This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/323430323a313434303a3a2f33322d3438203d3e20313332313638.roa
File:                     323430323a313434303a3a2f33322d3438203d3e20313332313638.roa (raw, json)
Hash identifier:          nPxUSCb8jM3patwct7FARsTPD4r3GbX/abEI6PDpHCg=
Subject key identifier:   5E:DA:C7:6D:BC:A8:0D:1A:1D:DF:D7:28:D5:9B:E8:68:EA:57:8B:52
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       26DE3FCA33E374999C564A5A0F35CC804E8D3B17
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/323430323a313434303a3a2f33322d3438203d3e20313332313638.roa
Signing time:             Tue 20 Jan 2026 02:16:45 +0000
ROA not before:           Tue 20 Jan 2026 02:11:45 +0000
ROA not after:            Tue 19 Jan 2027 02:16:45 +0000
asID:                     132168
IP address blocks:        2402:1440::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:de:3f:ca:33:e3:74:99:9c:56:4a:5a:0f:35:cc:80:4e:8d:3b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:45 2026 GMT
            Not After : Jan 19 02:16:45 2027 GMT
        Subject: CN=5EDAC76DBCA80D1A1DDFD728D59BE868EA578B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:71:81:92:ca:d1:5e:36:95:a3:6b:6d:95:63:
                    c6:96:3d:e7:2e:53:fa:e1:84:39:da:a4:b0:91:d2:
                    bf:95:25:52:09:54:ac:9c:e3:c9:c8:6a:cd:30:d6:
                    21:c5:b0:68:d3:f0:8a:c0:24:c3:86:ef:3e:b3:c2:
                    24:39:f1:de:bf:de:85:d1:bf:1d:2e:8b:97:d1:a6:
                    d4:cc:81:4a:35:d1:87:d8:9c:00:b1:72:8c:95:27:
                    ab:6c:36:a6:77:66:fc:0b:b2:50:22:ed:cb:14:3b:
                    f0:07:26:fd:9d:09:02:72:81:23:f1:b6:56:5a:dd:
                    bf:2e:8b:6c:43:62:13:4f:2c:7e:ce:09:b3:1d:5b:
                    26:00:50:09:54:34:62:c8:ac:78:fd:7d:7f:c0:90:
                    ca:25:fa:b0:1b:cd:72:19:c1:f1:ee:00:89:d7:3d:
                    0f:24:2e:52:50:95:d4:73:b2:bc:07:49:fe:75:27:
                    4a:b8:7c:84:f8:b9:91:e3:4a:da:74:98:f6:89:9c:
                    7d:75:e0:8f:0d:6f:06:49:20:ff:94:57:51:6f:0a:
                    a2:9a:e3:2d:3e:a2:58:95:72:2a:a2:ad:1e:66:b9:
                    48:31:54:69:51:f7:30:df:2f:d4:0a:64:cb:bf:8f:
                    be:aa:5e:29:24:3f:ef:18:e8:98:10:12:93:11:bb:
                    80:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DA:C7:6D:BC:A8:0D:1A:1D:DF:D7:28:D5:9B:E8:68:EA:57:8B:52
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/323430323a313434303a3a2f33322d3438203d3e20313332313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:3c:13:be:c2:54:fc:a1:40:4e:f9:4b:e1:25:09:b4:6b:
         e4:f1:98:ec:ca:8a:18:1e:3b:e6:8d:19:9e:95:90:bb:16:77:
         2e:96:27:06:67:5e:2e:f6:48:29:81:6f:ac:77:44:d7:cc:79:
         0a:50:a3:64:4d:5d:25:34:3f:d4:01:ed:71:25:fd:20:02:85:
         5f:a9:ea:82:5c:f2:41:48:52:04:a2:7f:42:f9:57:78:17:54:
         6f:2f:cc:bf:1c:ee:38:be:54:54:94:fa:2c:d4:2f:8b:2f:de:
         ac:71:2d:6f:33:45:39:13:38:ea:86:01:1d:a7:ea:01:2e:f2:
         b8:0d:ab:82:73:f2:04:2d:0d:8f:59:12:02:85:6a:11:57:8e:
         6a:a3:8d:f2:7d:7c:8a:05:35:25:da:87:12:ec:38:09:e7:2a:
         f5:41:5d:7e:04:01:7f:6e:bf:6f:f4:e7:53:9d:51:d1:2f:6a:
         d4:07:61:09:4d:ef:61:a7:d3:62:fd:6e:86:33:95:89:ac:ff:
         c4:96:18:01:f7:d4:ba:4b:5c:cc:6c:82:2c:f7:7a:6a:22:93:
         2b:35:8d:d1:88:cd:f9:a6:b1:7a:d4:11:19:b5:48:36:8b:59:
         3a:e2:79:37:3a:04:b2:29:1b:40:bd:d5:5c:3b:3b:ae:43:9c:
         0e:52:72:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:02:40 2026 by rpki-client