This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3139362e302f32342d3234203d3e2032393134.roa
File:                     3138302e3232332e3139362e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          5hIutRMhd6Qza2Q7E03DGhZks1LY/gkCRfDmK3ro5IU=
Subject key identifier:   D4:E1:20:19:3E:5E:4A:33:4C:95:83:B9:F9:FC:CF:2F:6B:10:1A:23
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       7B4ADA3AA19ED9ACE8EF1A08D161BE9AB24FFB3D
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3139362e302f32342d3234203d3e2032393134.roa
Signing time:             Tue 20 Jan 2026 02:24:59 +0000
ROA not before:           Tue 20 Jan 2026 02:19:59 +0000
ROA not after:            Tue 19 Jan 2027 02:24:59 +0000
asID:                     2914
IP address blocks:        180.223.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4a:da:3a:a1:9e:d9:ac:e8:ef:1a:08:d1:61:be:9a:b2:4f:fb:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:59 2026 GMT
            Not After : Jan 19 02:24:59 2027 GMT
        Subject: CN=D4E120193E5E4A334C9583B9F9FCCF2F6B101A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:29:6f:a6:fa:ac:63:37:0c:1e:5c:7b:4a:
                    af:ce:80:0d:b6:4d:53:b9:3c:37:e7:27:4c:7b:cc:
                    2d:7b:24:e8:3b:b2:cd:cb:59:38:df:76:8c:0a:d1:
                    fc:12:50:f9:46:72:f4:5a:d6:f1:d8:f3:d6:63:7e:
                    8e:7e:e7:78:71:b2:24:4f:8c:6d:e4:16:e7:ba:00:
                    eb:71:83:8d:54:c0:7b:8b:33:6a:22:5c:d7:63:e5:
                    56:33:cc:a7:2d:d9:cf:6b:06:52:c8:ae:24:27:9d:
                    35:6e:2e:0f:2b:99:27:87:03:8d:f6:27:27:52:d7:
                    a6:3b:23:5a:6f:cb:7a:df:3d:23:e6:29:9d:f2:ae:
                    c1:05:70:8e:bc:3d:f1:a6:fa:60:8c:3d:bd:81:a5:
                    28:e1:a7:c7:df:8e:cb:b6:fc:f4:ea:09:04:69:d0:
                    9c:6b:75:d4:60:57:a7:af:7f:64:0c:9f:8a:b4:b7:
                    11:e0:fb:49:96:0c:96:ce:1c:85:6d:21:73:c7:19:
                    c0:ed:25:d0:d4:70:de:c8:c9:08:8d:8d:52:3c:7d:
                    d0:87:9a:c9:a0:b6:10:f2:76:f4:d9:8b:74:ff:83:
                    d1:16:23:2a:26:1e:3c:a1:77:86:d2:79:3f:13:ff:
                    9f:77:fe:d9:66:c9:2b:ad:d7:4b:f2:82:92:e3:77:
                    ea:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E1:20:19:3E:5E:4A:33:4C:95:83:B9:F9:FC:CF:2F:6B:10:1A:23
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3139362e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:85:8b:cf:48:35:4d:63:7a:e4:e4:6c:17:60:68:a8:e1:0b:
         bd:f1:2b:16:59:0c:49:3c:2f:ca:e9:ac:94:92:7b:97:0c:37:
         0a:b9:41:b3:02:01:99:7c:74:85:60:79:52:7d:94:74:f0:b2:
         7c:54:cb:80:82:10:11:06:9c:98:1e:07:14:19:fc:ee:02:13:
         d2:40:70:7c:80:05:5b:e5:2d:5e:f1:c8:87:9d:fc:0d:fb:e6:
         7b:da:81:26:dd:8d:62:9d:07:16:c7:bd:da:cd:e0:f1:fc:c8:
         46:01:d2:6a:6b:48:9d:3d:0b:6d:73:a5:89:30:ec:31:79:70:
         65:a9:b9:6a:64:42:42:88:d6:b0:57:ee:c4:cb:02:86:aa:68:
         c7:f7:6b:3a:05:be:9a:19:17:b8:7d:12:5e:b9:0c:36:3c:03:
         30:8b:b6:9a:b6:87:2b:6f:c0:30:2f:8e:f8:30:3e:d6:b8:8b:
         a6:f3:6e:3d:ce:34:ff:6b:20:98:77:8b:4c:37:ba:49:62:24:
         71:d4:6c:5c:d3:ea:e5:5a:5c:4b:db:01:61:55:af:7d:3a:73:
         e5:8f:8d:7f:b3:26:ab:64:f0:69:f1:79:25:57:6f:de:49:ad:
         f7:36:f0:ab:78:aa:13:b8:1b:1b:d9:12:17:0a:e5:6d:5a:5d:
         bc:10:8a:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:49 2026 by rpki-client