This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e35322e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e35322e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          rx2UmZq0lJCg4jsAxxqRw8tdxIiNhwSuS9LDGgSWAmU=
Subject key identifier:   3F:2F:06:A5:34:B1:4E:00:25:5C:5C:AF:9D:E0:25:E3:84:19:6F:2A
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       300D4E5E79F7C67A331DD31DFA8454EBE76F09EB
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e35322e302f32322d3232203d3e203234343236.roa
Signing time:             Tue 20 Jan 2026 01:19:07 +0000
ROA not before:           Tue 20 Jan 2026 01:14:07 +0000
ROA not after:            Tue 19 Jan 2027 01:19:07 +0000
asID:                     24426
IP address blocks:        43.246.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0d:4e:5e:79:f7:c6:7a:33:1d:d3:1d:fa:84:54:eb:e7:6f:09:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jan 20 01:14:07 2026 GMT
            Not After : Jan 19 01:19:07 2027 GMT
        Subject: CN=3F2F06A534B14E00255C5CAF9DE025E384196F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:90:51:04:db:53:42:5b:95:e5:3f:1c:f3:
                    fe:a9:89:ac:ae:83:1c:2d:86:3b:54:17:54:9e:b1:
                    cd:7b:70:bd:5d:df:a3:e4:57:2b:c3:18:c0:35:a3:
                    a0:bb:46:47:dc:0b:a0:4c:28:46:fa:b6:80:bb:30:
                    61:d3:fb:8f:f1:02:ca:61:b1:75:19:e1:22:fa:f1:
                    b3:6f:ce:17:a7:09:4c:eb:50:86:ad:ea:08:cc:f6:
                    dd:d7:06:ca:2a:a3:73:36:fe:57:02:ea:77:7d:28:
                    e1:85:d2:da:9e:10:e9:54:c3:e5:49:b7:30:b9:7b:
                    e2:2a:7c:49:aa:23:77:c8:84:8f:e6:b1:aa:0d:4b:
                    b5:67:6f:a5:7d:83:a1:e6:07:75:7e:8e:e7:0d:9e:
                    7e:6c:3f:56:9d:ef:d7:0f:5d:c7:b7:92:24:41:ba:
                    3c:4e:5d:27:f0:e3:eb:aa:ad:72:f3:8e:19:83:e7:
                    88:4f:fe:8f:4f:21:58:a2:a3:7d:af:42:2d:89:02:
                    57:0f:f6:e3:fe:3c:06:d8:5a:b3:74:6c:8e:18:12:
                    06:c1:87:25:b8:a6:82:01:32:c0:4a:ea:ab:eb:6c:
                    14:d6:5e:0a:55:00:fa:9f:c9:85:e1:ce:62:06:30:
                    58:34:be:8a:9e:39:bd:a7:29:e6:bf:a4:71:3c:8b:
                    e2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2F:06:A5:34:B1:4E:00:25:5C:5C:AF:9D:E0:25:E3:84:19:6F:2A
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e35322e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:ad:0c:52:4f:78:6a:6c:04:d5:0a:30:f7:88:e4:72:31:a9:
         95:46:e1:4e:1d:32:16:9a:8d:4a:2f:9a:28:5e:eb:7e:7e:1a:
         c2:67:86:87:91:b7:aa:06:3f:55:2d:e7:61:62:9a:46:1e:12:
         c7:58:46:7a:36:f4:68:e4:2b:0d:d9:89:6b:c1:1f:ee:0f:e7:
         52:63:36:07:d6:c8:5f:72:04:5c:18:3a:2e:e9:a2:58:79:37:
         77:f6:57:86:dc:80:9d:f4:e3:74:1f:5c:28:58:27:78:cc:c8:
         29:40:e4:f5:d2:cd:ef:0e:75:76:98:fb:92:16:fa:b6:08:f9:
         a8:c3:35:1e:05:b9:a2:2a:f7:e6:9c:8c:05:5f:10:8c:33:ee:
         06:a8:73:34:a5:63:79:1d:19:b8:81:1e:5e:68:d7:96:12:cc:
         63:ea:73:67:36:aa:af:c3:5c:69:2c:5e:e8:7e:76:fc:9b:5d:
         79:22:fb:8a:4d:13:8a:70:ca:ce:80:9f:88:8d:73:67:ba:f3:
         fe:49:63:08:f0:75:37:11:2a:8c:a9:c7:aa:12:48:e8:90:16:
         36:8b:ac:7a:91:03:1f:cd:98:5b:80:a4:45:eb:c4:98:38:c7:
         12:21:9d:78:7b:4e:72:ea:42:51:b7:c2:de:ae:76:cd:91:6d:
         7e:9c:ee:f1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUMA1OXnn3xnozHdMd+oRU6+dvCeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx
OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDdaFw0yNzAxMTkwMTE5MDdaMDMxMTAvBgNV
BAMTKDNGMkYwNkE1MzRCMTRFMDAyNTVDNUNBRjlERTAyNUUzODQxOTZGMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9pBRBNtTQluV5T8c8/6piayu
gxwthjtUF1Sesc17cL1d36PkVyvDGMA1o6C7RkfcC6BMKEb6toC7MGHT+4/xAsph
sXUZ4SL68bNvzhenCUzrUIat6gjM9t3XBsoqo3M2/lcC6nd9KOGF0tqeEOlUw+VJ
tzC5e+IqfEmqI3fIhI/msaoNS7Vnb6V9g6HmB3V+jucNnn5sP1ad79cPXce3kiRB
ujxOXSfw4+uqrXLzjhmD54hP/o9PIViio32vQi2JAlcP9uP+PAbYWrN0bI4YEgbB
hyW4poIBMsBK6qvrbBTWXgpVAPqfyYXhzmIGMFg0voqeOb2nKea/pHE8i+KrAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUPy8GpTSxTgAlXFyvneAl44QZbyowHwYDVR0j
BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx
NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2
MmUzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv2NDANBgkqhkiG9w0BAQsFAAOCAQEAs60MUk94amwE1Qow94jkcjGplUbh
Th0yFpqNSi+aKF7rfn4awmeGh5G3qgY/VS3nYWKaRh4Sx1hGejb0aOQrDdmJa8Ef
7g/nUmM2B9bIX3IEXBg6LumiWHk3d/ZXhtyAnfTjdB9cKFgneMzIKUDk9dLN7w51
dpj7khb6tgj5qMM1HgW5oir35pyMBV8QjDPuBqhzNKVjeR0ZuIEeXmjXlhLMY+pz
Zzaqr8NcaSxe6H52/JtdeSL7ik0TinDKzoCfiI1zZ7rz/kljCPB1NxEqjKnHqhJI
6JAWNousepEDH82YW4CkRevEmDjHEiGdeHtOcupCUbfC3q52zZFtfpzu8Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:11 2026 by rpki-client