This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e2036303739.roa
File:                     3138302e3232332e36342e302f31382d3234203d3e2036303739.roa (raw, json)
Hash identifier:          px4BXyXh04/ylXmyfBqf8cdjSmfyDgQF68eYVa2Xu3k=
Subject key identifier:   25:EB:3C:0E:D3:4C:4C:C0:01:08:AC:44:5B:A3:9B:5B:C2:98:CB:8C
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       5F0700B1C949808E2761257BA5F48425833318A7
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e2036303739.roa
Signing time:             Tue 20 Jan 2026 02:24:53 +0000
ROA not before:           Tue 20 Jan 2026 02:19:53 +0000
ROA not after:            Tue 19 Jan 2027 02:24:53 +0000
asID:                     6079
IP address blocks:        180.223.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:07:00:b1:c9:49:80:8e:27:61:25:7b:a5:f4:84:25:83:33:18:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:53 2026 GMT
            Not After : Jan 19 02:24:53 2027 GMT
        Subject: CN=25EB3C0ED34C4CC00108AC445BA39B5BC298CB8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a0:bc:b4:30:73:63:ad:b3:28:2c:2b:99:fc:
                    55:3b:62:d2:81:cd:fb:ec:80:54:9b:4e:2c:8a:e7:
                    f7:98:a4:d2:3b:db:9e:d0:cc:61:3b:45:c2:71:f4:
                    ca:48:6f:46:d9:f8:a1:14:f0:16:3d:16:5e:9a:9d:
                    5d:58:00:f0:94:cf:32:30:11:de:5c:da:6a:5c:54:
                    a0:f3:7f:93:76:99:9c:01:50:64:05:f4:15:a0:bb:
                    63:e5:48:ef:e2:19:24:6c:3b:80:e1:61:6c:1b:d1:
                    59:a9:c2:e0:47:66:38:97:27:0d:27:c1:3e:6b:57:
                    f4:dd:a0:7f:47:5b:3b:30:bd:cb:e5:ae:3c:8e:d8:
                    f5:2e:4d:f4:85:eb:8a:54:cc:64:ee:7d:85:84:6a:
                    50:9c:1a:ef:8e:2c:a7:1c:96:45:33:9d:b1:f2:ff:
                    cf:16:7f:2c:bf:f2:35:68:ae:84:63:b0:9a:b6:58:
                    3f:c6:c7:46:87:57:75:16:a1:ca:82:21:92:b8:c8:
                    dd:7d:b8:06:61:95:a9:d2:b1:ee:58:90:cb:d0:5f:
                    3d:d2:4b:2f:83:0e:98:be:7c:5f:37:a2:0a:94:9c:
                    17:1d:92:f5:5e:e8:97:d3:f3:82:de:f1:32:c0:c5:
                    6e:7d:6b:95:0b:43:fd:ff:02:32:e7:38:a2:51:2e:
                    02:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EB:3C:0E:D3:4C:4C:C0:01:08:AC:44:5B:A3:9B:5B:C2:98:CB:8C
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e36342e302f31382d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         74:f6:85:dd:a4:4d:fe:e5:15:c4:ff:a5:20:0d:13:d3:c8:65:
         78:09:ef:64:a8:11:a6:3c:b4:e5:ec:55:85:7c:3a:54:c1:b3:
         07:d4:69:98:2d:83:a4:d1:34:88:4a:37:6c:a4:bf:25:78:bd:
         a5:4f:1b:82:95:17:b2:16:a3:68:d0:dd:11:83:89:22:41:ef:
         d4:fb:ee:5b:89:b0:67:58:56:35:10:69:45:b9:2d:83:8a:2c:
         e2:f3:d6:41:7c:23:a1:de:f3:00:a7:91:bb:5b:65:3b:01:8a:
         96:84:27:99:58:44:a9:de:26:0a:eb:18:4d:91:a0:de:6e:55:
         5b:c8:d3:c6:16:df:59:a1:35:7b:92:c8:7e:8f:dd:12:84:c5:
         e6:a2:95:1b:33:78:50:78:f6:57:4d:1e:bb:c2:87:dc:7d:5c:
         83:a7:60:a5:e0:cf:1b:37:dd:ad:e9:a8:85:10:dd:50:ef:02:
         2f:49:18:b6:ba:26:5e:aa:b7:f0:e4:83:98:37:46:99:92:7a:
         6f:25:55:7c:c3:bd:6b:96:61:7e:73:d8:68:2e:8e:3c:2c:7c:
         1c:e4:f4:6f:75:4e:42:7d:47:ee:b7:53:18:99:c0:7e:0e:79:
         5e:98:15:c5:07:cb:fc:11:9e:94:6f:2b:97:94:7a:aa:22:5f:
         3c:da:ed:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:29 2026 by rpki-client