This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e39322e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e39322e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          D8HfE9p2zFd5PYnGR9u9AryqDDtX7wKf0V56oK08eSE=
Subject key identifier:   F2:0E:73:7A:D1:0C:70:1B:29:F1:B8:C4:6D:81:DD:1B:D2:D1:94:03
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       47C41E2D29EFD461B421CA43DD989DA3B889C76B
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e39322e302f32322d3232203d3e203234343236.roa
Signing time:             Tue 20 Jan 2026 01:19:05 +0000
ROA not before:           Tue 20 Jan 2026 01:14:05 +0000
ROA not after:            Tue 19 Jan 2027 01:19:05 +0000
asID:                     24426
IP address blocks:        43.246.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c4:1e:2d:29:ef:d4:61:b4:21:ca:43:dd:98:9d:a3:b8:89:c7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jan 20 01:14:05 2026 GMT
            Not After : Jan 19 01:19:05 2027 GMT
        Subject: CN=F20E737AD10C701B29F1B8C46D81DD1BD2D19403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d6:8b:2b:ed:bf:fd:41:de:00:81:37:3c:d0:
                    81:c7:76:78:9b:b6:a5:f6:a6:0f:44:2b:c2:62:9b:
                    c1:a1:65:c8:a2:ea:3c:e4:28:46:8a:ec:c6:fe:63:
                    fb:52:47:bb:68:49:0f:86:20:02:15:7f:31:f0:77:
                    de:07:33:7f:d6:b7:10:32:f6:fd:e9:52:8b:10:5b:
                    a6:7b:8f:fe:67:9d:aa:6b:52:72:a3:dc:13:6c:70:
                    a0:03:98:59:6e:bf:57:80:93:84:78:d9:12:c6:41:
                    27:2b:be:8d:02:06:1e:df:ec:de:43:dd:33:cc:48:
                    92:98:62:77:66:01:0c:52:68:20:59:3d:44:e8:bd:
                    0c:34:e3:54:5d:70:4a:04:1a:67:f2:5d:e7:11:4c:
                    50:2a:d8:b4:1d:36:ff:e9:31:51:c2:8f:0d:85:b2:
                    e4:3f:92:5d:c6:fe:cc:ff:ff:fa:8e:86:05:b4:85:
                    98:c6:56:ff:2c:51:92:4d:94:fd:84:e7:0d:2a:ff:
                    f2:5c:93:9d:0c:4a:02:eb:cb:9b:91:4b:fb:fc:94:
                    19:a6:7b:fa:17:c6:80:f8:3d:97:66:b6:1f:8c:da:
                    ee:72:c1:6c:2c:b4:03:24:da:0d:a1:ce:f1:70:36:
                    8a:91:2a:1d:4d:30:97:c0:f8:ca:dc:6d:bd:f1:95:
                    5c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0E:73:7A:D1:0C:70:1B:29:F1:B8:C4:6D:81:DD:1B:D2:D1:94:03
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e39322e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:07:80:cb:56:86:07:78:b5:b4:39:fb:ff:aa:ba:65:68:fb:
         54:5e:d8:83:02:b8:28:1e:5c:5c:5c:29:60:99:d5:ad:04:b0:
         69:67:cd:8d:c5:10:a2:f9:3f:ee:8c:1e:b1:34:e5:42:7c:3e:
         84:40:a5:e5:03:e1:60:64:61:06:ee:26:16:3b:f1:65:26:cc:
         34:fe:2d:af:c3:6f:df:70:4b:bc:b5:a4:70:fb:25:9b:d1:1d:
         ad:f7:fb:e9:eb:84:89:d7:e8:4b:a0:4a:6a:e9:af:0b:60:51:
         69:12:52:ec:8d:a6:52:ae:b4:7e:7e:77:c7:5e:03:2b:0c:df:
         29:e9:8f:d7:32:13:1e:9a:52:87:2a:0b:f1:28:01:1b:9e:5c:
         1b:4d:5f:35:96:d2:f7:e2:c0:01:a7:9d:e9:01:95:46:49:59:
         34:00:67:4a:05:8e:da:d4:bc:eb:ca:e0:fa:66:6e:92:32:47:
         13:4f:84:04:c3:cc:4a:3b:95:ec:b8:f0:29:cd:8c:96:aa:30:
         eb:72:04:57:f1:85:79:ac:8d:f7:d4:7c:96:90:34:09:52:b7:
         a7:ee:3a:a9:fa:64:32:aa:03:c3:cc:a1:b6:5a:a1:3b:e4:2f:
         aa:9b:f5:2b:0f:75:48:35:a9:25:f8:1a:b8:c6:99:3a:eb:1d:
         15:68:5c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:12:00 2026 by rpki-client