This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3132342e3135312e302e302f31372d3137203d3e2039383132.roa
File:                     3132342e3135312e302e302f31372d3137203d3e2039383132.roa (raw, json)
Hash identifier:          k01bCJ6kshWSen/rUapiCFrvV/YQAUm9FZyg8mv0IxI=
Subject key identifier:   9D:84:46:41:E3:FD:3C:24:61:57:42:BF:F3:54:42:69:E0:28:0B:99
Certificate issuer:       /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Certificate serial:       359A11F9E01579410328261F8A4650478528D7B4
Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3132342e3135312e302e302f31372d3137203d3e2039383132.roa
Signing time:             Tue 20 Jan 2026 02:22:41 +0000
ROA not before:           Tue 20 Jan 2026 02:17:41 +0000
ROA not after:            Tue 19 Jan 2027 02:22:41 +0000
asID:                     9812
IP address blocks:        124.151.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 13:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9a:11:f9:e0:15:79:41:03:28:26:1f:8a:46:50:47:85:28:d7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
        Validity
            Not Before: Jan 20 02:17:41 2026 GMT
            Not After : Jan 19 02:22:41 2027 GMT
        Subject: CN=9D844641E3FD3C24615742BFF3544269E0280B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:95:f4:6a:3d:94:38:64:c4:c9:aa:e5:8c:
                    ae:ba:9d:60:ed:29:f6:34:4b:c0:6c:15:1f:a0:da:
                    04:4f:b6:c7:ec:06:96:0e:10:29:2b:07:3a:de:81:
                    bb:a8:c0:cf:89:0c:81:49:fc:8d:6f:fc:e0:ea:82:
                    5d:0b:70:cb:da:11:4e:b1:8f:14:9c:84:bc:6b:f0:
                    89:6f:61:0d:5b:1e:34:86:16:cf:85:7f:d7:05:bd:
                    ab:1f:8c:0a:5b:9b:82:3d:cd:c8:02:72:31:74:dc:
                    e3:d0:92:93:94:26:a6:1a:09:c6:24:2f:57:c1:0c:
                    d6:1b:12:5c:09:13:6e:c8:aa:22:db:93:1a:75:78:
                    d3:c1:5c:ab:f0:44:6e:73:87:e1:09:25:19:62:ab:
                    99:bd:44:89:db:30:36:c5:e3:84:11:95:d9:3c:fa:
                    5e:15:7c:09:68:8f:b4:cf:d9:b0:30:b6:05:64:19:
                    84:9b:be:8b:67:6d:d9:ff:65:95:b9:af:ec:b2:bf:
                    f7:5e:3a:29:c1:66:d6:77:c8:a5:83:e3:5a:79:26:
                    83:de:a8:39:b5:2a:7a:57:53:30:4b:9e:a2:f3:1e:
                    b4:28:1e:40:7e:28:b8:aa:66:42:d5:74:c4:27:a4:
                    3b:a5:de:5a:00:3f:5b:ed:01:ee:e1:34:9f:7b:c6:
                    bc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:84:46:41:E3:FD:3C:24:61:57:42:BF:F3:54:42:69:E0:28:0B:99
            X509v3 Authority Key Identifier:
                keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3132342e3135312e302e302f31372d3137203d3e2039383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         25:62:86:5e:de:b0:e3:34:70:c5:14:12:d7:b7:01:14:dc:fe:
         09:f2:3d:1c:a3:52:e5:8e:32:07:f4:d5:17:23:07:a2:88:b4:
         58:e3:59:c5:7f:ae:6a:4c:9f:3e:8d:4b:c4:9b:40:3f:aa:97:
         ce:53:20:e7:09:01:24:1a:5f:25:70:80:14:46:0a:d9:15:98:
         9c:99:97:54:43:dd:dc:81:2a:9d:9e:b9:44:0a:08:36:dc:83:
         1f:01:e3:e1:a4:e1:64:4e:13:a3:5e:bc:12:41:a4:27:13:71:
         3d:66:af:96:68:f7:fe:f8:b0:ec:78:bc:30:63:74:f3:ed:13:
         a9:d3:b0:3b:a1:2b:85:26:f7:e4:da:87:8e:b1:59:7f:24:53:
         0d:6a:49:34:3d:8c:48:7d:38:3e:f9:fe:3f:86:3d:47:37:d4:
         5b:99:2b:74:21:e6:92:f2:eb:a4:23:36:97:93:26:6d:d5:83:
         07:cb:98:6f:c6:ac:06:f5:df:ea:20:cc:e9:5d:28:e6:69:f8:
         e1:29:3f:21:52:58:c6:d4:ff:45:a4:d7:ca:20:38:12:b5:cd:
         c1:50:cd:4d:e5:fe:68:1f:f6:07:39:e9:18:43:29:25:db:21:
         23:c5:17:ba:52:3b:ad:a6:75:63:70:3b:4d:a2:55:dc:d8:05:
         e1:73:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:55:19 2026 by rpki-client