This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/261/RzkkpjPCi0dgR8rumS9zWiBd0Do.roa
File:                     RzkkpjPCi0dgR8rumS9zWiBd0Do.roa (raw, json)
Hash identifier:          vqJi2dvoSowzBfuUhgmz71Wr6Y2h7PAFS08H+IJUfho=
Subject key identifier:   47:39:24:A6:33:C2:8B:47:60:47:CA:EE:99:2F:73:5A:20:5D:D0:3A
Certificate issuer:       /CN=76E046E3ECA10B928499F22A5E765C0416A60A4F
Certificate serial:       06C6
Authority key identifier: 76:E0:46:E3:EC:A1:0B:92:84:99:F2:2A:5E:76:5C:04:16:A6:0A:4F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/duBG4-yhC5KEmfIqXnZcBBamCk8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/RzkkpjPCi0dgR8rumS9zWiBd0Do.roa
Signing time:             Wed 31 Dec 2025 03:10:47 +0000
ROA not before:           Wed 31 Dec 2025 03:10:47 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     23771
IP address blocks:        182.80.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/duBG4-yhC5KEmfIqXnZcBBamCk8.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 16:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1734 (0x6c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E046E3ECA10B928499F22A5E765C0416A60A4F
        Validity
            Not Before: Dec 31 03:10:47 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=473924A633C28B476047CAEE992F735A205DD03A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c2:19:39:5e:ba:f8:0f:c1:aa:37:92:c8:19:
                    12:0a:30:22:9f:76:ce:ac:b2:c8:f6:fd:a9:11:bc:
                    d5:57:26:4c:17:f7:e9:40:f2:57:ac:03:4a:58:30:
                    e3:79:27:27:50:4f:8c:90:4c:2b:14:93:31:9e:50:
                    33:2c:27:1b:c2:8b:af:27:e9:7d:c9:ae:08:74:f4:
                    c2:ac:22:ab:14:91:6e:af:c2:65:f4:32:30:ce:06:
                    61:17:f5:98:11:7d:2e:3b:37:97:dc:4d:d1:dd:94:
                    65:a9:b8:02:8d:d2:64:3c:7c:0b:c9:c3:20:67:b6:
                    03:94:7d:14:e9:41:3a:2e:80:1a:b1:ff:29:0c:c8:
                    b7:71:14:3b:dc:cd:17:5c:37:89:eb:31:54:e2:fc:
                    85:76:ea:97:9e:10:80:a1:33:e9:fe:c6:54:bc:6b:
                    d5:71:4d:65:f7:8b:aa:d7:ae:28:4f:8c:ef:ff:0d:
                    6e:40:e6:62:77:9e:6a:f7:59:19:33:ef:7a:ab:d1:
                    8d:b2:1f:de:9d:7f:da:77:0d:98:5a:6c:97:0c:88:
                    00:b0:e5:1e:d5:f1:c1:df:33:da:3c:b6:40:b2:05:
                    96:4a:52:21:cc:10:5a:51:43:3a:f1:3c:a0:01:e4:
                    55:66:81:72:05:f4:6a:f2:3f:18:e0:13:ff:88:59:
                    ad:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:39:24:A6:33:C2:8B:47:60:47:CA:EE:99:2F:73:5A:20:5D:D0:3A
            X509v3 Authority Key Identifier:
                keyid:76:E0:46:E3:EC:A1:0B:92:84:99:F2:2A:5E:76:5C:04:16:A6:0A:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/duBG4-yhC5KEmfIqXnZcBBamCk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/duBG4-yhC5KEmfIqXnZcBBamCk8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/261/RzkkpjPCi0dgR8rumS9zWiBd0Do.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.80.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:3c:b5:00:1d:fe:d9:95:17:63:a5:ed:ae:db:99:14:5b:ec:
         08:0c:fd:a4:f1:5f:e4:5b:8a:4e:65:83:c0:78:14:dc:43:be:
         26:90:53:ac:10:60:78:c1:bd:2d:52:44:fa:5e:ae:cd:ea:63:
         98:49:84:99:98:d4:3e:76:b9:77:05:d7:63:f5:c5:e5:27:2d:
         ba:a8:35:b3:ac:5d:73:f7:d7:d6:eb:92:4c:d4:69:63:6d:58:
         f9:fd:db:f7:95:e0:2b:57:45:2c:7d:07:62:0f:73:c0:b7:34:
         fa:d8:e6:d3:bc:91:15:ed:69:e6:8c:2a:0f:9a:31:83:f5:b8:
         42:13:f2:d3:2b:5c:1e:87:17:2f:99:f5:72:4b:46:3d:2b:49:
         dc:80:98:62:dd:24:a8:1f:79:ca:1d:4b:99:a4:bb:2e:a4:e8:
         6e:c0:42:3e:41:c8:69:3b:4c:2d:2d:58:17:e6:6b:0e:37:0b:
         91:34:ea:3d:e7:33:92:68:9b:be:c1:31:c1:73:55:56:14:19:
         e1:40:a4:fe:2a:f7:13:2a:b8:06:0c:48:f6:dc:cd:23:76:bb:
         2b:4f:6b:5e:17:d6:f8:18:28:a7:df:cc:f8:ea:de:e8:67:95:
         39:71:d6:7b:a6:3c:96:66:dd:07:c8:7c:64:bf:9e:32:80:67:
         25:a8:76:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 15:28:03 2026 by rpki-client