This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e38302e302f32312d3234203d3e2037303138.roa
File:                     3138302e3232332e38302e302f32312d3234203d3e2037303138.roa (raw, json)
Hash identifier:          MuhlRh5xdkl3cZbguJMCw0PlN6YYI6uB9gh+hV+4S8o=
Subject key identifier:   17:90:D6:76:2E:20:67:B0:84:66:EA:E8:ED:7F:69:A5:C2:09:6C:68
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       16E5E8EEFF15BF25BEAD05C8567A9A16B0A5E1A4
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e38302e302f32312d3234203d3e2037303138.roa
Signing time:             Tue 20 Jan 2026 02:24:55 +0000
ROA not before:           Tue 20 Jan 2026 02:19:55 +0000
ROA not after:            Tue 19 Jan 2027 02:24:55 +0000
asID:                     7018
IP address blocks:        180.223.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e5:e8:ee:ff:15:bf:25:be:ad:05:c8:56:7a:9a:16:b0:a5:e1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:55 2026 GMT
            Not After : Jan 19 02:24:55 2027 GMT
        Subject: CN=1790D6762E2067B08466EAE8ED7F69A5C2096C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7a:dc:28:d0:de:46:a2:56:a6:3c:a9:dd:61:
                    78:b2:26:91:58:f0:2f:c0:5b:3a:42:22:1c:45:49:
                    64:ac:bb:9b:f6:a8:82:97:06:09:69:0d:59:36:0b:
                    27:e6:74:01:30:7c:8f:3f:fe:38:93:ab:4b:0e:37:
                    0b:3f:e8:e1:5f:77:36:64:fd:59:9a:20:e5:22:a5:
                    82:6f:b2:0f:bf:96:d4:34:1e:4d:41:97:72:c7:0d:
                    98:d3:2d:1d:f6:d2:55:e6:c2:b9:2f:db:a1:2f:d9:
                    c5:b1:ab:5d:10:55:ec:b1:e8:8b:94:50:26:df:5d:
                    dc:97:4f:61:d2:4e:52:49:51:44:fa:1f:e2:11:0d:
                    15:51:5d:c1:00:f1:d5:4a:a2:e2:d1:de:85:75:46:
                    71:a5:f4:4e:a2:8c:b1:1e:03:de:83:38:d3:51:1b:
                    e8:4b:82:40:49:d7:66:e1:5c:ac:1a:c0:3c:14:27:
                    26:89:98:51:54:42:8b:70:e5:f4:b2:9f:bc:89:35:
                    b9:0f:e6:c4:80:8b:2a:47:80:8d:18:4a:7d:ac:e5:
                    64:3f:d5:91:c3:85:6e:82:c7:04:08:23:6e:0c:1c:
                    c3:66:d0:d5:e9:6a:ff:ea:4b:e8:54:a6:0f:34:f7:
                    09:d2:78:53:bc:96:8c:ec:3d:0d:b3:c8:d3:e1:51:
                    d0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:90:D6:76:2E:20:67:B0:84:66:EA:E8:ED:7F:69:A5:C2:09:6C:68
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e38302e302f32312d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bb:95:11:85:d9:8f:08:c2:06:4e:4c:f3:86:3f:5f:93:f5:7b:
         52:d3:62:f3:54:1e:36:4e:42:45:ba:2f:a7:85:f5:e5:33:98:
         0e:f1:fb:82:32:32:d4:9e:14:e2:74:b8:b4:26:c8:b9:7c:ef:
         c5:d8:ab:5e:4e:96:82:63:f2:53:ff:11:8a:73:a1:18:93:29:
         d6:27:28:05:00:84:66:4d:f0:fd:74:34:ad:8d:6c:f3:16:ff:
         6f:38:e8:84:1c:13:bd:71:47:c3:1f:35:a1:45:31:13:d5:70:
         c5:88:b7:64:79:e2:c8:a7:53:fb:4e:17:a5:da:cb:e7:29:dd:
         97:04:fc:0a:6b:d9:30:ab:17:b9:a3:c2:5a:21:ca:c1:c0:98:
         19:11:12:2c:6a:fb:b7:ec:8a:bc:a3:23:86:7f:5d:06:cd:15:
         5c:38:8e:0b:6c:eb:17:9e:09:a1:92:08:f5:8f:a0:1d:bf:74:
         fa:97:43:7d:5c:46:8b:cb:62:67:7c:b5:54:57:a4:e3:53:7b:
         20:b3:1c:08:71:e3:b3:15:98:1a:3f:20:e5:9e:c0:af:b8:5d:
         4d:b5:75:fd:1d:87:a8:8f:7f:27:1c:9f:7e:dd:c3:bf:52:65:
         f3:f8:23:08:76:26:aa:e0:ab:f6:17:b4:b1:06:f3:bc:be:98:
         c3:6d:6e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:26 2026 by rpki-client