This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e203138383131.roa
File:                     3138302e3232332e36342e302f31382d3234203d3e203138383131.roa (raw, json)
Hash identifier:          qOPKR77eqM5H3vNCVcCFaUMG51XsMx8qzewTB3iWNAI=
Subject key identifier:   55:CA:CF:0D:EB:C7:DD:80:5F:B7:E0:E0:C3:CF:89:38:26:87:B0:FF
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       7FF43FC9764769DF40DE96391AA2B392D91AA7A4
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e203138383131.roa
Signing time:             Tue 20 Jan 2026 02:24:55 +0000
ROA not before:           Tue 20 Jan 2026 02:19:55 +0000
ROA not after:            Tue 19 Jan 2027 02:24:55 +0000
asID:                     18811
IP address blocks:        180.223.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f4:3f:c9:76:47:69:df:40:de:96:39:1a:a2:b3:92:d9:1a:a7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:55 2026 GMT
            Not After : Jan 19 02:24:55 2027 GMT
        Subject: CN=55CACF0DEBC7DD805FB7E0E0C3CF89382687B0FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c4:0d:94:7d:8c:71:20:de:2d:dc:cf:e3:10:
                    ba:f0:1e:78:13:e8:e1:0c:1b:17:b4:20:2f:3c:eb:
                    cf:c9:36:5c:10:2f:9d:a2:a0:dc:04:39:de:dd:1d:
                    0e:f2:08:46:0a:2f:3d:90:cc:28:4d:b6:01:39:74:
                    4d:08:4f:10:a7:f1:17:2b:e1:27:6e:28:b6:b9:d7:
                    82:26:4a:75:33:83:48:98:34:11:1d:bf:7d:d5:ed:
                    ef:ab:c8:07:08:e5:97:63:ab:16:e8:89:62:6f:d5:
                    7d:f0:2a:08:50:b1:8e:10:cc:f9:b1:44:ac:90:8f:
                    d3:5a:d0:83:9b:d3:6a:9f:47:95:d4:ac:04:eb:0c:
                    55:52:15:a9:35:12:93:b5:98:f6:71:1d:b4:de:a3:
                    a6:c8:95:87:73:6a:00:4d:a0:42:2f:3f:58:df:29:
                    ea:1a:09:98:2a:45:e0:73:ea:82:2b:f7:e3:4b:15:
                    b7:c3:d9:db:ce:f0:8e:29:6d:44:71:0d:3c:07:80:
                    3d:c5:81:8d:5d:3a:71:3c:7d:81:66:be:3b:b2:fa:
                    44:3e:0c:34:6d:b5:85:5a:33:4e:d7:38:b3:6d:47:
                    e2:85:fd:82:87:e4:bb:af:a2:f7:26:46:40:86:50:
                    11:b7:99:12:7e:0d:8e:11:dd:b9:51:22:9b:fc:4f:
                    bd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CA:CF:0D:EB:C7:DD:80:5F:B7:E0:E0:C3:CF:89:38:26:87:B0:FF
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e203138383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a5:bc:28:31:61:71:66:75:4e:c1:5a:cc:0c:ba:99:c2:7b:f0:
         50:23:fa:9a:fa:d4:87:e3:49:4c:c0:79:10:a9:96:05:10:12:
         98:5e:35:4a:82:84:e5:79:c7:18:0a:62:a9:e9:b3:f7:c5:89:
         51:a8:4d:4a:64:7d:98:79:68:c0:ad:21:5e:42:75:0b:aa:6a:
         e2:0b:67:d6:b6:f7:89:c9:b4:c2:d1:c6:92:e5:96:5d:78:3d:
         79:01:32:cc:09:9e:af:0c:ed:12:70:09:b1:6e:e8:15:94:ca:
         74:42:6a:c1:2d:d9:24:86:93:7b:d1:45:45:37:aa:be:39:3e:
         6f:fe:2b:4d:99:f5:d9:17:5c:f1:f7:95:dc:7b:06:1e:b1:21:
         90:4f:8f:06:70:bb:b5:a3:6a:02:90:2d:a0:6b:5a:c0:a1:50:
         5e:f9:bb:8e:44:90:56:42:94:8d:80:e1:b4:a7:c2:8d:1d:fd:
         12:ed:02:b7:db:fd:d8:22:c2:2f:96:d7:05:0d:0a:71:36:d9:
         eb:2d:40:18:2e:54:15:57:cb:36:54:fb:6c:7f:28:db:ba:dc:
         f6:3e:16:12:a7:66:af:44:62:79:bf:cb:f4:f8:57:04:81:46:
         50:30:43:91:d3:ec:3b:68:73:57:08:2d:07:58:e2:f0:f1:e4:
         10:3c:8d:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 11:25:39 2026 by rpki-client