This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3131362e302f32322d3234203d3e20393834.roa
File:                     3138302e3232332e3131362e302f32322d3234203d3e20393834.roa (raw, json)
Hash identifier:          Huwlj8Gu5PWl+Sk5ABtMZYXWRu21SQMGhdlolipu1JI=
Subject key identifier:   E5:E3:90:39:80:3D:D4:9F:F0:01:3B:6F:07:14:2E:35:41:B1:CB:F1
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       46F013CAB657ACFEA3F34D7FCA1F025239E8B0B2
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3131362e302f32322d3234203d3e20393834.roa
Signing time:             Tue 20 Jan 2026 02:24:54 +0000
ROA not before:           Tue 20 Jan 2026 02:19:54 +0000
ROA not after:            Tue 19 Jan 2027 02:24:54 +0000
asID:                     984
IP address blocks:        180.223.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f0:13:ca:b6:57:ac:fe:a3:f3:4d:7f:ca:1f:02:52:39:e8:b0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:54 2026 GMT
            Not After : Jan 19 02:24:54 2027 GMT
        Subject: CN=E5E39039803DD49FF0013B6F07142E3541B1CBF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:c4:f0:37:b1:fd:70:d7:05:38:19:77:40:
                    98:6b:2e:e6:bf:05:54:1a:43:b6:07:fc:24:37:55:
                    29:be:60:62:d1:97:23:3a:bc:d7:bf:63:d6:7d:93:
                    d8:01:b1:d9:2c:ef:c7:b1:91:a1:62:ba:60:a8:36:
                    90:6d:91:84:23:a6:2e:4b:a1:97:ba:84:44:ef:53:
                    c0:0d:ce:29:36:54:71:c3:f6:e4:b6:0f:60:cb:d3:
                    23:4e:4a:46:15:b2:3a:cd:0d:b5:d4:26:86:14:43:
                    2d:6a:13:0a:b9:cd:a2:33:6c:15:9b:94:1b:dc:26:
                    82:3c:52:c6:9c:f1:3d:d6:14:da:3b:8c:62:78:cd:
                    26:9e:0f:58:df:a9:bc:d7:c1:69:ba:66:73:fb:e0:
                    2c:30:98:07:c6:bc:5e:79:5c:58:80:de:8f:da:7e:
                    d3:53:39:63:29:61:4f:8b:ca:46:6f:ca:93:66:97:
                    6c:b8:5d:2b:de:60:73:21:48:3b:57:57:f2:14:df:
                    47:7f:78:07:93:2b:96:a2:80:08:8e:a8:24:6f:9f:
                    0a:f1:4f:c3:49:28:11:5e:d3:8d:35:ee:f9:ce:26:
                    41:66:2c:7b:f1:91:12:37:03:cd:ec:28:2a:18:8b:
                    e5:7e:1b:8a:1f:da:a2:d6:a4:e1:58:66:4f:51:35:
                    9d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E3:90:39:80:3D:D4:9F:F0:01:3B:6F:07:14:2E:35:41:B1:CB:F1
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3131362e302f32322d3234203d3e20393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:2b:4b:fa:3d:d4:c0:21:e8:c9:61:8f:18:5c:4b:be:16:55:
         ef:ad:5f:b3:8c:ed:0d:a2:5a:9f:7e:a9:56:ad:a7:48:00:03:
         66:19:4d:a8:e7:ae:18:f6:1c:3d:f1:da:10:7e:1a:cc:6f:62:
         1b:bb:dd:3a:a6:b5:65:0d:d3:aa:8f:8d:b1:38:c5:e5:28:20:
         77:c4:6c:9f:27:4c:a5:27:9b:3c:0a:58:b6:6a:5f:a7:da:0b:
         72:75:8b:9b:c1:e1:7a:49:3c:83:ce:24:0d:1d:84:ea:67:c7:
         4a:2d:c9:c5:be:c1:e1:87:8a:ff:30:d3:69:a5:ea:a4:a9:6f:
         de:a5:c0:14:b2:22:d5:2d:cd:c5:f6:39:d8:ca:43:c1:32:a8:
         f2:bc:ce:70:8f:04:c8:e6:d0:67:a8:81:2e:d7:e7:d4:92:0f:
         a1:c6:f6:8d:c4:c9:34:d1:6d:85:d0:cc:70:c9:3a:5f:a7:77:
         4d:f2:f1:ba:7d:1e:10:94:c9:e9:4e:b1:9e:03:3b:d5:e5:18:
         66:10:95:56:42:7b:3e:c5:ea:5b:79:1a:0a:6d:84:bf:41:f1:
         88:69:03:d1:00:1d:bb:a2:a2:e9:ed:4d:54:72:40:fe:0a:1f:
         04:30:be:30:59:66:5b:f6:12:61:7c:cc:d8:bc:0d:37:7f:27:
         cb:87:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:44 2026 by rpki-client