This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36342e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e36342e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          VdzJY5KnKhHcF5OUOMIIKKoyTwGRrOWPo70XIhO5Xpg=
Subject key identifier:   ED:DC:71:B3:0B:89:74:C7:7C:4A:24:DB:59:09:D6:11:DF:BE:BF:3B
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       5079D82FB7057BFB73C9B0F63A403B0C3FD7E38D
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36342e302f32322d3232203d3e203234343236.roa
Signing time:             Tue 20 Jan 2026 01:19:05 +0000
ROA not before:           Tue 20 Jan 2026 01:14:05 +0000
ROA not after:            Tue 19 Jan 2027 01:19:05 +0000
asID:                     24426
IP address blocks:        43.246.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:79:d8:2f:b7:05:7b:fb:73:c9:b0:f6:3a:40:3b:0c:3f:d7:e3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jan 20 01:14:05 2026 GMT
            Not After : Jan 19 01:19:05 2027 GMT
        Subject: CN=EDDC71B30B8974C77C4A24DB5909D611DFBEBF3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:86:25:0a:5a:0c:27:7e:05:23:a1:1c:64:70:
                    e3:7d:e7:71:c8:7b:ea:ba:18:50:00:6d:27:a6:eb:
                    7d:6d:52:b4:7e:6a:d5:ec:09:22:17:38:5d:42:33:
                    dc:30:4f:90:ed:bf:27:f5:91:f8:63:a8:ee:43:05:
                    77:91:73:07:0d:bf:1f:78:c4:64:2c:6f:70:a9:55:
                    26:e1:4a:a9:f7:3d:b2:11:f7:f4:c8:73:77:8e:54:
                    82:90:ff:d8:cb:08:14:e5:d8:fd:98:1a:c4:2e:09:
                    85:47:af:b6:88:d2:b1:09:84:34:40:5d:a1:3b:26:
                    ed:99:a3:a7:06:90:a4:a1:19:a2:1c:f6:31:11:a4:
                    60:f8:5e:32:40:90:1f:51:23:7b:d6:9b:e1:39:b9:
                    3b:5f:66:06:06:7a:30:7d:9e:92:1d:d9:92:88:02:
                    cf:c7:17:fe:ea:e8:8c:2f:ab:a4:ad:4f:3c:0b:6e:
                    58:43:24:db:30:b9:f7:d4:f3:85:86:b2:dc:18:69:
                    b5:1e:de:06:1b:c4:7b:c6:4c:7e:8b:df:93:6f:84:
                    f8:4c:91:8b:22:e5:e1:1d:ad:10:44:a4:63:24:26:
                    80:1f:86:bd:d7:b6:6a:53:31:55:47:03:1f:d8:f8:
                    da:be:f5:24:79:30:dc:36:0a:6f:49:0f:8f:af:86:
                    30:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DC:71:B3:0B:89:74:C7:7C:4A:24:DB:59:09:D6:11:DF:BE:BF:3B
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36342e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:88:14:ae:af:fe:11:bd:90:ed:34:3c:62:6a:db:fd:2b:66:
         78:dd:75:0d:b0:7d:4f:71:72:62:a1:86:19:9a:e2:4a:43:98:
         bb:8d:3c:d2:18:81:25:18:35:46:e4:bc:ec:e5:dd:2f:9e:b9:
         21:be:38:d0:b8:f4:b2:41:c2:d2:ba:24:39:bd:c5:de:56:d2:
         c4:01:a7:14:6f:dd:ae:f0:5a:5f:30:4c:df:1a:ba:04:70:f6:
         81:63:d8:3e:11:15:07:0c:47:c6:03:cb:65:d8:8a:f0:98:4d:
         38:6e:76:2f:50:3e:3f:25:dd:60:77:00:8e:59:71:ea:70:17:
         52:27:2b:38:57:c5:f6:29:f6:9a:fc:1c:bc:0b:07:c2:18:5a:
         ef:f2:e7:40:46:e2:62:e4:df:e7:ea:a9:be:f7:d9:c1:48:ca:
         c4:52:62:f2:34:35:82:3b:7f:a5:25:01:ff:74:e0:72:37:5b:
         7d:72:64:c9:04:04:80:83:8c:e9:cf:0b:b5:ef:2b:3c:1e:cb:
         07:38:37:89:5b:3d:f5:de:7c:92:4e:23:ed:f7:b3:48:a6:39:
         5b:21:4f:a6:49:3d:83:58:72:08:b9:7b:e2:90:7c:bd:6c:c6:
         fd:b8:34:d8:e1:41:9a:00:20:61:c6:91:cd:0f:83:b5:d2:6c:
         cf:15:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:05:36 2026 by rpki-client