This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371851778/0/3231312e3135362e3232342e302f32302d3230203d3e2039333931.roa
File:                     3231312e3135362e3232342e302f32302d3230203d3e2039333931.roa (raw, json)
Hash identifier:          uaz7nh1lANmo95TsLAJg/2r0Jd5wHe4ugsrTZ4tQ/wk=
Subject key identifier:   E8:51:CD:33:FE:40:11:31:36:23:8C:01:D0:B2:28:F4:E2:37:D2:05
Certificate issuer:       /CN=745EC59458DF98DC3674219750AB7E7BC251E62C
Certificate serial:       3BB3C55F5DE3C24801214258B2ADD21FCE686281
Authority key identifier: 74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/3231312e3135362e3232342e302f32302d3230203d3e2039333931.roa
Signing time:             Tue 20 Jan 2026 02:26:05 +0000
ROA not before:           Tue 20 Jan 2026 02:21:05 +0000
ROA not after:            Tue 19 Jan 2027 02:26:05 +0000
asID:                     9391
IP address blocks:        211.156.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b3:c5:5f:5d:e3:c2:48:01:21:42:58:b2:ad:d2:1f:ce:68:62:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745EC59458DF98DC3674219750AB7E7BC251E62C
        Validity
            Not Before: Jan 20 02:21:05 2026 GMT
            Not After : Jan 19 02:26:05 2027 GMT
        Subject: CN=E851CD33FE40113136238C01D0B228F4E237D205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:91:49:37:ed:d4:c5:a4:51:2c:f4:3c:b2:
                    10:2f:b7:33:34:10:9d:e4:37:c9:b6:1b:e8:f3:f9:
                    5f:03:99:79:0b:7b:b2:d6:10:cf:c0:ed:fb:63:e0:
                    a6:de:6c:9a:6c:c9:11:8a:b6:b9:a8:e2:a2:db:a5:
                    be:d6:a7:a9:7b:30:bd:be:89:32:ff:0f:bf:00:80:
                    71:5f:e5:57:08:96:f4:47:60:70:47:eb:31:66:85:
                    97:93:8a:50:a6:c5:f4:41:6a:35:f5:de:d2:6c:f3:
                    f5:51:06:1b:54:86:96:49:17:be:70:3c:1a:5d:36:
                    ae:fe:e7:73:d3:b8:e3:42:7f:a8:32:4c:78:bd:79:
                    42:f8:95:3d:11:f6:29:d6:a8:76:f5:ea:62:e6:47:
                    e2:90:b9:a9:e6:83:81:b1:be:d9:3f:29:8f:c7:15:
                    58:16:54:e6:d1:bb:ed:c1:90:98:1e:c8:b2:87:a9:
                    81:94:56:6e:1d:f8:36:0a:5c:e8:c3:4a:0b:c0:15:
                    16:a6:01:9e:86:33:64:a3:28:91:6b:9d:ec:53:6d:
                    ee:66:0a:1d:79:07:1d:02:f7:fd:da:1a:fa:29:51:
                    6b:7a:f2:ee:30:2a:65:f2:44:cd:bc:03:2e:c0:ad:
                    72:ec:6b:04:11:d9:07:08:38:34:fa:bb:51:0a:76:
                    76:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:51:CD:33:FE:40:11:31:36:23:8C:01:D0:B2:28:F4:E2:37:D2:05
            X509v3 Authority Key Identifier:
                keyid:74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/3231312e3135362e3232342e302f32302d3230203d3e2039333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.156.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:8a:b9:9f:5b:e5:11:06:e4:2f:26:21:79:a6:63:c6:18:fa:
         d6:c1:b5:73:1f:a2:17:1c:0b:b9:8d:a4:b4:e0:d3:6f:27:b7:
         77:bc:c5:90:ee:1f:49:fa:35:e6:61:3d:75:c6:97:f1:fc:93:
         0d:a9:88:1f:01:87:fe:59:90:c2:87:56:84:cd:25:83:8c:e5:
         5b:a5:51:8e:6d:8e:01:a6:d9:64:9a:93:48:86:a9:e1:f6:f8:
         87:58:f8:5b:4e:b7:00:05:c9:11:d8:a6:49:c3:d7:80:40:cd:
         64:ac:2f:d0:a3:77:67:1d:92:41:5e:fd:a0:da:cb:a2:aa:57:
         ec:19:88:49:ba:4f:05:8e:e2:f5:35:82:f7:9b:34:e4:5a:6a:
         69:21:ba:73:b6:cd:34:3d:fd:b6:0c:89:17:9d:df:d8:b1:ea:
         d5:b0:19:1d:79:c6:84:42:90:d1:91:c7:2a:0f:1e:c2:7d:71:
         ad:55:c8:6f:c6:bd:3b:64:c8:24:65:b2:86:92:eb:25:aa:32:
         08:f5:19:9c:59:b5:53:e6:82:01:3e:35:da:12:1a:f8:95:ac:
         1a:59:d7:a0:fb:d3:dc:b8:df:c6:4a:20:df:2f:5e:12:f7:4a:
         19:4f:ff:b4:1e:d5:f4:fb:40:c2:a5:98:a1:12:49:1f:ae:45:
         66:11:9e:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:36 2026 by rpki-client