This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3138322e38302e302e302f31362d3136203d3e203233373731.roa
File:                     3138322e38302e302e302f31362d3136203d3e203233373731.roa (raw, json)
Hash identifier:          CF+z33Rj2YhsOOEndNKmnOpnjbWukgLJhVN5L0N0Tvc=
Subject key identifier:   C3:68:58:38:15:EE:BC:A7:86:66:04:95:CB:D1:6C:4F:20:1D:40:9F
Certificate issuer:       /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial:       4D91132EF37A5D8496971415189E7CB2757108FA
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3138322e38302e302e302f31362d3136203d3e203233373731.roa
Signing time:             Tue 20 Jan 2026 02:14:12 +0000
ROA not before:           Tue 20 Jan 2026 02:09:12 +0000
ROA not after:            Tue 19 Jan 2027 02:14:12 +0000
asID:                     23771
IP address blocks:        182.80.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 17:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:91:13:2e:f3:7a:5d:84:96:97:14:15:18:9e:7c:b2:75:71:08:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
        Validity
            Not Before: Jan 20 02:09:12 2026 GMT
            Not After : Jan 19 02:14:12 2027 GMT
        Subject: CN=C368583815EEBCA786660495CBD16C4F201D409F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:fb:f0:01:85:41:5d:6b:b7:37:3a:ee:be:
                    f9:6e:85:e4:c8:c6:d6:2c:ed:d4:0e:91:0e:2d:3d:
                    e1:01:34:81:19:2e:17:92:8a:2c:13:56:2d:fb:67:
                    70:51:2d:0d:a4:5d:28:15:52:c2:34:04:81:38:a4:
                    ec:14:ae:47:cd:d5:d2:07:95:0d:e5:24:26:4c:f6:
                    ca:e9:25:f9:bb:d3:5d:21:9e:3a:f7:b3:88:c3:48:
                    77:8c:5c:ab:43:f1:22:5d:6a:3b:02:32:dc:bf:9b:
                    37:26:6f:02:60:12:2c:f2:1f:04:39:c3:89:37:02:
                    b6:a0:b3:aa:12:63:ad:4c:0b:40:41:94:ea:03:67:
                    fd:69:14:0c:2a:a8:7f:00:4b:f0:80:65:3c:ba:8e:
                    15:72:bf:7b:d9:27:ce:4b:f6:be:ac:ea:10:12:de:
                    18:40:19:50:0a:5b:a5:78:44:a0:17:c5:3d:4e:1f:
                    77:2a:0c:47:22:b1:29:8b:47:8e:3f:6e:17:e2:28:
                    39:ca:4b:b5:0c:24:09:f6:e2:7e:f9:61:23:66:0c:
                    12:35:8e:a5:5a:e2:fd:1f:9b:b7:06:38:b4:16:10:
                    4e:8a:47:33:50:05:8b:49:c6:3e:80:c1:19:a5:83:
                    9b:df:d2:aa:29:a7:28:93:a8:e0:09:df:03:f9:13:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:68:58:38:15:EE:BC:A7:86:66:04:95:CB:D1:6C:4F:20:1D:40:9F
            X509v3 Authority Key Identifier:
                keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3138322e38302e302e302f31362d3136203d3e203233373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.80.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         13:8d:c4:d6:41:1c:e5:11:d9:e2:cd:30:97:5a:d4:77:a6:11:
         b8:b7:cb:b0:64:db:28:ad:1f:c6:f8:88:d6:9a:57:48:22:2b:
         61:73:be:15:c8:03:50:94:1a:cc:46:ad:9a:01:da:60:ea:a3:
         11:f1:fd:cf:f9:0a:3e:98:9d:15:df:47:66:da:37:37:6b:74:
         fb:a6:9d:f7:37:5b:bb:62:b9:4f:6f:4d:05:e8:a6:9c:b2:02:
         87:f0:b1:6c:bf:93:f5:67:c0:3b:97:38:7e:3b:c1:0f:20:f2:
         bc:9f:86:e7:d3:e3:79:08:bf:85:9f:a7:0e:3d:76:58:8d:ba:
         a3:5c:ec:a4:d0:57:cb:88:63:f5:37:4b:c1:ef:13:1f:73:2f:
         ea:54:c7:96:e4:cc:f3:40:ff:c4:89:6a:f0:9d:35:f2:99:ec:
         2e:2f:f8:b5:0e:03:12:46:ef:71:c0:cf:09:10:64:69:c3:00:
         9e:87:60:65:4b:e0:6e:6b:2f:5d:ce:19:92:54:f7:11:4c:1e:
         b5:3d:5d:60:4f:72:e2:66:36:d0:66:fa:69:0d:4b:19:d2:41:
         b7:da:68:65:25:d4:49:1e:d2:20:ef:3a:dd:20:d8:5e:f0:5e:
         56:db:d0:fe:05:b2:02:70:35:bf:e3:b7:d3:b7:3a:72:64:e1:
         29:cd:65:28
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUTZETLvN6XYSWlxQVGJ58snVxCPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5
QjFGNUIyQzAeFw0yNjAxMjAwMjA5MTJaFw0yNzAxMTkwMjE0MTJaMDMxMTAvBgNV
BAMTKEMzNjg1ODM4MTVFRUJDQTc4NjY2MDQ5NUNCRDE2QzRGMjAxRDQwOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe/vvwAYVBXWu3NzruvvluheTI
xtYs7dQOkQ4tPeEBNIEZLheSiiwTVi37Z3BRLQ2kXSgVUsI0BIE4pOwUrkfN1dIH
lQ3lJCZM9srpJfm7010hnjr3s4jDSHeMXKtD8SJdajsCMty/mzcmbwJgEizyHwQ5
w4k3Arags6oSY61MC0BBlOoDZ/1pFAwqqH8AS/CAZTy6jhVyv3vZJ85L9r6s6hAS
3hhAGVAKW6V4RKAXxT1OH3cqDEcisSmLR44/bhfiKDnKS7UMJAn24n75YSNmDBI1
jqVa4v0fm7cGOLQWEE6KRzNQBYtJxj6AwRmlg5vf0qoppyiTqOAJ3wP5E6vxAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUw2hYOBXuvKeGZgSVy9FsTyAdQJ8wHwYDVR0j
BBgwFoAU+3t5TxI3Jf6ACmR/P36L6ZsfWywwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjA0ODM4Ni8wL0ZCN0I3OTRGMTIzNzI1RkU4MDBBNjQ3RjNGN0U4
QkU5OUIxRjVCMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMDQ4Mzg2LzAvMzEzODMyMmUzODMw
MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNkM2UyMDMyMzMzNzM3MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwC2UDANBgkqhkiG9w0BAQsFAAOCAQEAE43E1kEc5RHZ4s0wl1rUd6YRuLfLsGTb
KK0fxviI1ppXSCIrYXO+FcgDUJQazEatmgHaYOqjEfH9z/kKPpidFd9HZto3N2t0
+6ad9zdbu2K5T29NBeimnLICh/CxbL+T9WfAO5c4fjvBDyDyvJ+G59PjeQi/hZ+n
Dj12WI26o1zspNBXy4hj9TdLwe8TH3Mv6lTHluTM80D/xIlq8J018pnsLi/4tQ4D
EkbvccDPCRBkacMAnodgZUvgbmsvXc4ZklT3EUwetT1dYE9y4mY20Gb6aQ1LGdJB
t9poZSXUSR7SIO863SDYXvBeVtvQ/gWyAnA1v+O307c6cmThKc1lKA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:52 2026 by rpki-client