This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e38302e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e38302e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          sUlLtZJM8aN1TGkPPsnS6G+1kNu2D4ddj16OgdUcwlY=
Subject key identifier:   36:DB:C6:14:27:3F:70:AC:90:E4:17:3A:72:4E:C1:AC:AA:C9:1C:5F
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       2A7DAA7611819A33C5A6041AC87876DF6A78E99E
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e38302e302f32322d3232203d3e203234343236.roa
Signing time:             Tue 20 Jan 2026 01:19:07 +0000
ROA not before:           Tue 20 Jan 2026 01:14:07 +0000
ROA not after:            Tue 19 Jan 2027 01:19:07 +0000
asID:                     24426
IP address blocks:        43.246.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7d:aa:76:11:81:9a:33:c5:a6:04:1a:c8:78:76:df:6a:78:e9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jan 20 01:14:07 2026 GMT
            Not After : Jan 19 01:19:07 2027 GMT
        Subject: CN=36DBC614273F70AC90E4173A724EC1ACAAC91C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cd:99:ef:4a:d6:c2:37:e3:51:26:98:6d:02:
                    8c:ea:60:ef:a3:d6:f9:8b:18:9a:06:01:97:96:16:
                    5f:f3:02:2a:c7:8b:86:cf:eb:59:0e:49:1f:63:66:
                    73:c0:20:12:0c:09:19:f0:57:dc:50:62:60:7e:c6:
                    4b:f4:73:e6:21:11:4b:46:41:ad:11:bd:31:af:c2:
                    24:a6:f2:13:36:48:51:99:68:ac:eb:95:b4:5a:24:
                    52:ab:02:81:52:a3:de:d7:b8:2d:f7:7a:fd:89:59:
                    b2:5b:24:2d:47:c9:cd:8a:ed:6a:a5:09:de:57:fb:
                    82:56:d5:b5:49:c5:69:e3:0c:09:12:1c:33:9b:67:
                    3e:4d:ed:8e:04:f3:f2:a8:25:91:40:6f:31:2e:28:
                    7b:f1:01:e6:91:25:73:4c:f4:75:28:12:f0:ab:f9:
                    84:5b:e9:53:c3:e6:35:45:d3:57:9d:b7:ba:43:e7:
                    19:3c:93:6a:10:11:5f:54:52:17:b3:6a:cd:70:09:
                    9b:68:00:47:44:f7:ab:63:d8:f4:01:1a:23:67:8e:
                    99:f4:03:33:21:33:97:ca:7f:5d:a4:cd:8c:b4:64:
                    23:4e:e8:ae:50:c1:ec:56:4f:af:26:a3:41:cc:f2:
                    4a:0e:f2:32:35:12:0a:e9:39:77:2a:1b:a6:f3:5e:
                    1e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DB:C6:14:27:3F:70:AC:90:E4:17:3A:72:4E:C1:AC:AA:C9:1C:5F
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e38302e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:c2:1f:2a:b6:ff:79:23:bf:b1:22:5d:6e:75:f7:33:e0:c4:
         31:52:63:b1:c4:ee:64:ac:0d:e0:1f:ab:64:42:e1:a7:90:30:
         eb:9b:ac:18:49:0c:81:42:30:5c:ee:7d:13:e1:b6:f0:ef:3c:
         c3:14:29:e7:ca:71:0c:67:99:7f:14:ca:e6:b5:03:af:be:4e:
         66:2f:cd:17:6e:a8:54:1c:cc:4e:7e:25:ae:b5:86:26:51:4c:
         87:33:a8:8b:0f:5f:64:2d:fc:17:e8:af:1b:c8:90:99:8f:dd:
         5b:13:a6:58:c4:43:20:9a:52:c3:a1:e1:86:03:16:d5:52:fe:
         06:35:e8:09:e7:fc:9d:cb:8c:c1:95:d0:9b:d0:77:43:1d:8c:
         ea:cb:5d:8e:af:12:6c:3c:b6:a0:19:f7:a1:95:8d:ff:eb:4f:
         fd:fd:c5:5c:0d:94:80:7a:31:c0:4d:4d:dc:2c:69:80:92:a5:
         a7:69:8f:f6:c7:e2:35:4d:6a:f7:7d:f8:be:a4:eb:c6:44:d4:
         82:3d:2d:0a:00:df:67:52:7b:00:0b:b4:4d:06:da:72:39:32:
         81:dc:05:3e:f1:aa:dc:10:41:ca:21:38:f6:36:c0:bd:80:5a:
         a5:80:af:e8:a2:fd:0b:7d:13:e6:5b:fd:56:a3:33:f1:4a:a8:
         02:2e:b4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:05:34 2026 by rpki-client