037303138.roa (raw, json)
Hash identifier:          7NYMYRBnmzociVKsZ7AvGzZaHveJVS/7E5lDxxPE/js=
Subject key identifier:   00:0F:B7:6B:0A:80:2E:66:86:96:B9:1F:F4:60:11:03:CA:F1:F8:14
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       62CDA026D4D7ED4572987B75CB3F988D6A734A8A
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3130342e302f32312d3234203d3e2037303138.roa
Signing time:             Tue 20 Jan 2026 02:24:59 +0000
ROA not before:           Tue 20 Jan 2026 02:19:59 +0000
ROA not after:            Tue 19 Jan 2027 02:24:59 +0000
asID:                     7018
IP address blocks:        180.223.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cd:a0:26:d4:d7:ed:45:72:98:7b:75:cb:3f:98:8d:6a:73:4a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:59 2026 GMT
            Not After : Jan 19 02:24:59 2027 GMT
        Subject: CN=000FB76B0A802E668696B91FF4601103CAF1F814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:32:61:bf:bc:c2:9b:1c:d4:bf:a3:ff:f7:fb:
                    54:53:76:f9:d7:09:b3:31:2b:fb:b8:e5:ce:8e:ba:
                    c8:49:ac:6c:58:d0:e8:2b:f7:3c:b2:09:00:1e:4c:
                    aa:d0:92:13:99:f5:7c:0f:96:3b:9d:50:aa:59:88:
                    b4:da:fa:fa:14:35:56:40:f9:2a:e7:d0:19:ed:ca:
                    5e:25:5d:63:d6:2a:f0:6a:dd:b8:ad:19:54:b7:0c:
                    b5:bd:f5:f5:83:11:4e:d0:e3:5d:2d:7c:8d:f8:a8:
                    52:f5:99:76:2a:8a:7e:7e:d4:cd:af:96:38:ef:81:
                    6e:4e:c2:71:22:40:40:cd:da:28:69:0c:73:f1:38:
                    84:21:8b:95:c7:aa:aa:51:7e:44:0c:6a:0b:b1:9a:
                    75:d1:2f:b0:b4:86:3c:1e:a7:0a:9e:8a:53:22:a1:
                    e2:71:61:49:74:06:55:6d:d2:9d:8c:45:5f:80:e5:
                    3a:38:65:5a:25:c0:2b:5d:b5:24:05:07:ed:3f:20:
                    94:46:38:1e:06:14:d9:e3:20:73:d4:58:2c:34:d5:
                    86:bb:62:8e:15:ad:a5:12:bc:d3:93:aa:83:63:82:
                    13:46:ad:54:0f:c7:5b:d7:f5:da:00:6e:e6:f9:92:
                    e8:9f:82:25:ff:d7:71:d4:8b:00:06:64:65:ce:11:
                    35:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0F:B7:6B:0A:80:2E:66:86:96:B9:1F:F4:60:11:03:CA:F1:F8:14
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3130342e302f32312d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:dd:11:cf:f1:75:b0:12:c2:f9:e2:c4:dd:34:bc:db:37:0f:
         8b:77:60:1e:1c:f2:fa:b8:13:54:b8:ea:11:e5:4c:78:ec:40:
         99:c1:c1:9c:31:81:e3:cf:d7:64:6e:ed:ce:1f:20:f1:52:40:
         d0:e9:c0:f9:ac:f4:60:61:b2:84:40:7f:36:3e:4a:ec:3e:0f:
         25:07:72:b2:18:65:bd:7a:32:79:37:a4:de:a3:2a:16:50:5b:
         f8:c6:fe:6d:c7:0e:43:bc:8c:80:0a:c8:14:c6:d2:b6:b8:ce:
         60:a1:b5:10:f9:83:ac:5c:bf:50:92:db:85:d4:d2:7e:83:88:
         7d:32:54:33:6f:52:fd:4f:3a:6f:63:79:39:79:0e:6c:ab:c2:
         91:74:98:80:2b:0d:d9:e4:92:d4:b8:e3:2c:f4:f9:27:a3:6e:
         32:16:18:e6:5a:08:87:c6:dd:58:de:3b:d4:a9:4b:ee:97:42:
         7e:df:a8:76:b3:fd:b4:ec:ad:7b:78:1a:6a:fb:3f:31:34:99:
         50:4c:a5:3a:ba:34:be:20:13:14:25:6a:63:85:99:f6:55:bc:
         8d:1b:62:90:09:97:1d:21:25:60:71:2a:f9:16:21:16:85:6a:
         2a:e9:fb:f0:f4:6f:e8:6c:f5:a5:a4:9c:38:59:5e:d4:8f:a7:
         0e:d7:30:aa
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUYs2gJtTX7UVymHt1yz+YjWpzSoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw
NkNERDJDRTAeFw0yNjAxMjAwMjE5NTlaFw0yNzAxMTkwMjI0NTlaMDMxMTAvBgNV
BAMTKDAwMEZCNzZCMEE4MDJFNjY4Njk2QjkxRkY0NjAxMTAzQ0FGMUY4MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfMmG/vMKbHNS/o//3+1RTdvnX
CbMxK/u45c6OushJrGxY0Ogr9zyyCQAeTKrQkhOZ9XwPljudUKpZiLTa+voUNVZA
+Srn0Bntyl4lXWPWKvBq3bitGVS3DLW99fWDEU7Q410tfI34qFL1mXYqin5+1M2v
ljjvgW5OwnEiQEDN2ihpDHPxOIQhi5XHqqpRfkQMaguxmnXRL7C0hjwepwqeilMi
oeJxYUl0BlVt0p2MRV+A5To4ZVolwCtdtSQFB+0/IJRGOB4GFNnjIHPUWCw01Ya7
Yo4VraUSvNOTqoNjghNGrVQPx1vX9doAbub5kuifgiX/13HUiwAGZGXOETUJAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUAA+3awqALmaGlrkf9GARA8rx+BQwHwYDVR0j
BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0
RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTU5NjkyOS8wLzMxMzgzMDJlMzIz
MjMzMmUzMTMwMzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNzMwMzEzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEA7TfaDANBgkqhkiG9w0BAQsFAAOCAQEABt0Rz/F1sBLC+eLE3TS82zcP
i3dgHhzy+rgTVLjqEeVMeOxAmcHBnDGB48/XZG7tzh8g8VJA0OnA+az0YGGyhEB/
Nj5K7D4PJQdyshhlvXoyeTek3qMqFlBb+Mb+bccOQ7yMgArIFMbStrjOYKG1EPmD
rFy/UJLbhdTSfoOIfTJUM29S/U86b2N5OXkObKvCkXSYgCsN2eSS1LjjLPT5J6Nu
MhYY5loIh8bdWN471KlL7pdCft+odrP9tOyte3gaavs/MTSZUEylOro0viATFCVq
Y4WZ9lW8jRtikAmXHSElYHEq+RYhFoVqKun78PRv6Gz1paScOFle1I+nDtcwqg==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:42 2026 by rpki-client