This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f32342d3234203d3e20333938373034.roa
File:                     3138302e3232332e39362e302f32342d3234203d3e20333938373034.roa (raw, json)
Hash identifier:          rvY3gfCVyj3C5x4CI1pU5X5T729xJikQMV2AwnrfmdM=
Subject key identifier:   26:17:A1:1D:DC:9C:9A:B9:97:DF:41:28:46:A6:F0:62:83:2E:78:B8
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       11AF8938684B7E8E2012A9682CE51425FA340179
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f32342d3234203d3e20333938373034.roa
Signing time:             Tue 20 Jan 2026 02:24:57 +0000
ROA not before:           Tue 20 Jan 2026 02:19:57 +0000
ROA not after:            Tue 19 Jan 2027 02:24:57 +0000
asID:                     398704
IP address blocks:        180.223.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:af:89:38:68:4b:7e:8e:20:12:a9:68:2c:e5:14:25:fa:34:01:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:57 2026 GMT
            Not After : Jan 19 02:24:57 2027 GMT
        Subject: CN=2617A11DDC9C9AB997DF412846A6F062832E78B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:3b:be:47:64:ef:32:f5:08:eb:03:c9:e0:
                    18:82:02:30:b2:4d:6c:0a:8a:eb:fb:4c:d1:ac:29:
                    7b:2d:18:ce:0e:62:1f:08:87:e9:c0:27:1f:04:be:
                    14:f4:e6:55:3a:36:55:22:08:d6:c3:da:16:53:e6:
                    cd:4e:8b:ad:ec:b2:e8:a5:b9:3c:8c:8a:17:ed:bf:
                    09:46:df:60:66:71:dc:1f:52:97:45:74:fb:3a:f4:
                    47:44:1a:86:9f:82:51:dc:9b:72:97:e5:35:f8:b5:
                    3e:63:04:9b:4d:3d:de:69:59:33:52:8d:97:78:2f:
                    bb:71:7f:4f:7f:40:5a:d9:e6:64:c9:3d:06:3b:a8:
                    0e:84:64:11:7d:0f:ac:81:a4:a8:d4:af:eb:0a:dd:
                    1e:0b:86:69:e2:cc:a6:fc:9e:4a:5b:14:93:b2:23:
                    4c:74:aa:6e:91:50:36:53:6e:23:5e:39:cc:91:b9:
                    7a:46:06:9b:c1:d9:b3:6c:e7:9b:66:b0:12:c7:df:
                    e5:f3:a7:d0:56:4b:31:d7:27:9c:12:4a:4a:ac:23:
                    44:f6:09:82:26:28:39:34:6d:d2:65:6b:99:8a:66:
                    5f:7b:93:10:2b:ab:1d:ec:c6:28:4f:e0:68:ad:81:
                    36:2b:7e:6e:b8:1e:ba:a5:af:a5:4f:1c:4b:53:9b:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:17:A1:1D:DC:9C:9A:B9:97:DF:41:28:46:A6:F0:62:83:2E:78:B8
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f32342d3234203d3e20333938373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:18:8e:39:e4:f8:5f:35:14:a5:a0:a7:b0:4a:0b:3a:3d:7e:
         2d:21:ae:bc:82:5d:b7:c0:28:b5:6a:00:dc:2b:25:91:d9:a1:
         5a:ac:c9:87:e5:08:d8:b2:bd:9b:fd:bb:ad:58:69:80:a1:75:
         0c:74:fb:de:b4:9c:54:7c:5e:85:fe:36:cc:cf:b5:9a:da:75:
         5d:d3:6c:c6:2d:8d:d2:23:01:d8:3c:c6:c4:2f:e8:c5:f8:5d:
         d7:af:ac:3b:c0:cc:6b:86:16:a6:06:a6:8c:e9:ff:12:15:98:
         a6:fe:64:e3:63:cc:23:a5:61:ff:c9:8d:cf:3b:76:11:8d:a4:
         50:13:af:cd:c1:a4:56:b3:9f:a5:95:91:26:63:69:ae:b4:23:
         85:5f:6d:a0:16:44:46:4d:5e:f4:e8:c1:0f:46:99:99:fa:13:
         e1:0d:0a:8c:fa:f1:8d:e6:d7:27:f9:72:4c:7d:c2:ad:cd:bd:
         22:1d:9d:d2:7c:9d:64:c2:a5:50:31:44:f4:21:b4:c6:e2:54:
         c9:65:2c:c7:74:c5:c6:d6:e0:8b:7d:08:a4:6d:5e:c4:f1:17:
         6c:df:96:37:02:f4:48:bd:35:5b:cc:28:5e:c4:48:a8:f1:b5:
         64:8c:91:69:0c:5b:4c:30:1e:90:62:ba:00:1a:12:b3:43:f8:
         9a:d3:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:47 2026 by rpki-client