This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3131322e302f32312d3234203d3e20333938373034.roa
File:                     3138302e3232332e3131322e302f32312d3234203d3e20333938373034.roa (raw, json)
Hash identifier:          RKI8LSVzQQUX6Y8K7TZZm5/wxF0iSavz3b1s0bVrERg=
Subject key identifier:   50:AA:84:03:50:50:D2:E9:71:58:25:D5:59:23:5A:87:EC:22:7B:C6
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       713D59F4871871940A819151753E935461DBC680
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3131322e302f32312d3234203d3e20333938373034.roa
Signing time:             Tue 20 Jan 2026 02:24:58 +0000
ROA not before:           Tue 20 Jan 2026 02:19:58 +0000
ROA not after:            Tue 19 Jan 2027 02:24:58 +0000
asID:                     398704
IP address blocks:        180.223.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3d:59:f4:87:18:71:94:0a:81:91:51:75:3e:93:54:61:db:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:58 2026 GMT
            Not After : Jan 19 02:24:58 2027 GMT
        Subject: CN=50AA84035050D2E9715825D559235A87EC227BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:44:cf:02:4b:d0:90:f5:21:56:e0:54:7c:af:
                    5e:44:af:b9:22:c1:c4:2c:08:7e:22:ba:42:2f:63:
                    65:22:2a:d0:81:37:9c:de:d8:d6:a5:da:05:5c:fc:
                    e9:c0:35:16:41:89:bf:8d:32:43:e7:f9:1f:bf:ad:
                    5d:86:1d:e6:31:a4:09:47:8a:dd:65:d3:61:e9:66:
                    14:96:63:a0:39:7e:9a:ea:64:1e:8b:41:63:ae:fc:
                    f9:b7:1c:d6:6a:91:ef:95:81:e0:b3:e0:ce:f0:e0:
                    44:13:1e:3f:f2:45:ef:6c:5c:fb:67:2a:bc:c2:b0:
                    87:cc:0c:86:01:2a:44:c7:a1:ed:e1:a5:ff:ad:08:
                    56:f6:71:82:d4:a6:1f:c1:54:c5:a9:ec:ee:2f:b5:
                    5e:46:64:db:5c:bc:81:76:3f:ef:f9:ea:7a:71:aa:
                    53:ae:ae:b4:85:16:72:43:95:f7:a2:81:a1:9d:ac:
                    4b:2e:07:34:98:9e:ab:0a:30:92:dc:e3:72:d3:75:
                    9c:a7:c0:34:a3:84:1a:4f:53:ef:61:95:c3:05:d1:
                    62:c7:55:1c:8b:3e:db:64:05:85:47:fe:f1:67:e9:
                    b9:56:11:f4:8f:ca:d9:aa:bb:7a:3e:6f:8a:39:35:
                    77:ac:dc:b9:d4:0e:ba:64:c6:51:42:9d:b3:b8:e5:
                    ea:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AA:84:03:50:50:D2:E9:71:58:25:D5:59:23:5A:87:EC:22:7B:C6
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3131322e302f32312d3234203d3e20333938373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:31:9d:70:01:4b:5b:5c:91:16:52:71:18:2c:fa:38:60:7d:
         71:97:3d:65:a8:f7:72:3b:5c:26:5e:f5:5e:8c:18:a2:f3:93:
         5b:ca:ca:4f:65:29:d2:dc:dc:bf:41:51:3c:c1:33:cb:a8:78:
         b2:cb:ed:af:08:32:e5:b6:87:16:d0:57:2d:31:a3:1f:52:ff:
         b2:b1:a8:58:ba:be:43:72:71:a4:f8:d4:51:8a:53:08:d7:39:
         d2:42:44:54:6d:b3:3d:19:2d:59:cb:b4:a7:83:a7:9d:9d:08:
         8f:59:dc:b1:9f:2e:c7:e7:5a:6a:02:7c:e8:ae:82:89:58:8f:
         ec:e3:9a:9e:4e:1f:50:4e:ec:4f:75:6e:ad:5a:df:88:aa:7d:
         e5:50:db:56:f0:d4:3c:98:27:12:31:f6:c2:ef:02:fa:cc:f3:
         f3:b1:9c:c0:c6:c9:41:91:2d:77:78:85:73:02:c1:96:fa:75:
         c0:98:4a:e9:7e:c9:bb:ea:56:bf:d1:14:da:03:3a:09:45:b3:
         74:bb:ac:36:0c:ed:0a:7e:58:de:6a:91:37:eb:ce:0c:d3:2c:
         99:bf:cd:f4:ea:00:9f:7f:67:ac:5a:1e:f9:1d:b2:84:a0:65:
         bf:52:bc:db:15:81:40:61:37:6e:e4:60:4c:c7:d2:ea:fd:93:
         40:ee:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:14:49 2026 by rpki-client