This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132302e302f32322d3234203d3e2032393134.roa
File:                     3138302e3232332e3132302e302f32322d3234203d3e2032393134.roa (raw, json)
Hash identifier:          RJliC7/bjWe9hEvhJetgOkrTMKgszGrCwTLG4PsVFOg=
Subject key identifier:   66:BB:56:9C:A5:A4:A2:56:21:44:89:4A:18:D7:BD:1E:E2:F7:00:01
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       03E19A8F363401C10F64CEB3D80C6FE91002C771
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132302e302f32322d3234203d3e2032393134.roa
Signing time:             Tue 20 Jan 2026 02:24:56 +0000
ROA not before:           Tue 20 Jan 2026 02:19:56 +0000
ROA not after:            Tue 19 Jan 2027 02:24:56 +0000
asID:                     2914
IP address blocks:        180.223.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e1:9a:8f:36:34:01:c1:0f:64:ce:b3:d8:0c:6f:e9:10:02:c7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:56 2026 GMT
            Not After : Jan 19 02:24:56 2027 GMT
        Subject: CN=66BB569CA5A4A2562144894A18D7BD1EE2F70001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:14:c4:ed:76:8c:9e:f2:9d:3a:52:6c:c5:72:
                    64:12:5d:7b:e9:95:8d:23:27:bb:0f:8e:85:2c:22:
                    09:bd:85:0b:e2:45:1b:e4:a0:0e:26:65:00:7e:71:
                    29:cc:21:0a:f2:f7:55:33:ec:c6:b0:d7:4c:8b:ac:
                    e5:63:c3:55:53:9c:8d:bd:aa:97:5e:ba:d3:e5:72:
                    57:d7:5d:13:fc:77:21:68:c4:5f:bb:15:79:14:18:
                    f9:ba:03:83:a8:b5:2c:cc:db:5c:f6:02:73:71:40:
                    e1:5b:d4:5e:1a:7c:01:47:fc:2d:06:77:19:7d:11:
                    b6:aa:2c:71:e8:0c:d2:ff:36:dd:6e:d8:41:7c:2b:
                    7f:75:35:87:83:eb:85:bf:ba:eb:5b:11:17:79:5d:
                    e1:da:1e:39:03:37:1d:58:6b:c3:3d:fd:33:10:35:
                    a6:34:20:9e:68:3e:7a:a3:76:3b:77:77:81:9c:9b:
                    be:7f:4e:82:1e:98:86:99:c8:39:84:da:de:95:9d:
                    29:a0:db:10:28:ab:11:1a:79:01:5d:22:2f:8e:46:
                    d7:08:fd:5b:d2:59:c8:82:bc:e2:1f:de:7a:5c:66:
                    55:cc:2d:a1:49:57:df:33:de:63:62:43:8d:cb:56:
                    99:26:da:66:e9:7a:30:40:94:05:30:cf:fa:41:7a:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BB:56:9C:A5:A4:A2:56:21:44:89:4A:18:D7:BD:1E:E2:F7:00:01
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132302e302f32322d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:23:f3:19:d5:98:e3:38:d4:b5:90:a0:3b:35:a3:f4:4a:05:
         a9:cf:86:41:46:fd:45:33:54:60:1e:6f:4c:8d:d4:f7:c3:f1:
         77:71:b0:b4:a3:8e:7a:9d:88:e8:5c:6d:b1:bd:4c:c7:73:e3:
         22:fc:61:61:12:d5:18:c5:a2:aa:14:54:15:6f:39:8f:97:1f:
         7e:ff:e2:a1:71:56:f7:34:e4:e8:96:3c:ff:9c:aa:40:9e:e6:
         c4:c5:38:7b:7b:9e:a7:01:df:4e:c1:fd:4e:dc:6c:e0:f5:4e:
         42:80:ab:4c:bd:10:0e:8e:32:b2:ac:23:13:12:23:16:18:aa:
         f1:cc:4e:aa:c2:68:53:ca:57:cd:d7:35:d6:33:5f:14:c1:19:
         a6:48:98:c8:98:cf:ab:0e:92:6e:ed:62:0b:5a:0f:e6:be:13:
         37:74:1e:68:cc:6a:1a:7c:f2:9c:0c:fd:30:5a:92:43:b5:fe:
         8e:22:aa:27:e5:b7:a1:d8:26:0d:4e:bd:23:6c:84:75:6b:2f:
         57:47:b2:34:ab:da:20:ab:4a:5c:23:00:01:a3:f8:79:e7:3f:
         8f:14:e5:a1:bf:d4:f1:cf:9b:d8:49:6a:fd:80:5b:33:27:9e:
         0a:e6:cb:d9:12:fc:5a:66:21:70:8a:ff:9f:20:cc:92:31:85:
         4e:cb:1d:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:27 2026 by rpki-client