This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/35392e38322e3133362e302f32312d3234203d3e203435313032.roa
File:                     35392e38322e3133362e302f32312d3234203d3e203435313032.roa (raw, json)
Hash identifier:          IqkUZ5luK9Yhi/2XfaVOwPeI4UW5zGTXPhH03zlIdvw=
Subject key identifier:   7D:15:8A:49:73:ED:70:9C:D3:15:FA:73:D7:36:8A:73:7D:B5:6E:C3
Certificate issuer:       /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
Certificate serial:       70C64F3E0C7F79FB9BA13871B4E34C152F3A3423
Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/35392e38322e3133362e302f32312d3234203d3e203435313032.roa
Signing time:             Tue 20 Jan 2026 02:20:17 +0000
ROA not before:           Tue 20 Jan 2026 02:15:17 +0000
ROA not after:            Tue 19 Jan 2027 02:20:17 +0000
asID:                     45102
IP address blocks:        59.82.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 17:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c6:4f:3e:0c:7f:79:fb:9b:a1:38:71:b4:e3:4c:15:2f:3a:34:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
        Validity
            Not Before: Jan 20 02:15:17 2026 GMT
            Not After : Jan 19 02:20:17 2027 GMT
        Subject: CN=7D158A4973ED709CD315FA73D7368A737DB56EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:17:f2:e1:ac:35:4f:94:1e:32:f5:0d:ca:
                    3b:4d:71:4e:ed:59:66:d6:e4:bc:1d:b5:52:44:68:
                    4f:72:15:a2:88:d8:65:9f:d3:41:ad:f6:1f:32:69:
                    c3:c7:92:a4:3d:40:bf:ba:c6:51:c6:03:29:61:41:
                    b2:e6:0b:e4:b8:eb:c5:6c:79:1c:7b:43:36:3f:58:
                    b8:df:03:ef:3c:cf:c6:15:2c:13:2e:ab:ce:be:db:
                    cc:a7:19:85:c1:4a:63:85:62:ca:50:e2:7c:7c:f7:
                    b6:73:87:31:07:7e:3d:46:67:bd:93:37:5a:cf:98:
                    4d:08:df:cc:7d:20:4c:8c:a2:3c:bc:6b:00:dd:2d:
                    1f:d1:bd:73:b5:c0:a4:18:67:43:1b:3d:65:75:b5:
                    79:b2:ba:7f:66:35:37:69:3b:1a:e2:d4:de:7c:3c:
                    df:24:ba:1e:f1:4e:f8:2d:c9:34:9a:18:8f:8c:bc:
                    b9:6d:ec:90:ac:61:f9:1b:d3:9a:a7:55:98:37:83:
                    35:8f:01:9f:b5:43:be:01:3e:45:50:e0:c5:79:dd:
                    3d:05:50:64:a9:14:c1:e3:20:3f:10:43:91:46:34:
                    e9:ad:8a:1b:21:7a:e4:55:64:b4:be:26:22:f5:f3:
                    ad:14:72:b8:1d:6a:68:17:e5:d5:12:ab:43:c6:f6:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:15:8A:49:73:ED:70:9C:D3:15:FA:73:D7:36:8A:73:7D:B5:6E:C3
            X509v3 Authority Key Identifier:
                keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/35392e38322e3133362e302f32312d3234203d3e203435313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.82.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:55:a4:b1:01:94:b7:e8:d4:29:0d:e4:76:3c:6a:d5:e1:2e:
         5f:9f:eb:3e:a4:fe:ff:8b:ea:a0:c7:c9:ef:19:b8:5a:1d:15:
         ce:f4:c6:7b:78:95:fa:34:79:04:d4:4d:7d:c3:9f:c6:5e:d3:
         ff:c9:c2:2d:98:32:5f:05:e6:ca:c4:fb:75:98:95:21:a2:c2:
         4d:10:08:e0:da:ef:cd:b9:70:e5:46:43:21:a5:7c:d6:1a:3b:
         5d:b6:a6:8e:62:22:59:20:d4:9b:e6:d7:48:48:de:2f:f8:a0:
         7c:79:98:28:a4:77:ac:f4:fb:ba:e7:99:76:09:2d:c1:61:b4:
         bd:7f:81:57:59:22:0e:b8:b5:ab:79:75:48:c2:d7:e8:a6:b2:
         35:a0:4c:9c:66:a7:eb:e9:fe:57:17:47:63:0c:99:8c:19:1e:
         d4:e5:87:4c:c1:13:2d:b4:52:11:28:39:50:ce:56:90:b1:10:
         ae:90:35:11:6e:66:d2:b1:0c:d5:1f:a1:47:bd:ec:be:68:b4:
         33:62:83:9d:4b:3c:02:e7:50:68:65:52:59:23:ff:fe:0d:92:
         ba:bb:78:49:00:5c:87:6b:26:bf:53:56:5b:ad:4e:21:ec:12:
         12:59:53:28:11:e1:79:94:72:53:1e:58:64:c2:0d:1b:4c:04:
         d0:f3:ff:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:31:51 2026 by rpki-client