This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231332e302f32342d3234203d3e20333938373034.roa
File:                     3138302e3232332e3231332e302f32342d3234203d3e20333938373034.roa (raw, json)
Hash identifier:          YRGzGO1JEDXf8bfbg50hSHer7jnBgo/iNEVb3LfrwCU=
Subject key identifier:   5A:8C:6E:80:BB:13:E7:98:BF:7D:4A:4B:47:83:D6:FB:70:93:1A:61
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       48F5A12A9582A84A73BFAF45A8CBA86736723939
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231332e302f32342d3234203d3e20333938373034.roa
Signing time:             Tue 20 Jan 2026 02:24:53 +0000
ROA not before:           Tue 20 Jan 2026 02:19:53 +0000
ROA not after:            Tue 19 Jan 2027 02:24:53 +0000
asID:                     398704
IP address blocks:        180.223.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f5:a1:2a:95:82:a8:4a:73:bf:af:45:a8:cb:a8:67:36:72:39:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:53 2026 GMT
            Not After : Jan 19 02:24:53 2027 GMT
        Subject: CN=5A8C6E80BB13E798BF7D4A4B4783D6FB70931A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:05:4c:ba:0d:2f:b7:04:b7:54:c0:77:f5:fa:
                    b7:15:10:af:8d:89:30:06:9d:a1:69:65:00:27:02:
                    5e:99:0d:fa:d1:1e:a0:30:7e:82:ed:10:7a:05:c7:
                    3c:2e:8a:99:20:45:dd:6a:da:32:8d:79:71:f3:23:
                    92:a0:c1:23:6b:a2:9c:7c:80:0e:da:75:f4:a5:90:
                    63:5d:5b:b5:9f:f9:80:84:c3:fe:31:df:15:11:0b:
                    dc:eb:94:01:28:a6:ff:dd:cf:8e:f1:e1:f1:13:7b:
                    d7:19:2c:63:f7:ec:59:9e:5c:1f:ae:51:ee:e3:71:
                    d1:ea:ae:84:42:7e:61:8c:16:e6:b2:17:e2:87:64:
                    3e:30:5f:4e:4a:fe:cb:57:52:0b:a2:ce:c9:67:d7:
                    80:91:cd:19:54:55:cb:5e:4f:e0:43:a1:77:08:a1:
                    7b:e3:61:d3:02:9a:93:27:4c:0e:3a:ea:f9:80:55:
                    3e:d9:ca:6e:e2:2a:ed:cf:6f:c7:3a:64:25:c7:01:
                    a4:54:1a:f6:ec:5d:f7:af:03:e4:ff:b5:c3:f8:84:
                    7e:6f:9c:70:09:1a:a2:da:f3:1c:d5:16:cd:44:d0:
                    62:a8:ab:b0:ab:72:33:0c:2a:6f:c6:14:db:8e:8a:
                    65:08:5a:40:dd:89:68:36:b5:8d:69:ae:fd:ba:37:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8C:6E:80:BB:13:E7:98:BF:7D:4A:4B:47:83:D6:FB:70:93:1A:61
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231332e302f32342d3234203d3e20333938373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:ae:c9:a4:07:32:b0:67:22:29:cd:4d:7b:d3:29:3f:d4:30:
         53:f0:6e:6e:8e:a1:e1:29:8d:97:5e:1b:b1:47:9b:3e:67:a0:
         5c:ac:76:75:dd:91:e2:b9:cf:f2:14:a2:6b:4b:3e:f9:e5:a9:
         0d:e4:0b:95:b9:06:d4:37:fd:69:22:42:f7:f0:e1:59:5a:57:
         65:3d:60:76:25:07:5a:8f:57:af:1d:55:a8:58:17:ac:a9:ae:
         39:f4:21:21:3a:78:4b:29:21:6c:d1:ac:c0:ec:cf:26:62:25:
         31:c5:8c:a6:5b:26:a3:b4:ba:63:cc:ab:14:0d:41:dd:ae:79:
         40:5c:5f:85:15:8b:c6:d2:61:93:7b:8b:d4:0c:ca:42:33:f8:
         a9:13:dd:1e:76:b1:33:25:35:cc:d6:5e:8a:ff:39:25:5f:d8:
         32:0a:ed:99:18:bd:04:a3:a6:b3:67:fa:c7:a9:b2:70:76:39:
         88:20:07:b2:9b:61:6e:6d:1e:c3:8f:a0:6a:ce:42:ba:c1:a7:
         8c:30:db:75:33:64:a2:4c:57:66:c9:6f:f2:ab:f6:07:1c:02:
         59:44:2a:54:85:ef:4a:e3:ad:12:95:7c:ff:ac:e1:d9:0f:18:
         cd:fb:ed:9e:a1:e0:1b:4b:b4:19:bd:f8:d0:2a:9a:e3:5f:83:
         55:36:dd:f0
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUSPWhKpWCqEpzv69FqMuoZzZyOTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw
NkNERDJDRTAeFw0yNjAxMjAwMjE5NTNaFw0yNzAxMTkwMjI0NTNaMDMxMTAvBgNV
BAMTKDVBOEM2RTgwQkIxM0U3OThCRjdENEE0QjQ3ODNENkZCNzA5MzFBNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSBUy6DS+3BLdUwHf1+rcVEK+N
iTAGnaFpZQAnAl6ZDfrRHqAwfoLtEHoFxzwuipkgRd1q2jKNeXHzI5KgwSNropx8
gA7adfSlkGNdW7Wf+YCEw/4x3xURC9zrlAEopv/dz47x4fETe9cZLGP37FmeXB+u
Ue7jcdHqroRCfmGMFuayF+KHZD4wX05K/stXUguizsln14CRzRlUVcteT+BDoXcI
oXvjYdMCmpMnTA466vmAVT7Zym7iKu3Pb8c6ZCXHAaRUGvbsXfevA+T/tcP4hH5v
nHAJGqLa8xzVFs1E0GKoq7CrcjMMKm/GFNuOimUIWkDdiWg2tY1prv26N6IPAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUWoxugLsT55i/fUpLR4PW+3CTGmEwHwYDVR0j
BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0
RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUz
MjMyMzMyZTMyMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzODM3MzAz
NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALTf1TANBgkqhkiG9w0BAQsFAAOCAQEAW67JpAcysGciKc1N
e9MpP9QwU/Bubo6h4SmNl14bsUebPmegXKx2dd2R4rnP8hSia0s++eWpDeQLlbkG
1Df9aSJC9/DhWVpXZT1gdiUHWo9Xrx1VqFgXrKmuOfQhITp4SykhbNGswOzPJmIl
McWMplsmo7S6Y8yrFA1B3a55QFxfhRWLxtJhk3uL1AzKQjP4qRPdHnaxMyU1zNZe
iv85JV/YMgrtmRi9BKOms2f6x6mycHY5iCAHspthbm0ew4+gas5CusGnjDDbdTNk
okxXZslv8qv2BxwCWUQqVIXvSuOtEpV8/6zh2Q8YzfvtnqHgG0u0Gb340Cqa41+D
VTbd8A==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:14:51 2026 by rpki-client