This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e20333938373034.roa
File:                     3138302e3232332e36342e302f31382d3234203d3e20333938373034.roa (raw, json)
Hash identifier:          onxPksrDVBozAkzx7Hv9WVt5usg2eM2foE/EhxKZX04=
Subject key identifier:   D5:5B:02:2E:CE:7F:61:BE:0B:0A:6C:DD:98:F3:42:9A:E5:78:EB:59
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       4DD5C7B825FEAE5890276B14E59E8040F2C37169
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e20333938373034.roa
Signing time:             Tue 20 Jan 2026 02:24:53 +0000
ROA not before:           Tue 20 Jan 2026 02:19:53 +0000
ROA not after:            Tue 19 Jan 2027 02:24:53 +0000
asID:                     398704
IP address blocks:        180.223.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d5:c7:b8:25:fe:ae:58:90:27:6b:14:e5:9e:80:40:f2:c3:71:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:53 2026 GMT
            Not After : Jan 19 02:24:53 2027 GMT
        Subject: CN=D55B022ECE7F61BE0B0A6CDD98F3429AE578EB59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:3f:e5:72:27:d9:08:3d:df:a6:06:59:8f:
                    f2:6d:1f:df:b2:1b:db:75:d4:b7:0c:b1:fa:cb:c5:
                    af:8d:17:93:29:16:61:88:18:03:bd:90:3c:1f:20:
                    ad:c2:84:dc:4a:35:b3:12:1c:3d:a4:cd:80:4a:a8:
                    54:58:bb:fd:24:23:f3:3e:c6:81:60:ce:be:3d:1e:
                    37:6f:db:e3:db:ec:3b:5b:7e:e9:db:8d:bb:2d:c3:
                    aa:85:97:89:67:95:ed:cd:89:96:06:2a:4b:c6:86:
                    af:a2:6f:31:31:5e:7f:27:a5:c3:b3:e5:7d:87:1a:
                    58:67:77:6d:f3:eb:a5:ce:30:f1:b6:1e:14:b0:de:
                    35:49:8d:84:92:85:52:4f:f2:98:08:15:00:74:b9:
                    42:42:5b:88:e1:0d:a0:b6:a8:b2:1c:5a:d0:76:83:
                    fb:ef:c3:16:4b:20:5c:8b:2f:da:da:36:7e:41:c0:
                    2f:fc:e6:ca:e9:81:04:99:31:83:4a:4f:08:34:3b:
                    e9:68:5d:0e:d2:95:0e:5d:e4:a8:64:98:b7:98:cd:
                    3d:a5:71:1c:3c:d7:7c:09:0d:06:4c:96:53:bd:06:
                    20:84:64:f1:1d:6c:e0:a7:bb:a3:f7:63:0e:ff:71:
                    9b:84:b6:35:44:d0:6d:d3:65:f7:df:59:a5:4a:f9:
                    29:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5B:02:2E:CE:7F:61:BE:0B:0A:6C:DD:98:F3:42:9A:E5:78:EB:59
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e20333938373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         15:a8:61:81:09:60:77:77:f7:51:88:a4:07:3e:20:07:70:1c:
         7a:82:bf:af:c3:58:bc:12:ad:45:f0:c8:ad:37:34:ba:ff:f3:
         74:7a:52:14:05:46:91:6a:be:bd:c0:80:22:55:fc:71:22:e1:
         d7:80:1b:99:9b:d0:7f:03:72:0b:4e:7a:e8:62:66:cb:48:62:
         5c:39:e3:4a:cc:e6:d6:cd:1d:d2:7a:0e:b6:56:4d:af:e9:fe:
         07:f6:df:bb:23:8f:6c:2b:59:03:6f:49:61:ec:09:0a:a4:e3:
         2f:dc:68:bd:1b:71:63:3c:94:bb:73:4f:3f:0d:0e:c9:6b:7f:
         3d:d4:52:8d:bc:ae:a5:02:dc:b6:6f:b6:38:8b:db:4a:f8:c8:
         be:38:01:2a:dc:e6:98:92:7d:4c:34:cc:29:22:36:bb:f2:38:
         24:69:82:52:37:df:5c:f7:3e:dc:71:e5:82:05:66:21:df:7c:
         82:08:e9:39:a4:33:c1:f0:b3:b7:08:bf:33:3b:7b:74:f5:a1:
         a0:8c:a3:7d:62:5f:e6:e7:85:52:68:e5:43:36:10:5e:39:d9:
         a2:bd:f7:7a:77:91:8d:51:e1:64:8a:51:0d:51:39:af:a7:7a:
         38:36:e2:8c:c2:fe:c7:0a:fe:f7:fd:dc:2d:66:bd:97:8c:a5:
         78:88:aa:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:49 2026 by rpki-client