This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32322d3234203d3e203130313033.roa
File:                     3138302e3232332e3132342e302f32322d3234203d3e203130313033.roa (raw, json)
Hash identifier:          3AaeBzNkGvW8p7BNIrMuqtAPqgSAEjos1uCfM0pLN84=
Subject key identifier:   C7:CA:12:AE:01:B2:64:D3:62:A9:2D:F8:06:22:30:AF:09:E6:8E:B4
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       1B1C4767B7E06BDD36127DA3C75424D294C547C0
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32322d3234203d3e203130313033.roa
Signing time:             Tue 20 Jan 2026 02:24:57 +0000
ROA not before:           Tue 20 Jan 2026 02:19:57 +0000
ROA not after:            Tue 19 Jan 2027 02:24:57 +0000
asID:                     10103
IP address blocks:        180.223.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1c:47:67:b7:e0:6b:dd:36:12:7d:a3:c7:54:24:d2:94:c5:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:57 2026 GMT
            Not After : Jan 19 02:24:57 2027 GMT
        Subject: CN=C7CA12AE01B264D362A92DF8062230AF09E68EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:85:0b:76:fc:d9:71:c1:b4:39:07:76:04:
                    a1:01:03:fa:c5:f4:13:70:02:e8:c1:07:7c:e9:87:
                    71:19:1b:f9:a0:5c:86:ea:2b:e5:7f:0b:d7:06:87:
                    72:13:4b:a0:5e:19:c3:15:f3:a6:eb:58:a6:f7:d6:
                    5e:47:5f:62:2d:a2:d5:a9:c0:30:48:30:19:2e:7e:
                    63:9d:b1:dc:3b:8a:fd:4c:06:ab:cc:78:a0:2b:62:
                    7d:17:91:eb:3c:88:89:88:16:f3:45:a8:69:5f:ff:
                    b2:a4:0f:68:2d:07:cf:e4:5c:cf:96:f7:1d:ce:bb:
                    70:9f:3a:6b:11:06:1f:0a:c2:76:ad:72:5a:22:3e:
                    99:23:12:1c:55:31:19:84:c1:db:c7:d5:18:a6:b2:
                    59:3b:e2:93:5e:7b:81:9b:66:c4:33:fe:c0:c8:79:
                    48:51:d1:ff:cd:a4:c4:59:92:d3:13:65:6c:76:94:
                    bd:e6:5f:06:de:da:83:74:dc:05:fa:6f:f1:e4:fd:
                    15:70:2d:29:63:08:be:0b:83:fe:53:85:3e:eb:06:
                    59:a8:69:c8:ef:ad:95:6e:f5:71:e3:87:33:71:34:
                    58:68:90:94:34:77:e1:8d:5e:39:81:17:ef:8d:c9:
                    e8:74:92:b6:f0:3d:b8:f6:a6:31:6b:99:dd:d0:58:
                    be:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CA:12:AE:01:B2:64:D3:62:A9:2D:F8:06:22:30:AF:09:E6:8E:B4
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132342e302f32322d3234203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:6d:03:dd:56:25:92:1a:57:5f:bf:a7:fe:7b:90:1d:8a:34:
         06:6a:78:4d:e0:75:0b:6b:03:f2:33:49:06:89:63:27:f3:d4:
         08:a0:8d:22:79:96:df:0e:d3:b8:16:73:48:53:5b:2f:91:cd:
         62:bc:b5:9a:37:41:17:ea:d5:fe:e9:46:79:d1:cc:bb:64:c5:
         86:c7:17:e4:43:70:94:f3:b4:78:4c:cb:6f:d0:af:90:0f:b3:
         35:ce:e0:de:2d:a6:88:76:d8:61:b0:a1:fc:a6:dc:46:74:45:
         67:5d:ae:b4:5a:03:ec:3f:39:d9:24:10:22:b1:95:b8:5d:8d:
         4c:1b:d5:02:06:c2:64:17:94:0a:4f:ce:56:e9:4a:2d:bf:37:
         18:f4:fd:6b:5e:16:21:a0:71:99:a1:1f:c6:88:29:be:d8:07:
         3e:12:d3:a7:42:1d:57:42:d9:b8:17:db:a7:1e:a0:d8:42:6e:
         9e:34:ed:12:55:b9:ae:d7:92:f8:9c:d7:55:70:e9:4a:f7:49:
         c6:cc:78:d6:8b:b4:56:5f:ac:24:cf:65:15:bf:51:43:52:81:
         a0:91:7b:0d:23:dd:b3:76:bc:89:53:5c:54:1c:2a:fe:ea:01:
         a1:49:ba:7a:8b:94:cf:55:1b:5e:69:96:b2:93:e3:ed:b0:ec:
         ae:c9:46:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:12:48 2026 by rpki-client