This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31362d3136203d3e203138313138.roa
File:                     3132302e34372e302e302f31362d3136203d3e203138313138.roa (raw, json)
Hash identifier:          Ft5CLZw9t2CRUNmavoaGZC/hKN+eHg2+xR6CvXnjcRI=
Subject key identifier:   7F:77:34:32:46:DF:BC:A6:B2:9F:B8:5F:16:4C:DF:28:46:B9:BC:74
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       73C330C6EC663D21EA260CF139D34B5DDD9E4964
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31362d3136203d3e203138313138.roa
Signing time:             Tue 20 Jan 2026 02:25:04 +0000
ROA not before:           Tue 20 Jan 2026 02:20:04 +0000
ROA not after:            Tue 19 Jan 2027 02:25:04 +0000
asID:                     18118
IP address blocks:        120.47.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c3:30:c6:ec:66:3d:21:ea:26:0c:f1:39:d3:4b:5d:dd:9e:49:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jan 20 02:20:04 2026 GMT
            Not After : Jan 19 02:25:04 2027 GMT
        Subject: CN=7F77343246DFBCA6B29FB85F164CDF2846B9BC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:8f:30:18:36:4a:ca:df:75:fc:09:ae:3e:
                    3f:d4:93:d2:ef:ce:53:72:a2:ed:0d:a7:be:ea:b5:
                    32:f8:0d:6b:9b:ae:64:2d:12:00:49:fb:60:1b:39:
                    14:79:c0:59:31:50:20:a9:7c:89:7e:43:92:70:85:
                    e5:c9:8f:d5:f1:ca:29:8d:6b:64:d8:de:36:17:77:
                    f7:c2:22:56:86:db:04:3c:1c:50:48:11:58:5e:3c:
                    4f:cb:db:22:7e:da:e5:47:23:9f:2d:8d:b7:a0:20:
                    47:ee:0b:af:79:5f:c4:dc:ab:96:95:93:0f:50:d3:
                    19:35:59:83:c3:fc:72:1e:73:05:2d:c6:e9:a3:57:
                    df:d7:b7:9e:e9:87:dc:67:fa:35:c4:a0:f0:00:8c:
                    62:0b:e6:40:a0:75:6c:7d:ca:32:65:22:38:3b:bb:
                    65:c5:e3:fb:54:f3:39:2a:b8:41:f8:99:19:c8:a1:
                    82:53:47:e9:13:e0:50:52:4c:0e:2c:53:49:b6:d6:
                    d0:93:fd:61:22:63:e2:21:d5:ab:50:72:46:d3:6d:
                    5c:58:56:2a:ae:17:7d:a0:f9:04:7e:99:92:9b:9a:
                    97:ef:7c:f2:0e:2d:26:43:e3:ae:00:b4:5c:61:2e:
                    8e:43:aa:ec:1a:8f:8f:97:cf:e1:98:43:61:d1:88:
                    fd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:77:34:32:46:DF:BC:A6:B2:9F:B8:5F:16:4C:DF:28:46:B9:BC:74
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31362d3136203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.47.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b4:5b:0b:9d:2f:76:37:84:3f:ab:cf:3e:ce:c5:e2:35:96:8b:
         b8:3f:67:06:aa:dc:d4:e8:ca:ad:7a:dc:16:8a:c3:98:7a:27:
         6f:e0:03:98:d2:3e:f8:3a:4d:06:c4:44:22:1f:21:d1:1c:9f:
         a2:4d:c1:64:1f:f3:1c:1b:44:d7:96:fd:6e:30:47:49:5d:24:
         dc:8b:37:62:c1:5b:c1:20:07:df:6a:68:90:79:0b:1d:f7:23:
         8c:cb:98:72:d8:e6:e2:8f:f1:02:b5:d7:e8:95:ed:73:64:ad:
         b4:c6:e2:d1:6e:b3:82:5e:a4:1e:69:82:90:7c:54:e7:f2:71:
         36:c4:31:7c:ac:1b:5a:73:1a:97:67:76:8c:4d:d8:cc:2f:64:
         f3:7c:49:28:bf:87:80:8b:21:56:5c:d1:7f:15:b1:47:f1:7a:
         a2:f9:cb:b8:35:10:3d:29:a5:57:47:d8:25:ce:70:56:d8:f1:
         13:60:fe:55:e4:16:cd:0a:f3:5b:07:1e:77:d6:4f:f6:45:ff:
         c5:20:f3:e8:0e:c7:d1:e9:d5:8f:1b:45:47:d5:fe:87:22:1e:
         45:cf:bd:d1:ca:e7:ce:73:0e:57:ec:77:3f:7b:81:80:73:01:
         00:3b:4c:66:2b:8c:09:94:c9:36:50:05:24:c3:37:5c:3f:41:
         ac:2c:89:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:56 2026 by rpki-client