This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31382d3234203d3e2039333034.roa
File:                     3138302e3232332e3132382e302f31382d3234203d3e2039333034.roa (raw, json)
Hash identifier:          mUcWzd1s5ZYCrImgywJAC3JMiONP6d7QF6waGHVPhBQ=
Subject key identifier:   F6:38:28:D5:60:73:DD:14:52:F8:10:6E:6D:D6:28:55:8C:E7:1F:1A
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       01BDA7973FD365C5C551354DBCC67E96E3BCC335
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31382d3234203d3e2039333034.roa
Signing time:             Tue 20 Jan 2026 02:24:57 +0000
ROA not before:           Tue 20 Jan 2026 02:19:57 +0000
ROA not after:            Tue 19 Jan 2027 02:24:57 +0000
asID:                     9304
IP address blocks:        180.223.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bd:a7:97:3f:d3:65:c5:c5:51:35:4d:bc:c6:7e:96:e3:bc:c3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:57 2026 GMT
            Not After : Jan 19 02:24:57 2027 GMT
        Subject: CN=F63828D56073DD1452F8106E6DD628558CE71F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:be:3f:59:c6:70:46:e4:7d:d3:87:ac:c8:d3:
                    9a:49:fc:67:ad:94:38:8c:1c:a0:bd:20:1b:f1:5e:
                    af:b0:85:1a:fe:92:9c:9e:99:26:69:75:5d:dc:53:
                    dd:7f:24:83:ce:4b:72:2c:c6:5b:67:e5:a2:4a:f0:
                    a8:7d:79:e6:6b:0f:58:c9:9c:9e:a8:de:03:bc:7d:
                    a9:20:ef:3a:b0:06:9e:f0:78:f0:5b:96:b9:ef:1e:
                    a4:be:a2:58:45:34:1c:af:cc:49:ce:76:59:f7:a8:
                    46:cb:54:ec:ef:57:2e:fd:bd:5a:91:92:20:43:77:
                    fe:2b:7f:a5:d8:2c:78:a6:9c:91:88:64:6c:6f:c1:
                    a2:15:ba:78:04:39:22:02:63:05:3a:a0:8f:ed:ca:
                    3d:63:d5:dd:d6:19:66:82:e6:2b:bc:67:eb:42:f8:
                    db:e4:1d:2f:5a:f5:88:f6:0c:7f:a0:c5:cc:a4:35:
                    6c:01:13:be:45:ee:ab:2d:ee:32:3f:33:f2:93:41:
                    56:a2:68:9e:da:57:d9:5e:4e:b7:ff:da:ea:6c:4b:
                    33:61:24:b2:cb:d6:94:a9:0c:dc:9e:fe:95:f5:82:
                    45:83:18:d7:33:5e:51:cf:5c:66:e0:43:ac:e5:93:
                    22:28:e7:c0:b5:5f:00:65:68:7e:af:c4:bc:8e:93:
                    21:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:38:28:D5:60:73:DD:14:52:F8:10:6E:6D:D6:28:55:8C:E7:1F:1A
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31382d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8e:56:2f:0c:66:53:f5:64:21:16:08:52:8c:b7:ef:05:d2:33:
         69:f9:07:93:1f:6c:df:33:3d:27:b6:4c:29:3b:7e:1e:6a:82:
         78:56:31:7c:62:b0:70:48:17:09:f3:cc:10:71:4e:75:a3:59:
         20:f7:b2:49:81:1c:f7:95:07:a3:4b:63:3e:2e:93:73:51:d3:
         53:87:f5:29:55:f1:8c:f6:f3:60:04:50:bc:41:43:da:c4:cd:
         77:3c:70:4d:64:d9:f6:3c:ad:c6:20:39:bd:ce:fb:65:3d:11:
         4c:f0:42:58:3c:36:dc:b1:e2:ef:ea:02:17:40:56:43:f3:1e:
         1c:7d:8f:2c:12:59:b1:73:56:8e:13:38:0b:a7:12:b4:60:2b:
         0e:98:49:8d:40:1a:60:c1:23:80:c1:3e:82:3c:1f:c0:26:59:
         cd:5b:e5:3f:95:69:4b:0e:60:d3:80:b3:d6:2f:83:62:82:b4:
         e2:4b:eb:8d:bf:5f:da:52:8f:54:2d:96:75:30:73:81:97:eb:
         3b:4f:e3:d1:9d:ca:60:04:e9:ca:10:c4:21:31:79:ef:e0:22:
         6d:c9:ca:91:16:7b:3e:44:87:f0:32:ba:dc:09:f7:30:87:61:
         ec:e8:17:ec:aa:6a:3b:c3:62:12:f5:96:dd:87:7a:c5:3c:9d:
         ac:15:c3:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:27 2026 by rpki-client