This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3132382e302f31372d3234203d3e203538383334.roa
File:                     3131392e322e3132382e302f31372d3234203d3e203538383334.roa (raw, json)
Hash identifier:          5+QTjT3PeHGkL5AxNhr6FfQ2LjE0U6P4ZFuFt/iWJME=
Subject key identifier:   59:63:BE:61:92:80:C4:18:7F:7E:44:FC:04:9D:2C:4A:D6:1A:45:10
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       2117875C560C751A1CB65EAA223EE670D181DCF3
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3132382e302f31372d3234203d3e203538383334.roa
Signing time:             Tue 20 Jan 2026 02:13:07 +0000
ROA not before:           Tue 20 Jan 2026 02:08:07 +0000
ROA not after:            Tue 19 Jan 2027 02:13:07 +0000
asID:                     58834
IP address blocks:        119.2.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:17:87:5c:56:0c:75:1a:1c:b6:5e:aa:22:3e:e6:70:d1:81:dc:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Jan 20 02:08:07 2026 GMT
            Not After : Jan 19 02:13:07 2027 GMT
        Subject: CN=5963BE619280C4187F7E44FC049D2C4AD61A4510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7b:23:d4:51:07:41:f4:51:d1:49:9a:d1:91:
                    29:24:e6:f0:1a:f3:a3:38:a9:e4:29:7c:81:24:13:
                    3b:a6:73:6d:0b:b9:5b:a1:39:00:00:6d:e2:f5:b9:
                    c7:28:25:01:67:f0:f9:13:80:f3:48:4a:3b:ab:dd:
                    0f:e6:02:a1:39:68:83:ed:80:8f:84:95:9a:ed:86:
                    f5:f0:10:a9:ee:29:fe:c5:91:9e:c9:02:74:31:c1:
                    08:24:da:5f:16:e3:19:47:2c:c9:c3:7c:9a:62:7b:
                    61:e4:86:c7:e4:24:3e:19:3d:53:ac:4e:96:29:46:
                    64:a5:d8:f9:0c:38:ef:9d:98:fe:cf:ff:06:30:2d:
                    61:de:86:2b:b0:14:64:36:35:21:16:46:d7:82:bd:
                    9d:31:91:8a:9a:20:3b:de:73:f6:1b:d5:23:c3:2a:
                    4a:69:4b:2b:90:7f:19:15:9d:b8:cb:e0:1e:ed:15:
                    2a:66:39:ac:98:df:e1:1b:0d:3f:14:16:33:bd:3e:
                    da:3f:33:a6:42:55:a6:79:cb:92:4d:7a:7c:f1:a7:
                    c9:49:b5:64:eb:47:cb:e6:d8:5a:22:19:4f:fe:6b:
                    9b:f2:72:b5:51:99:9d:53:b3:ac:7e:75:56:80:69:
                    a2:34:f7:ad:df:5a:bf:f6:4c:9e:39:88:a7:21:ee:
                    80:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:63:BE:61:92:80:C4:18:7F:7E:44:FC:04:9D:2C:4A:D6:1A:45:10
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3132382e302f31372d3234203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.2.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         cd:6d:31:fb:90:77:29:62:2d:ab:e8:43:e0:ca:f2:6c:51:54:
         07:cc:69:8d:d0:4a:4c:9d:59:68:f7:92:1e:86:c8:e7:ff:bd:
         9d:6d:9b:45:59:10:24:8f:c3:96:84:ae:b0:fd:c4:f2:24:d5:
         d8:e8:c1:c2:28:9b:8b:7f:dd:5f:8d:51:4f:e4:88:d6:c5:94:
         73:eb:28:b5:21:82:db:76:9a:bc:23:a3:d7:0d:88:99:61:94:
         ba:0f:e7:b9:6b:c9:27:7c:59:8f:f8:b5:0c:49:5d:5f:4f:e3:
         20:a3:96:c3:7e:9d:60:4f:d4:cf:14:44:3d:4e:1a:4c:f1:f1:
         50:f0:3a:cb:e9:cb:76:ac:b1:7a:04:ed:29:55:92:15:2d:34:
         9f:d7:ce:dd:5a:58:6a:bd:c0:d0:c6:2d:b6:68:06:bb:18:41:
         51:d4:a5:65:a7:8e:3e:14:b9:27:99:44:7a:0b:de:f9:b9:63:
         ba:e6:4e:2c:72:16:a3:bc:19:22:34:7b:d8:7d:6a:9b:58:72:
         e1:dd:6c:aa:2c:38:a9:8d:a4:2e:27:e4:55:1b:1e:a7:ef:e5:
         e2:59:7f:37:8d:4e:97:e8:9c:2b:52:6b:f5:bd:35:6c:49:94:
         eb:f5:fa:94:07:b1:59:9f:46:e5:c8:65:5a:cc:6b:49:db:79:
         88:37:82:54
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUIReHXFYMdRoctl6qIj7mcNGB3PMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjAxMjAwMjA4MDdaFw0yNzAxMTkwMjEzMDdaMDMxMTAvBgNV
BAMTKDU5NjNCRTYxOTI4MEM0MTg3RjdFNDRGQzA0OUQyQzRBRDYxQTQ1MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaeyPUUQdB9FHRSZrRkSkk5vAa
86M4qeQpfIEkEzumc20LuVuhOQAAbeL1uccoJQFn8PkTgPNISjur3Q/mAqE5aIPt
gI+ElZrthvXwEKnuKf7FkZ7JAnQxwQgk2l8W4xlHLMnDfJpie2HkhsfkJD4ZPVOs
TpYpRmSl2PkMOO+dmP7P/wYwLWHehiuwFGQ2NSEWRteCvZ0xkYqaIDvec/Yb1SPD
KkppSyuQfxkVnbjL4B7tFSpmOayY3+EbDT8UFjO9Pto/M6ZCVaZ5y5JNenzxp8lJ
tWTrR8vm2FoiGU/+a5vycrVRmZ1Ts6x+dVaAaaI0963fWr/2TJ45iKch7oA5AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUWWO+YZKAxBh/fkT8BJ0sStYaRRAwHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NTUzMzQ1LzAvMzEzMTM5MmUzMjJl
MzEzMjM4MmUzMDJmMzEzNzJkMzIzNDIwM2QzZTIwMzUzODM4MzMzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB3cCgDANBgkqhkiG9w0BAQsFAAOCAQEAzW0x+5B3KWItq+hD4MrybFFUB8xp
jdBKTJ1ZaPeSHobI5/+9nW2bRVkQJI/DloSusP3E8iTV2OjBwiibi3/dX41RT+SI
1sWUc+sotSGC23aavCOj1w2ImWGUug/nuWvJJ3xZj/i1DEldX0/jIKOWw36dYE/U
zxREPU4aTPHxUPA6y+nLdqyxegTtKVWSFS00n9fO3VpYar3A0MYttmgGuxhBUdSl
ZaeOPhS5J5lEegve+bljuuZOLHIWo7wZIjR72H1qm1hy4d1sqiw4qY2kLifkVRse
p+/l4ll/N41Ol+icK1Jr9b01bEmU6/X6lAexWZ9G5chlWsxrSdt5iDeCVA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:50:10 2026 by rpki-client