This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131322e3132382e302e302f31342d3234203d3e2037363431.roa
File:                     3131322e3132382e302e302f31342d3234203d3e2037363431.roa (raw, json)
Hash identifier:          TxIWun+EVoZpAx3KWzeFk4MLZ4F6/PJYcLXCbbB5RAk=
Subject key identifier:   9D:5A:AD:59:26:E1:5D:31:8F:C5:EF:18:AC:4A:09:B0:15:F7:08:8D
Certificate issuer:       /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Certificate serial:       0C498AD9F47A10B0B2C4A61797627F2E392E2336
Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131322e3132382e302e302f31342d3234203d3e2037363431.roa
Signing time:             Tue 20 Jan 2026 02:27:25 +0000
ROA not before:           Tue 20 Jan 2026 02:22:25 +0000
ROA not after:            Tue 19 Jan 2027 02:27:25 +0000
asID:                     7641
IP address blocks:        112.128.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 17:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:49:8a:d9:f4:7a:10:b0:b2:c4:a6:17:97:62:7f:2e:39:2e:23:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
        Validity
            Not Before: Jan 20 02:22:25 2026 GMT
            Not After : Jan 19 02:27:25 2027 GMT
        Subject: CN=9D5AAD5926E15D318FC5EF18AC4A09B015F7088D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:ee:13:f3:3e:bb:c3:f7:bf:84:76:9d:f1:
                    26:d8:f7:85:c2:15:39:f4:87:25:3c:8f:2d:bb:85:
                    ca:f3:c5:f6:02:9e:c4:7a:34:b6:97:af:6b:4f:cd:
                    9e:90:27:4e:57:99:cf:4e:98:be:5b:ca:6e:0b:aa:
                    f9:13:d8:77:77:ad:a5:f1:b0:61:36:f8:29:96:fa:
                    4e:07:99:44:40:d9:90:57:9e:00:af:af:37:45:8e:
                    03:d8:53:20:9c:9a:88:f1:ee:7e:64:a2:68:b1:39:
                    9c:9b:fb:4d:be:32:67:5c:5b:bb:60:ed:a4:4e:51:
                    fc:cd:96:48:1c:f2:9c:b0:c4:28:2b:c6:8c:75:62:
                    a0:f5:c5:ff:a9:0b:f4:84:37:ac:ea:c2:df:0c:bd:
                    50:95:ab:61:b9:17:ab:ad:15:3b:1a:cb:4a:8b:9e:
                    ae:79:b6:a4:5f:4d:80:2d:3c:d7:e8:cc:4c:54:5f:
                    0a:13:59:a0:4e:99:18:db:fa:fc:a2:d0:ab:fe:47:
                    d2:e5:f5:f4:4d:d0:7e:f1:93:77:b8:b0:19:7a:08:
                    8d:0f:ed:ec:cc:2a:50:8a:e4:41:5a:63:60:09:7c:
                    ea:ba:15:3a:1a:23:2a:fd:2e:6f:41:0a:02:92:e2:
                    a0:40:51:0b:14:8c:79:80:09:7a:db:2d:c0:b3:9b:
                    f8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5A:AD:59:26:E1:5D:31:8F:C5:EF:18:AC:4A:09:B0:15:F7:08:8D
            X509v3 Authority Key Identifier:
                keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131322e3132382e302e302f31342d3234203d3e2037363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.128.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         47:4d:a4:d6:f3:b0:5a:7c:52:fe:bc:66:b6:10:97:f2:02:14:
         25:8e:d6:fd:dc:44:d2:dc:f0:50:be:d9:68:4f:e2:70:4b:93:
         17:b9:bb:8d:3a:78:8a:20:52:7a:a5:f6:3a:7e:47:74:df:c3:
         ff:80:31:53:c2:aa:19:2d:7c:fe:ff:fe:23:ca:9d:ed:28:36:
         91:23:80:af:66:5a:a7:9d:a3:d6:ba:be:15:bd:b6:f8:42:6a:
         ef:30:b4:96:cf:09:03:ac:c6:b8:7a:c8:9e:cd:e0:fa:f8:67:
         e3:95:e7:48:a8:cb:a4:d6:74:18:b0:26:69:c5:2e:15:cd:37:
         00:c8:25:5d:7f:ed:25:ec:dd:40:99:ec:7c:91:6c:18:d7:dd:
         ae:53:86:70:6b:e0:f8:b7:f8:c6:5f:72:42:be:1d:0a:ed:cb:
         37:35:84:dc:ee:77:34:ee:48:57:45:e4:1b:33:33:fe:04:73:
         ef:bb:8a:1e:48:06:cf:d5:01:7a:d6:25:07:28:d0:d7:cf:38:
         e9:7f:f8:8e:ce:98:44:98:7b:68:87:08:22:8b:c5:be:b3:ce:
         cb:4d:85:70:53:3a:cb:6a:74:13:22:4b:0b:d6:b5:28:e3:a2:
         14:0b:fe:74:a3:07:25:11:ac:27:64:2c:ca:12:07:11:be:7a:
         c0:94:2e:c3
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUDEmK2fR6ELCyxKYXl2J/LjkuIzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB
NUVCRUVCNzAeFw0yNjAxMjAwMjIyMjVaFw0yNzAxMTkwMjI3MjVaMDMxMTAvBgNV
BAMTKDlENUFBRDU5MjZFMTVEMzE4RkM1RUYxOEFDNEEwOUIwMTVGNzA4OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSte4T8z67w/e/hHad8SbY94XC
FTn0hyU8jy27hcrzxfYCnsR6NLaXr2tPzZ6QJ05Xmc9OmL5bym4LqvkT2Hd3raXx
sGE2+CmW+k4HmURA2ZBXngCvrzdFjgPYUyCcmojx7n5komixOZyb+02+MmdcW7tg
7aROUfzNlkgc8pywxCgrxox1YqD1xf+pC/SEN6zqwt8MvVCVq2G5F6utFTsay0qL
nq55tqRfTYAtPNfozExUXwoTWaBOmRjb+vyi0Kv+R9Ll9fRN0H7xk3e4sBl6CI0P
7ezMKlCK5EFaY2AJfOq6FToaIyr9Lm9BCgKS4qBAUQsUjHmACXrbLcCzm/j5AgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUnVqtWSbhXTGPxe8YrEoJsBX3CI0wHwYDVR0j
BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE
ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzEzMTMyMmUzMTMy
MzgyZTMwMmUzMDJmMzEzNDJkMzIzNDIwM2QzZTIwMzczNjM0MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwJwgDANBgkqhkiG9w0BAQsFAAOCAQEAR02k1vOwWnxS/rxmthCX8gIUJY7W/dxE
0tzwUL7ZaE/icEuTF7m7jTp4iiBSeqX2On5HdN/D/4AxU8KqGS18/v/+I8qd7Sg2
kSOAr2Zap52j1rq+Fb22+EJq7zC0ls8JA6zGuHrIns3g+vhn45XnSKjLpNZ0GLAm
acUuFc03AMglXX/tJezdQJnsfJFsGNfdrlOGcGvg+Lf4xl9yQr4dCu3LNzWE3O53
NO5IV0XkGzMz/gRz77uKHkgGz9UBetYlByjQ18846X/4js6YRJh7aIcIIovFvrPO
y02FcFM6y2p0EyJLC9a1KOOiFAv+dKMHJRGsJ2QsyhIHEb56wJQuww==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:05:52 2026 by rpki-client