This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32342d3234203d3e20333938373034.roa
File:                     3138302e3232332e3231322e302f32342d3234203d3e20333938373034.roa (raw, json)
Hash identifier:          IQDG33ZgdQksOkQ9Q3eqUT3DUFvyY5vf/bAad1DegO0=
Subject key identifier:   D5:B4:1A:63:4D:65:03:75:8D:13:25:66:34:CA:21:03:5E:40:92:86
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       7D0EAD70F7CB56D29B2DCCFCEEA9C9EEA89A9BBF
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32342d3234203d3e20333938373034.roa
Signing time:             Tue 20 Jan 2026 02:24:54 +0000
ROA not before:           Tue 20 Jan 2026 02:19:54 +0000
ROA not after:            Tue 19 Jan 2027 02:24:54 +0000
asID:                     398704
IP address blocks:        180.223.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0e:ad:70:f7:cb:56:d2:9b:2d:cc:fc:ee:a9:c9:ee:a8:9a:9b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:54 2026 GMT
            Not After : Jan 19 02:24:54 2027 GMT
        Subject: CN=D5B41A634D6503758D13256634CA21035E409286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:bd:7f:31:e0:c5:52:58:6d:71:8d:68:b0:
                    f1:8b:d3:c7:36:91:78:3c:25:20:37:8c:b0:21:46:
                    d7:a0:c8:c4:eb:61:a4:e9:4e:90:ce:43:9a:b1:84:
                    09:0e:9c:ab:e0:b2:5c:14:70:f6:07:2f:df:aa:5f:
                    7b:5a:59:49:8c:f9:47:66:a7:00:c9:d5:9a:81:95:
                    c3:f0:3f:22:ca:08:67:91:0c:82:bb:8b:f7:a0:49:
                    4b:52:f7:b1:26:64:b2:4b:15:6b:48:54:38:bb:2d:
                    b6:13:bd:b4:20:ed:62:a4:72:df:b9:7a:82:33:1c:
                    42:80:f0:0d:48:4b:2e:f0:74:44:d2:ee:80:f0:24:
                    54:c7:4a:7c:ca:99:21:07:92:a7:59:1b:46:65:6f:
                    89:8a:4b:83:d9:bb:d0:29:45:ae:4d:36:ef:e9:40:
                    3e:27:23:49:6e:62:f1:62:a5:e5:28:32:86:13:b5:
                    38:44:67:68:26:58:92:46:3b:85:ff:f1:55:75:cf:
                    6a:a5:aa:78:9b:7f:6a:cb:67:37:57:1e:2b:b3:8a:
                    2e:44:4e:f6:dc:0f:5b:dd:1c:7c:ad:80:b0:cd:93:
                    e4:ea:b2:f0:c1:a8:a8:86:11:8c:15:72:9e:d2:33:
                    08:46:15:4c:d5:8a:85:af:8e:ce:40:46:4d:38:d7:
                    17:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B4:1A:63:4D:65:03:75:8D:13:25:66:34:CA:21:03:5E:40:92:86
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231322e302f32342d3234203d3e20333938373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c8:04:e0:7a:c4:1e:b1:2c:ec:27:49:f6:89:48:db:51:d8:
         19:c8:60:4c:da:25:e9:5a:f6:72:1b:c3:0b:36:13:5c:88:7f:
         d1:50:01:75:99:df:86:b6:14:9d:5f:38:bb:43:7e:4f:10:4d:
         5d:77:4a:98:89:66:0b:ef:48:17:13:02:aa:9b:6c:2b:6c:fe:
         83:a9:5c:8a:32:2c:f1:9a:8e:1f:24:b6:a3:91:33:0b:3a:07:
         cb:78:4d:f4:41:d0:40:5f:12:11:ba:49:d0:53:89:ab:54:ac:
         9d:a0:8d:23:05:71:8a:72:2b:e2:8e:b8:54:60:30:91:f8:47:
         c7:b2:27:02:6f:a9:99:5b:17:c6:de:40:cb:99:d8:1b:b9:8d:
         6b:6a:13:90:46:9e:70:dc:80:de:35:73:77:17:2f:95:78:38:
         60:ae:33:c1:15:24:28:eb:85:7b:dc:c8:9b:08:c0:a5:63:ca:
         94:c1:e3:7d:64:a7:06:9a:3b:e3:f1:e0:18:1d:06:c6:74:0f:
         49:ff:4c:98:35:02:87:9a:2b:20:7f:af:7c:60:2e:d8:a1:a5:
         da:80:fb:02:6a:90:45:6a:d2:ab:aa:3b:1a:cf:d9:bb:a8:2f:
         25:7a:1b:7d:e1:dd:9b:10:bf:65:93:7f:35:bf:19:3b:71:88:
         80:e1:b8:2f
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUfQ6tcPfLVtKbLcz87qnJ7qiam78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw
NkNERDJDRTAeFw0yNjAxMjAwMjE5NTRaFw0yNzAxMTkwMjI0NTRaMDMxMTAvBgNV
BAMTKEQ1QjQxQTYzNEQ2NTAzNzU4RDEzMjU2NjM0Q0EyMTAzNUU0MDkyODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuKb1/MeDFUlhtcY1osPGL08c2
kXg8JSA3jLAhRtegyMTrYaTpTpDOQ5qxhAkOnKvgslwUcPYHL9+qX3taWUmM+Udm
pwDJ1ZqBlcPwPyLKCGeRDIK7i/egSUtS97EmZLJLFWtIVDi7LbYTvbQg7WKkct+5
eoIzHEKA8A1ISy7wdETS7oDwJFTHSnzKmSEHkqdZG0Zlb4mKS4PZu9ApRa5NNu/p
QD4nI0luYvFipeUoMoYTtThEZ2gmWJJGO4X/8VV1z2qlqnibf2rLZzdXHiuzii5E
TvbcD1vdHHytgLDNk+TqsvDBqKiGEYwVcp7SMwhGFUzVioWvjs5ARk041xdPAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU1bQaY01lA3WNEyVmNMohA15AkoYwHwYDVR0j
BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0
RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUz
MjMyMzMyZTMyMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzODM3MzAz
NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALTf1DANBgkqhkiG9w0BAQsFAAOCAQEAicgE4HrEHrEs7CdJ
9olI21HYGchgTNol6Vr2chvDCzYTXIh/0VABdZnfhrYUnV84u0N+TxBNXXdKmIlm
C+9IFxMCqptsK2z+g6lcijIs8ZqOHyS2o5EzCzoHy3hN9EHQQF8SEbpJ0FOJq1Ss
naCNIwVxinIr4o64VGAwkfhHx7InAm+pmVsXxt5Ay5nYG7mNa2oTkEaecNyA3jVz
dxcvlXg4YK4zwRUkKOuFe9zImwjApWPKlMHjfWSnBpo74/HgGB0GxnQPSf9MmDUC
h5orIH+vfGAu2KGl2oD7AmqQRWrSq6o7Gs/Zu6gvJXobfeHdmxC/ZZN/Nb8ZO3GI
gOG4Lw==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:14:49 2026 by rpki-client