This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e33322e302f31392d3139203d3e203538383334.roa
File:                     3132342e3234302e33322e302f31392d3139203d3e203538383334.roa (raw, json)
Hash identifier:          k7xjgy9UxJhHjNgd5Vd2zvsNwZFk6IDmrXtKpFddiRQ=
Subject key identifier:   A7:11:F8:C8:A3:ED:F3:E7:29:E8:2D:52:B4:D9:25:CC:8F:CD:8F:18
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       0B07BB27E7C7F5B753084143CF4F7D67F3D87D1B
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e33322e302f31392d3139203d3e203538383334.roa
Signing time:             Tue 20 Jan 2026 02:13:07 +0000
ROA not before:           Tue 20 Jan 2026 02:08:07 +0000
ROA not after:            Tue 19 Jan 2027 02:13:07 +0000
asID:                     58834
IP address blocks:        124.240.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:07:bb:27:e7:c7:f5:b7:53:08:41:43:cf:4f:7d:67:f3:d8:7d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Jan 20 02:08:07 2026 GMT
            Not After : Jan 19 02:13:07 2027 GMT
        Subject: CN=A711F8C8A3EDF3E729E82D52B4D925CC8FCD8F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9b:9e:db:20:32:29:e4:0e:b7:cc:27:3c:6a:
                    df:76:46:a2:8d:58:b3:94:6c:86:67:9e:18:93:e4:
                    06:8f:b8:0c:c5:22:39:29:a2:14:c3:6f:c1:94:1c:
                    9f:20:e4:c4:71:9a:ec:dd:bb:ce:fd:d7:f8:8f:a0:
                    be:c9:31:b3:95:75:c2:1c:ab:26:fe:13:34:44:cd:
                    ee:05:f2:b3:11:f6:a1:16:c5:dd:a2:58:7a:58:3d:
                    21:f1:87:c7:60:9a:e2:05:ea:8e:7c:89:c8:95:f4:
                    de:00:9b:fc:d6:a6:05:fb:49:52:09:7e:33:dc:2d:
                    25:5e:68:75:41:db:7d:a0:43:63:e0:4c:eb:76:d9:
                    d9:a6:aa:62:e7:5f:f4:06:96:72:c7:be:51:43:64:
                    07:c4:b9:fe:e2:23:50:1e:59:1c:0e:d4:ea:12:94:
                    87:03:fd:7e:a3:e2:97:66:6f:c1:7c:d3:8e:08:89:
                    f0:51:15:09:04:87:99:68:ca:4e:5b:e9:23:de:f0:
                    48:e5:48:ec:c8:33:75:6a:01:a5:c7:a0:31:0f:a7:
                    84:c5:56:69:d2:00:75:0d:c8:44:ac:a2:93:31:d0:
                    f6:5e:2a:1b:da:f0:c6:0e:e1:87:d0:d8:27:1b:5f:
                    ad:f8:6c:88:17:92:05:ce:fc:4b:48:97:00:ea:e3:
                    63:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:11:F8:C8:A3:ED:F3:E7:29:E8:2D:52:B4:D9:25:CC:8F:CD:8F:18
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e33322e302f31392d3139203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.240.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:e0:ef:60:ad:05:5a:53:19:99:1d:f7:69:a8:47:5a:09:32:
         68:5b:c9:1d:19:87:5f:6f:f6:b7:bd:49:34:4e:a3:d7:5d:21:
         7c:3a:ee:7d:65:dc:46:4c:4b:85:10:48:8a:1e:11:c9:c1:c6:
         85:df:b0:95:85:7d:73:a4:44:d8:b8:23:af:5b:22:30:3e:83:
         c8:6e:15:c7:43:f6:1e:ce:12:8e:50:26:45:5a:f3:d5:31:48:
         3e:10:67:9a:1f:bc:48:6f:a1:2d:bd:48:f4:84:38:89:ee:b3:
         d4:4e:e3:af:87:61:92:3f:18:96:8b:ef:5f:4c:0e:6e:3b:1c:
         24:6b:4d:b6:cf:7f:e3:30:50:74:4d:0e:19:4f:65:aa:dc:c1:
         29:dd:81:6f:23:4b:b9:6e:76:45:04:35:f1:9c:15:25:ac:0a:
         e8:68:20:a0:c0:83:6c:86:dd:e8:8c:22:5b:99:71:eb:fc:5a:
         d9:29:01:21:77:ba:f8:53:f4:7b:ec:f2:1f:23:b2:ae:29:65:
         c1:4b:6c:5a:b3:e8:44:94:a5:c7:ce:2a:b7:84:a9:cd:53:4a:
         6a:54:87:ae:4d:9a:aa:a5:5b:1d:a2:34:a9:93:d6:2b:71:18:
         7b:ac:ef:2d:62:aa:15:d1:f4:1b:cc:30:97:94:f2:7d:7d:ef:
         48:7c:6d:5f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUCwe7J+fH9bdTCEFDz099Z/PYfRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjAxMjAwMjA4MDdaFw0yNzAxMTkwMjEzMDdaMDMxMTAvBgNV
BAMTKEE3MTFGOEM4QTNFREYzRTcyOUU4MkQ1MkI0RDkyNUNDOEZDRDhGMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUm57bIDIp5A63zCc8at92RqKN
WLOUbIZnnhiT5AaPuAzFIjkpohTDb8GUHJ8g5MRxmuzdu8791/iPoL7JMbOVdcIc
qyb+EzREze4F8rMR9qEWxd2iWHpYPSHxh8dgmuIF6o58iciV9N4Am/zWpgX7SVIJ
fjPcLSVeaHVB232gQ2PgTOt22dmmqmLnX/QGlnLHvlFDZAfEuf7iI1AeWRwO1OoS
lIcD/X6j4pdmb8F8044IifBRFQkEh5loyk5b6SPe8EjlSOzIM3VqAaXHoDEPp4TF
VmnSAHUNyESsopMx0PZeKhva8MYO4YfQ2CcbX634bIgXkgXO/EtIlwDq42NbAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUpxH4yKPt8+cp6C1StNklzI/NjxgwHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDU1MzM0NS8wLzMxMzIzNDJlMzIz
NDMwMmUzMzMyMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzUzODM4MzMzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBXzwIDANBgkqhkiG9w0BAQsFAAOCAQEAoeDvYK0FWlMZmR33aahHWgky
aFvJHRmHX2/2t71JNE6j110hfDrufWXcRkxLhRBIih4RycHGhd+wlYV9c6RE2Lgj
r1siMD6DyG4Vx0P2Hs4SjlAmRVrz1TFIPhBnmh+8SG+hLb1I9IQ4ie6z1E7jr4dh
kj8YlovvX0wObjscJGtNts9/4zBQdE0OGU9lqtzBKd2BbyNLuW52RQQ18ZwVJawK
6GggoMCDbIbd6IwiW5lx6/xa2SkBIXe6+FP0e+zyHyOyrillwUtsWrPoRJSlx84q
t4SpzVNKalSHrk2aqqVbHaI0qZPWK3EYe6zvLWKqFdH0G8wwl5TyfX3vSHxtXw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:11 2026 by rpki-client