This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31382d3138203d3e203538383334.roa
File:                     3132342e3234302e302e302f31382d3138203d3e203538383334.roa (raw, json)
Hash identifier:          GMp+uG9HedtWkbLMhIbBC02b+0QekGCXEfkOgrdqAkk=
Subject key identifier:   13:0E:FC:3E:9C:63:AE:3C:67:C5:9B:FF:E9:A8:12:9A:41:DB:DA:0C
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       5F540FB07564720BBC5E3BA082FE9A4F2F78FE5C
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31382d3138203d3e203538383334.roa
Signing time:             Tue 20 Jan 2026 02:13:06 +0000
ROA not before:           Tue 20 Jan 2026 02:08:06 +0000
ROA not after:            Tue 19 Jan 2027 02:13:06 +0000
asID:                     58834
IP address blocks:        124.240.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:54:0f:b0:75:64:72:0b:bc:5e:3b:a0:82:fe:9a:4f:2f:78:fe:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Jan 20 02:08:06 2026 GMT
            Not After : Jan 19 02:13:06 2027 GMT
        Subject: CN=130EFC3E9C63AE3C67C59BFFE9A8129A41DBDA0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:b1:b1:f8:61:17:66:c8:c8:f6:79:ab:5f:
                    32:15:1f:46:6c:a5:c0:38:95:40:51:d0:f2:75:7a:
                    5c:6c:18:f7:5e:3b:f4:c5:49:52:67:ff:6e:db:eb:
                    dc:0e:93:39:50:6d:e5:7c:ad:8d:09:dd:4d:1f:4d:
                    07:2a:0b:58:9e:13:d6:ad:3d:fb:e0:67:36:4b:34:
                    8d:bc:31:ef:7f:64:4c:64:22:70:fc:4e:b2:ab:d5:
                    77:a2:a0:f7:c9:62:da:ed:75:86:74:e3:59:f1:88:
                    b8:a1:95:aa:1b:c3:7f:37:15:f5:d4:14:47:4f:d0:
                    e7:fc:a1:5b:c4:a8:8f:4e:67:48:f9:eb:b7:92:39:
                    b5:3b:2a:0f:10:22:8d:e1:7e:2b:b8:0c:f1:9f:f7:
                    69:c4:f1:50:23:aa:27:3b:4f:6f:86:bc:42:a2:69:
                    db:35:96:da:69:c4:fe:17:79:60:c7:55:28:e0:22:
                    17:4e:30:5a:ac:a3:62:82:a8:6f:f2:5a:19:34:4d:
                    b2:80:cb:8d:97:32:ae:09:59:c4:af:43:57:5f:02:
                    72:a7:5a:37:6c:b4:7e:03:9e:4a:2f:42:4a:02:36:
                    aa:eb:09:09:42:ec:85:bd:34:7f:bc:50:22:45:82:
                    36:de:b7:1f:ee:51:d0:08:05:ff:92:fa:ef:af:b3:
                    9b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0E:FC:3E:9C:63:AE:3C:67:C5:9B:FF:E9:A8:12:9A:41:DB:DA:0C
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31382d3138203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.240.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         02:11:c6:98:5a:4f:ec:1c:19:7c:ee:f5:ac:c6:59:12:f9:9d:
         f0:39:38:1b:24:1f:74:01:76:9c:61:01:ee:39:44:14:e9:b1:
         09:8e:1d:37:3f:31:0a:dd:c2:a3:69:ec:ba:30:aa:6c:c7:99:
         95:fa:4c:94:af:70:44:53:7f:4e:2f:31:5e:a4:d7:89:18:b7:
         9d:b9:e6:23:ee:8c:68:57:e0:01:0c:d7:5d:7f:45:ae:dc:e0:
         73:82:20:91:a2:d8:3a:5d:25:10:9b:40:e5:a5:40:00:5e:dc:
         b5:a6:c6:a7:6b:c7:0a:f5:e9:5d:b0:68:97:37:6a:4b:1a:13:
         87:df:30:b3:f9:0e:32:73:e2:52:03:b9:b4:66:f4:9f:38:5d:
         c0:43:9e:c2:7e:c2:db:58:d7:93:fd:54:9d:d1:61:b3:6f:b8:
         ea:2f:d5:55:96:85:a7:9b:6d:c3:69:b6:8a:9b:c8:96:d3:d0:
         8e:dd:5a:4c:db:1a:08:c6:71:21:ea:d1:6d:1e:3e:b0:b8:61:
         40:94:5a:0f:10:9a:b6:ce:84:3c:f1:82:ed:41:28:93:1d:a3:
         bb:46:d3:ed:d9:6f:3e:c1:0c:28:cb:e5:70:e9:08:62:27:5c:
         dd:04:6c:97:7a:9a:cf:47:c2:9f:23:27:a0:ad:1c:80:b9:48:
         9e:42:16:9e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUX1QPsHVkcgu8Xjuggv6aTy94/lwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjAxMjAwMjA4MDZaFw0yNzAxMTkwMjEzMDZaMDMxMTAvBgNV
BAMTKDEzMEVGQzNFOUM2M0FFM0M2N0M1OUJGRkU5QTgxMjlBNDFEQkRBMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ7rGx+GEXZsjI9nmrXzIVH0Zs
pcA4lUBR0PJ1elxsGPdeO/TFSVJn/27b69wOkzlQbeV8rY0J3U0fTQcqC1ieE9at
PfvgZzZLNI28Me9/ZExkInD8TrKr1XeioPfJYtrtdYZ041nxiLihlaobw383FfXU
FEdP0Of8oVvEqI9OZ0j567eSObU7Kg8QIo3hfiu4DPGf92nE8VAjqic7T2+GvEKi
ads1ltppxP4XeWDHVSjgIhdOMFqso2KCqG/yWhk0TbKAy42XMq4JWcSvQ1dfAnKn
WjdstH4DnkovQkoCNqrrCQlC7IW9NH+8UCJFgjbetx/uUdAIBf+S+u+vs5t3AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUEw78PpxjrjxnxZv/6agSmkHb2gwwHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NTUzMzQ1LzAvMzEzMjM0MmUzMjM0
MzAyZTMwMmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzUzODM4MzMzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBnzwADANBgkqhkiG9w0BAQsFAAOCAQEAAhHGmFpP7BwZfO71rMZZEvmd8Dk4
GyQfdAF2nGEB7jlEFOmxCY4dNz8xCt3Co2nsujCqbMeZlfpMlK9wRFN/Ti8xXqTX
iRi3nbnmI+6MaFfgAQzXXX9Frtzgc4IgkaLYOl0lEJtA5aVAAF7ctabGp2vHCvXp
XbBolzdqSxoTh98ws/kOMnPiUgO5tGb0nzhdwEOewn7C21jXk/1UndFhs2+46i/V
VZaFp5ttw2m2ipvIltPQjt1aTNsaCMZxIerRbR4+sLhhQJRaDxCats6EPPGC7UEo
kx2ju0bT7dlvPsEMKMvlcOkIYidc3QRsl3qaz0fCnyMnoK0cgLlInkIWng==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:30 2026 by rpki-client