This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e35362e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e35362e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          x1otCxuIjjEngEOqE9oWlZoQt1Le+UHzVqTDCwVAt1k=
Subject key identifier:   E0:18:62:C7:C8:05:78:1C:EA:90:E1:45:CD:D6:7C:91:22:42:10:E8
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       7F6E8EABA06456EE0BD8772E362A56D77C61E829
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e35362e302f32322d3232203d3e203234343236.roa
Signing time:             Tue 20 Jan 2026 01:19:08 +0000
ROA not before:           Tue 20 Jan 2026 01:14:08 +0000
ROA not after:            Tue 19 Jan 2027 01:19:08 +0000
asID:                     24426
IP address blocks:        43.246.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6e:8e:ab:a0:64:56:ee:0b:d8:77:2e:36:2a:56:d7:7c:61:e8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jan 20 01:14:08 2026 GMT
            Not After : Jan 19 01:19:08 2027 GMT
        Subject: CN=E01862C7C805781CEA90E145CDD67C91224210E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cb:cf:9f:31:06:62:d6:73:d7:f2:a9:a1:7c:
                    c2:59:65:4e:36:af:8d:81:b8:45:61:bb:c5:44:fc:
                    21:fb:4d:1e:bb:14:f9:3a:2c:16:65:1f:69:be:db:
                    6f:26:e2:d7:48:99:ac:a8:95:81:1e:12:fe:a3:95:
                    c9:9a:6a:6c:f4:73:f0:b8:ac:15:fe:39:fc:5f:4d:
                    ff:20:a7:db:ab:47:b6:0a:95:28:04:4f:df:aa:7e:
                    1a:66:d5:13:ea:4c:c4:d4:a3:72:7d:6b:54:d9:da:
                    a3:46:81:5b:a7:61:98:e7:64:27:77:c8:30:c1:09:
                    b4:03:85:46:f1:e2:f6:44:88:76:57:96:c0:6c:50:
                    ee:70:02:e7:b9:ea:bf:ec:14:70:3c:cd:6e:6a:4d:
                    87:6b:73:ec:6f:f8:12:cd:4a:a0:d4:2e:9e:05:55:
                    6e:13:9b:27:a4:c4:9c:df:63:7b:8e:2d:48:c4:ca:
                    72:b8:41:ea:49:46:a7:5c:bc:ff:0d:11:01:5f:c2:
                    ff:00:39:cd:41:7e:ce:30:c4:39:20:c2:94:b2:1c:
                    47:c3:fb:0c:2b:6d:5a:62:42:db:fa:e0:55:f0:ae:
                    15:68:b7:83:90:be:58:f6:89:6b:a2:a6:35:66:f7:
                    d9:23:6e:ae:66:33:c4:cd:cc:65:68:e3:35:50:da:
                    5b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:18:62:C7:C8:05:78:1C:EA:90:E1:45:CD:D6:7C:91:22:42:10:E8
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e35362e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:d9:f3:cd:56:e4:e2:2f:43:42:52:fd:fc:8c:38:bc:89:1e:
         67:79:da:12:b3:c2:a1:fb:ca:f5:5b:41:01:17:2a:04:9a:5f:
         46:6c:0a:12:c2:35:43:3c:04:fd:6d:cd:57:1d:1a:53:00:91:
         d3:dc:01:9c:ee:4a:a3:7f:cc:ca:a3:21:ec:aa:2c:53:9c:52:
         10:fc:df:17:a1:7f:65:33:26:de:da:4e:ed:12:b8:42:b5:99:
         bc:50:7f:82:81:bc:a7:10:ab:b2:a1:b8:cf:c5:35:12:d6:3f:
         3a:45:af:6c:32:f3:d4:8d:a1:63:b9:13:7c:fd:6a:19:a4:6c:
         60:82:2d:ab:21:13:28:d6:4d:b5:84:e8:5f:49:c2:ae:63:b9:
         9f:49:4e:4e:b9:fe:c5:29:ee:34:29:f8:d1:70:97:d1:14:bd:
         b1:47:e5:03:df:e9:ce:63:f4:14:0f:20:3e:4d:2b:48:30:71:
         10:15:a2:2a:af:3f:34:0c:c5:6e:f0:25:74:9f:05:69:04:da:
         12:4f:40:54:2c:eb:be:37:55:b6:3a:d2:e9:6c:24:7a:96:81:
         7f:54:f4:9a:6a:23:e0:e7:e3:f9:40:36:9c:8d:7a:5d:5e:17:
         0a:d0:53:f5:96:87:70:49:b6:8b:00:f0:75:34:ba:12:ae:2f:
         22:88:c6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:40 2026 by rpki-client