This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31362e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e31362e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          YlVIAjd7Cl4Fc1w8m5UV0hpV6kh5CF0DAT4U4r+Dsl0=
Subject key identifier:   F8:28:C3:DB:AD:17:58:02:DE:19:62:41:6A:8F:0F:18:09:39:63:97
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       5FC32C0FA756F94840E70F4F90FF57BBE34F4CBE
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31362e302f32322d3232203d3e203234343236.roa
Signing time:             Tue 20 Jan 2026 01:19:07 +0000
ROA not before:           Tue 20 Jan 2026 01:14:07 +0000
ROA not after:            Tue 19 Jan 2027 01:19:07 +0000
asID:                     24426
IP address blocks:        43.246.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c3:2c:0f:a7:56:f9:48:40:e7:0f:4f:90:ff:57:bb:e3:4f:4c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jan 20 01:14:07 2026 GMT
            Not After : Jan 19 01:19:07 2027 GMT
        Subject: CN=F828C3DBAD175802DE1962416A8F0F1809396397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:ab:5b:0e:89:3d:5c:85:4c:48:f5:26:43:
                    ca:2a:a5:d3:8e:a3:4c:a6:9a:e2:35:4f:bd:e7:16:
                    4c:c7:c1:ca:04:07:ff:bd:ac:35:91:66:58:db:7f:
                    11:f3:79:6e:96:d3:84:1f:b5:b8:c1:fa:af:4c:4b:
                    90:3b:b9:ff:db:aa:54:ad:10:f2:86:1c:36:8d:34:
                    14:ab:32:83:e3:5d:1f:30:d2:cd:2e:08:b0:dc:5d:
                    04:5e:53:a3:70:9d:2a:dd:0f:26:9b:f8:fd:d1:9b:
                    f3:d8:8b:91:10:c4:7a:0e:0a:3c:53:24:09:ef:0a:
                    a0:02:24:1f:fc:dc:78:39:6a:51:57:30:8b:ab:62:
                    02:6b:60:46:48:fc:e5:ac:04:e3:11:11:e4:d5:a8:
                    5e:a8:6d:84:7e:b5:2a:49:49:46:89:26:65:d7:14:
                    50:a0:1c:f2:7f:12:b4:5a:66:3c:73:14:15:5d:60:
                    c1:8c:6a:a4:d8:91:4a:64:32:4b:7d:a4:8e:02:81:
                    68:d8:02:08:cf:b9:79:37:91:84:83:ce:76:52:fe:
                    c2:25:81:cf:37:d7:8c:24:07:76:fa:ac:62:0f:61:
                    4d:12:5b:80:51:8a:ac:df:02:98:6f:83:21:84:39:
                    15:32:92:91:5e:3e:7b:cf:7f:c5:3b:0b:a8:1c:75:
                    b0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:28:C3:DB:AD:17:58:02:DE:19:62:41:6A:8F:0F:18:09:39:63:97
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31362e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:b5:6d:0c:ad:9e:46:93:f0:4e:b1:2d:5b:de:25:ce:c4:4b:
         84:e4:e5:5e:5f:16:ee:bd:79:79:1c:15:01:fd:02:b6:48:82:
         7d:c1:28:95:77:bd:b4:68:08:03:c5:6b:09:6c:a4:57:60:ca:
         20:bc:58:4e:b6:c4:c5:0e:fd:e3:34:56:91:7f:73:0a:1d:ba:
         de:24:6f:10:90:06:2a:a1:9a:a9:21:66:86:a9:bc:f8:ee:7e:
         f0:4e:56:68:03:c6:b9:c8:22:0d:eb:75:67:c8:63:fc:36:e3:
         ab:76:7e:98:99:94:5f:a1:b4:23:80:2e:51:31:36:38:52:f3:
         b1:e5:0f:6c:44:21:cc:2c:f9:5a:fe:33:11:1f:de:a6:0a:27:
         2d:62:8a:92:b6:39:04:a6:d5:a4:38:a5:d8:e4:54:8a:dc:67:
         11:66:c7:94:f7:19:6e:1a:44:b1:fa:00:b8:a5:42:3c:9b:24:
         3c:73:14:22:c4:76:62:52:f5:ff:0b:54:ea:10:07:75:ed:d5:
         49:21:ab:ec:2c:1d:db:cb:45:d6:58:cd:ba:10:80:59:05:41:
         99:94:cd:ab:a4:c6:49:31:7c:4e:a1:a3:26:0b:18:e8:de:62:
         c2:bf:57:e3:8a:f3:9f:7c:31:8c:54:35:43:0f:5f:33:7d:9b:
         cf:de:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:29 2026 by rpki-client