This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e203130313033.roa
File:                     3138302e3232332e3233322e302f32312d3234203d3e203130313033.roa (raw, json)
Hash identifier:          dO01JE0fZCpZI7/oHgMyMVv90QJ3oUaMTXgdCBD0Ni0=
Subject key identifier:   3E:B5:0B:96:A8:E3:12:7C:C1:FA:F3:58:D2:87:E3:2F:BB:E7:C4:5F
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       19AAC3DBA30A1BD55D5466EA1A2B3CD5863AC3D6
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e203130313033.roa
Signing time:             Tue 20 Jan 2026 02:24:59 +0000
ROA not before:           Tue 20 Jan 2026 02:19:59 +0000
ROA not after:            Tue 19 Jan 2027 02:24:59 +0000
asID:                     10103
IP address blocks:        180.223.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:aa:c3:db:a3:0a:1b:d5:5d:54:66:ea:1a:2b:3c:d5:86:3a:c3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:59 2026 GMT
            Not After : Jan 19 02:24:59 2027 GMT
        Subject: CN=3EB50B96A8E3127CC1FAF358D287E32FBBE7C45F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:02:56:d5:06:39:f5:2e:8a:c7:1e:43:27:
                    1d:64:01:08:76:59:21:9f:e5:e2:66:c8:16:79:e4:
                    ff:d4:72:ae:5c:3e:fe:72:a4:92:57:9e:0e:b4:82:
                    22:89:ff:31:f3:68:b9:dc:ea:34:4b:9b:b0:37:f8:
                    b6:b5:ce:d4:4c:35:b1:14:93:f7:72:99:6a:6a:c7:
                    1c:3d:49:d9:7f:7e:61:86:e5:dc:b0:10:20:50:55:
                    2d:8c:85:00:62:84:c5:6a:a6:6e:35:64:08:73:63:
                    80:3e:bb:be:2c:a4:90:db:a2:28:13:37:97:d8:5b:
                    fe:8e:99:7c:d3:97:59:0c:50:a5:f6:6b:38:83:0c:
                    2f:7b:e3:37:48:48:c7:bd:d3:cc:77:3d:7f:20:ef:
                    57:19:ef:39:0b:19:46:c0:ac:89:4e:d6:da:7e:f4:
                    fa:5a:0b:83:46:1a:7a:13:f0:cf:f5:d1:00:14:90:
                    9a:79:08:99:4b:27:45:1c:32:74:b3:a2:e0:92:c6:
                    b1:bc:64:63:89:d9:4c:8b:b2:b8:d8:d7:c2:8b:29:
                    3a:93:d7:3e:0c:51:86:5f:e5:7d:75:ea:92:62:c3:
                    37:9e:2d:9d:4a:67:62:75:1a:df:d1:50:85:5e:eb:
                    e5:90:f0:99:f4:02:52:9b:5d:d8:56:da:2f:41:95:
                    37:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B5:0B:96:A8:E3:12:7C:C1:FA:F3:58:D2:87:E3:2F:BB:E7:C4:5F
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:e1:45:eb:e0:bc:01:d7:48:65:5e:be:83:ee:68:90:cb:8e:
         3f:cb:a0:15:17:d8:0b:5f:ab:f8:c1:f4:18:61:56:dd:a8:a6:
         30:e0:c7:27:65:2d:a3:86:37:ab:50:49:58:5e:32:6a:3a:ba:
         47:ec:7d:e1:bc:9c:0d:f0:92:e8:12:13:db:f5:79:f7:88:77:
         3d:e3:6b:ba:67:54:2f:19:cf:93:47:f7:cc:b8:a1:fc:d3:32:
         5f:52:57:12:32:12:6f:ca:a8:2a:14:24:cd:bf:6b:d4:99:6b:
         30:ce:73:7a:fb:54:52:88:36:d6:7c:5a:40:ee:2e:59:e0:13:
         ff:78:63:c0:99:15:b4:07:c5:d8:34:55:4e:4a:0d:25:ca:b6:
         02:76:b1:a7:cf:a5:d1:67:76:19:e1:19:95:26:8f:f5:2d:16:
         75:e5:95:f2:03:c5:2d:c5:52:9e:e6:e0:2a:62:d5:37:6e:bd:
         d6:b0:38:19:d3:3d:4f:8d:ff:11:bc:1b:87:23:ff:03:fc:6e:
         7e:52:a2:76:84:a3:cd:82:3d:d6:e8:4e:af:a4:88:2e:f1:2c:
         ce:a9:70:65:40:c6:24:ef:13:3c:00:00:e9:12:0e:dc:1b:de:
         1b:74:94:13:4f:19:ce:85:06:4a:86:84:60:6c:66:e3:b3:d4:
         c4:e4:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:41 2026 by rpki-client