This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/34352e3131352e3234342e302f32322d3232203d3e203539303232.roa
File:                     34352e3131352e3234342e302f32322d3232203d3e203539303232.roa (raw, json)
Hash identifier:          ge2Ti9DiKt4SjGrhGoUJ7CPWluyE8+KIRMqEhEbTarU=
Subject key identifier:   13:E3:86:57:1E:8A:3F:73:9E:D3:19:40:16:A3:D6:56:73:03:87:87
Certificate issuer:       /CN=4155439EEB77ED19E3031F638A8E633394279977
Certificate serial:       525B63AC55C00C51C8A5D383B58F05883C4C594C
Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/34352e3131352e3234342e302f32322d3232203d3e203539303232.roa
Signing time:             Tue 20 Jan 2026 02:24:52 +0000
ROA not before:           Tue 20 Jan 2026 02:19:52 +0000
ROA not after:            Tue 19 Jan 2027 02:24:52 +0000
asID:                     59022
IP address blocks:        45.115.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5b:63:ac:55:c0:0c:51:c8:a5:d3:83:b5:8f:05:88:3c:4c:59:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977
        Validity
            Not Before: Jan 20 02:19:52 2026 GMT
            Not After : Jan 19 02:24:52 2027 GMT
        Subject: CN=13E386571E8A3F739ED3194016A3D65673038787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:3e:3a:6a:24:17:0c:5b:ff:4b:73:9e:b4:
                    e3:62:fe:a2:4c:45:01:76:97:a7:27:55:84:f4:b5:
                    96:22:b0:03:48:e3:df:01:82:9a:05:52:9a:bc:b1:
                    e1:e6:56:12:38:d1:ed:40:04:06:41:5f:0a:a2:bc:
                    c6:7a:93:c6:72:ad:22:0b:c6:1f:a8:c1:e3:64:60:
                    38:b7:b4:fd:ef:a6:12:7c:89:15:c6:84:00:80:b2:
                    a5:48:14:7a:1c:86:61:2d:e9:11:61:0e:15:38:a4:
                    19:14:a3:56:f1:d8:94:2d:4e:07:c0:dc:bd:88:a0:
                    70:13:42:3e:f3:77:00:24:60:c6:2d:db:e4:17:7f:
                    e9:07:61:ac:36:10:bf:ae:87:dd:70:08:58:c0:a2:
                    f8:18:d3:d7:08:6a:e6:52:1d:89:ba:19:e5:78:d4:
                    94:2c:09:8f:a3:fb:ce:dd:62:0c:79:64:e2:fb:4d:
                    7d:a1:2d:c6:92:81:38:9f:a7:e5:fc:d0:3e:55:b1:
                    cc:11:41:3a:bd:f2:62:a2:bb:d0:54:95:91:e2:e6:
                    3c:0a:e1:2f:f5:57:e2:0c:25:6a:de:0d:23:6d:8c:
                    49:e2:ed:ce:67:f6:3e:eb:c2:07:9d:7f:dc:18:94:
                    ab:3d:42:d2:fa:f1:b5:25:47:d1:24:42:f8:f7:40:
                    a7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E3:86:57:1E:8A:3F:73:9E:D3:19:40:16:A3:D6:56:73:03:87:87
            X509v3 Authority Key Identifier:
                keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/34352e3131352e3234342e302f32322d3232203d3e203539303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:f1:ef:79:f5:b2:a9:a0:35:9f:b0:3f:7f:5c:83:e3:32:
         0f:30:84:22:3b:7d:43:76:30:0b:f3:f7:af:07:68:c3:47:34:
         83:ca:09:df:c1:dd:4a:a8:40:29:09:6d:89:cf:e5:c0:f4:5a:
         a1:9d:c8:39:fd:6c:57:81:ec:fd:b2:9b:bf:1f:a6:00:76:70:
         59:5c:70:13:d5:54:94:84:7b:83:ad:ad:2b:5f:36:5b:44:9b:
         e1:0a:21:26:07:35:b7:dc:ed:86:f4:c6:cc:97:6f:cf:0c:34:
         05:3f:4b:da:f2:e9:70:33:15:94:5e:99:a2:31:7b:13:22:e4:
         79:2b:ce:dd:75:03:9a:22:6b:57:0d:99:32:10:09:ee:d8:02:
         a1:c5:87:7d:e5:e4:14:31:57:65:4d:ed:d6:6b:d7:02:39:9e:
         ac:53:f4:fe:5f:c8:de:7a:ef:87:5f:a4:63:50:47:a9:b1:50:
         78:7f:43:09:27:fb:5c:cc:a5:4e:d2:9d:21:6b:7f:0c:ad:81:
         ae:b1:b7:18:f1:23:d9:5a:78:94:d9:92:b6:e1:6c:55:07:dd:
         ce:df:e2:e3:6f:bb:e4:69:06:34:0e:65:9d:ac:bf:13:2f:2e:
         76:a0:c9:b9:0a:a6:e8:c8:c7:15:61:ae:3d:12:0a:11:de:84:
         c8:3d:da:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:33 2026 by rpki-client