This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231362e302f32312d3234203d3e2032393134.roa
File:                     3138302e3232332e3231362e302f32312d3234203d3e2032393134.roa (raw, json)
Hash identifier:          tcv2llL6uom2xWW8HSF3NL4DFzp+bJPOCft2z1avXJk=
Subject key identifier:   9F:2B:6D:37:E7:28:52:38:4C:C4:08:EE:FB:F9:C7:52:0B:82:4F:F6
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       508DD635E41B89FCA10301C7FB6A092B7800968D
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231362e302f32312d3234203d3e2032393134.roa
Signing time:             Tue 20 Jan 2026 02:24:55 +0000
ROA not before:           Tue 20 Jan 2026 02:19:55 +0000
ROA not after:            Tue 19 Jan 2027 02:24:55 +0000
asID:                     2914
IP address blocks:        180.223.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8d:d6:35:e4:1b:89:fc:a1:03:01:c7:fb:6a:09:2b:78:00:96:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:55 2026 GMT
            Not After : Jan 19 02:24:55 2027 GMT
        Subject: CN=9F2B6D37E72852384CC408EEFBF9C7520B824FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:de:d3:17:cb:ad:8d:84:a6:09:c0:8f:be:
                    46:0f:9a:dd:cc:f1:b6:c6:0a:f0:f6:86:94:50:93:
                    99:f9:5f:c4:8e:dc:3a:8f:51:75:c0:a5:4d:13:a5:
                    b3:f1:09:67:f1:c6:10:bd:23:b0:57:8b:8b:e4:6a:
                    ab:25:a5:7d:7a:64:0b:46:3d:1a:60:07:98:ec:26:
                    44:0a:53:94:f7:41:30:4b:d5:30:3c:cb:ad:16:fb:
                    70:e0:c7:12:64:43:39:b1:09:2c:ce:ff:7e:c9:49:
                    24:70:96:e9:6e:93:92:d2:7e:99:10:57:01:68:2c:
                    54:fa:d0:33:cd:e4:39:2d:c4:41:24:82:fe:30:b1:
                    46:db:16:9c:93:53:60:93:c3:11:e3:9f:5d:50:49:
                    24:e0:02:ee:6d:5f:10:b4:a1:53:53:b4:80:31:fa:
                    ed:e3:bf:c1:ab:96:54:f6:47:4a:90:0f:d9:32:82:
                    2a:00:73:90:3d:5d:9d:d6:57:65:a8:0c:d9:98:fa:
                    7f:19:46:da:bd:2f:bb:40:dc:fd:81:b9:de:e8:85:
                    f8:86:f4:73:b1:89:e2:f0:8f:58:4f:0b:c6:3d:d8:
                    6b:65:9e:db:40:33:77:c4:37:b8:21:7e:d0:69:d5:
                    2a:e1:3a:82:f7:78:7f:60:ff:cd:67:9c:ef:2d:88:
                    67:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2B:6D:37:E7:28:52:38:4C:C4:08:EE:FB:F9:C7:52:0B:82:4F:F6
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3231362e302f32312d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:2e:31:37:b8:43:bd:13:21:01:7d:d3:1b:a2:46:56:01:ae:
         c4:4e:e1:d2:39:de:33:70:25:8f:75:49:0e:54:2f:a8:c4:64:
         1f:58:4a:43:94:db:b8:d3:03:e9:ea:f0:f3:aa:c9:8b:d3:67:
         f3:20:a3:f8:3d:ba:c6:a8:39:a1:df:2d:86:8b:e3:48:a5:76:
         1d:23:d4:d9:4e:ce:57:0a:ef:75:f1:3f:ed:ac:de:0c:2b:74:
         d7:b2:6d:dd:5a:ae:1b:d0:f7:9c:34:b7:23:5a:67:0a:fb:84:
         a5:95:fa:87:08:fd:19:ee:9f:83:d9:65:1f:7b:5c:0f:87:b7:
         df:19:0d:2b:5b:90:f5:01:04:14:88:7c:29:11:e4:40:0b:7e:
         bd:c4:7a:51:4a:e2:1b:cc:d4:73:9a:ef:23:06:49:b9:ce:ff:
         6a:35:3b:29:12:32:1f:51:c6:42:9a:f1:19:b4:f9:48:a5:3a:
         bb:8b:a5:8d:db:4c:3f:66:5c:22:b0:0f:13:0a:7c:8f:7b:72:
         6b:b5:a9:62:65:a7:05:c6:0f:47:f2:5a:61:22:57:e0:88:bb:
         73:8f:86:e0:e1:cc:d7:63:af:be:4b:1f:55:85:c0:c8:a7:2f:
         b7:5f:9c:4b:34:ba:bb:4a:1c:6d:7b:51:40:ff:8e:bc:0b:57:
         65:c1:7e:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:43 2026 by rpki-client