This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32322d3234203d3e2032393134.roa
File:                     3138302e3232332e3231322e302f32322d3234203d3e2032393134.roa (raw, json)
Hash identifier:          rItQc3spQDrS1Fjfd3VOoXehKm3g2SGfAeladB6oFqw=
Subject key identifier:   A8:FB:CB:00:49:CE:B7:13:69:48:BE:46:8D:64:53:8A:BF:29:C9:3E
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       3BF36FAB5F0005E07210F1C4E801AB93028FD314
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32322d3234203d3e2032393134.roa
Signing time:             Tue 20 Jan 2026 02:24:57 +0000
ROA not before:           Tue 20 Jan 2026 02:19:57 +0000
ROA not after:            Tue 19 Jan 2027 02:24:57 +0000
asID:                     2914
IP address blocks:        180.223.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f3:6f:ab:5f:00:05:e0:72:10:f1:c4:e8:01:ab:93:02:8f:d3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:57 2026 GMT
            Not After : Jan 19 02:24:57 2027 GMT
        Subject: CN=A8FBCB0049CEB7136948BE468D64538ABF29C93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:54:6c:fa:95:44:fa:22:26:7e:12:e0:39:
                    09:c0:61:df:00:88:41:e1:15:52:c9:09:0b:05:ad:
                    6f:b4:42:cc:5c:cb:1b:98:03:1e:0e:54:95:30:18:
                    be:e9:5b:b9:03:29:3d:d4:f0:ea:88:42:fa:1e:9e:
                    54:f2:9e:8f:21:5c:dc:a5:d3:a5:cc:52:58:06:af:
                    f6:2b:cd:61:36:fe:ed:46:ce:99:74:ad:4b:73:22:
                    de:b9:1c:77:5d:b2:fd:83:1e:b0:30:43:05:76:a5:
                    3b:d9:02:87:05:3d:b1:39:43:80:72:39:3b:e7:b7:
                    45:ec:bf:02:19:d5:df:e9:80:44:18:e8:7a:7e:03:
                    22:d7:8d:fa:31:9c:37:48:e9:ca:53:1d:5e:22:d3:
                    ec:8d:fd:20:3a:05:d9:49:50:10:27:85:7f:ff:94:
                    6f:30:11:e7:ab:b3:e6:e2:fe:b5:cc:5b:6a:6f:5f:
                    6d:0f:d5:8e:a6:ef:52:18:4e:fb:39:cb:8f:3f:c4:
                    2f:9b:e1:a4:e1:8d:c6:99:2a:6c:e1:c8:70:32:c2:
                    2b:d7:a1:63:13:91:84:18:39:dd:1d:07:f9:e3:25:
                    a9:0a:8e:26:ad:7b:c5:e3:f8:c9:81:28:cd:fe:3c:
                    c7:17:23:46:29:a1:2b:d4:0f:74:09:38:2d:78:84:
                    b6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FB:CB:00:49:CE:B7:13:69:48:BE:46:8D:64:53:8A:BF:29:C9:3E
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32322d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:5c:e1:fd:89:84:dd:60:ce:f5:69:f8:49:39:27:1b:24:57:
         c1:a1:0e:3a:58:2e:97:0a:d5:d8:f1:65:da:f7:38:20:75:e6:
         94:3b:c7:55:f7:8d:5f:a2:96:c6:33:11:24:a3:8e:c5:41:f7:
         bc:a4:7f:34:ac:a1:e0:b9:ef:d2:b8:41:32:03:73:af:e5:3a:
         73:14:fe:df:f1:74:19:8e:d4:4e:a3:89:43:9f:78:39:31:89:
         7f:bd:ae:a2:e8:16:65:9d:c4:0c:63:bb:bd:97:1d:c6:be:c5:
         e3:94:69:27:4d:88:9a:6b:6b:c0:f1:a1:41:10:14:3c:0a:07:
         50:37:a1:df:f4:f5:6c:6a:c1:3f:c4:ca:b5:bc:51:84:12:96:
         c3:a8:38:1c:13:4f:f3:1b:fe:86:e8:ee:9b:bc:49:05:38:7d:
         7c:34:1d:91:07:6f:0b:bb:7c:31:82:7b:7b:57:0d:de:44:03:
         33:2f:fc:da:fa:87:eb:4e:81:e2:f5:b3:be:a3:91:60:21:74:
         2a:a3:02:8a:26:e1:45:3a:40:2b:68:f9:5e:b7:f6:59:78:17:
         93:7c:50:d4:7b:f5:6f:93:10:91:94:33:f0:63:45:d6:20:0d:
         d6:66:2a:e0:fa:61:0d:08:d5:47:5a:2f:83:38:46:52:5f:2a:
         58:b6:88:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:42 2026 by rpki-client