This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e36342e302f31392d3139203d3e203538383334.roa
File:                     3132342e3234302e36342e302f31392d3139203d3e203538383334.roa (raw, json)
Hash identifier:          8xSGL8z9f5V+bgPpupMd7WxXC8T71NB7R1JLgpW3Hn0=
Subject key identifier:   6E:2D:19:D5:46:CB:E6:C6:FA:02:83:C5:49:7B:07:99:99:98:87:0A
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       374492D4A8A9C81B1ADFAD598E4C4B76B0250064
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e36342e302f31392d3139203d3e203538383334.roa
Signing time:             Tue 20 Jan 2026 02:13:06 +0000
ROA not before:           Tue 20 Jan 2026 02:08:06 +0000
ROA not after:            Tue 19 Jan 2027 02:13:06 +0000
asID:                     58834
IP address blocks:        124.240.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:44:92:d4:a8:a9:c8:1b:1a:df:ad:59:8e:4c:4b:76:b0:25:00:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Jan 20 02:08:06 2026 GMT
            Not After : Jan 19 02:13:06 2027 GMT
        Subject: CN=6E2D19D546CBE6C6FA0283C5497B07999998870A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:bf:c9:b8:23:da:67:fd:a4:7b:a5:cf:26:
                    2b:01:ad:7b:33:80:b1:c1:e4:30:e4:73:5b:14:69:
                    fa:d8:41:dc:56:81:0e:97:c1:3a:b3:1c:b0:a6:cb:
                    f7:4b:d3:dc:0d:40:7b:cb:0a:73:fd:06:18:f8:51:
                    0a:19:7c:31:90:84:80:9c:55:bc:5a:08:98:4b:9e:
                    95:d9:93:c5:e9:15:96:fd:9a:35:1f:43:ce:47:ec:
                    21:c7:e7:6b:fb:f9:e1:90:4e:b6:ef:df:2c:9b:d4:
                    64:2d:46:1f:41:11:29:a3:80:35:8e:a9:1d:a1:be:
                    ef:d2:ad:13:64:0d:8e:42:29:b7:13:0c:51:03:fe:
                    0b:cd:0e:db:59:42:52:92:2e:20:e7:de:65:02:d7:
                    c8:a6:0f:8c:9d:e5:cd:45:7f:af:e4:10:b4:dc:1a:
                    1e:ce:e2:90:02:4b:78:ec:3c:bf:e4:73:0e:22:f7:
                    50:e6:6c:7a:1c:6c:06:e6:e1:5c:9f:dc:c5:5b:80:
                    9e:65:fe:90:0e:ed:12:c6:46:fc:d7:39:54:d0:18:
                    64:b6:4a:c9:fa:71:5e:c6:77:02:bb:83:05:f5:5e:
                    6e:1d:95:5b:1e:4b:de:6e:ef:4a:3d:2b:0e:41:c3:
                    98:db:20:71:53:e0:6e:99:da:b8:28:19:c5:1d:d8:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2D:19:D5:46:CB:E6:C6:FA:02:83:C5:49:7B:07:99:99:98:87:0A
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e36342e302f31392d3139203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.240.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:14:bd:83:0f:ce:51:55:5a:ab:68:6f:ee:57:52:d9:f0:3b:
         42:a9:ee:62:50:f1:ac:36:7e:96:4b:c0:db:eb:7f:4a:bf:1f:
         47:09:1a:ee:91:34:a9:be:8c:ca:d1:9a:da:ec:95:47:a1:ed:
         e0:f0:9b:e3:fd:28:5e:ef:20:81:03:c3:cd:c4:a9:31:96:59:
         a6:de:2a:7d:cd:5f:c2:bd:03:9b:2a:45:d7:5b:e6:af:b2:0c:
         7b:d2:81:4c:af:24:35:e2:ab:c6:4d:f6:3b:1a:34:d6:58:93:
         e7:5f:fe:e9:39:6b:aa:8b:14:38:40:9a:60:af:9d:84:15:07:
         40:96:6a:78:1d:36:d2:4c:67:e4:3f:2d:cd:18:03:8b:36:04:
         70:c9:f0:b4:93:3e:62:90:20:3d:10:a1:e1:a6:7a:83:99:49:
         da:b7:5b:f3:91:e1:fe:2b:48:90:2d:ee:3a:cc:2c:63:c2:ba:
         8a:9d:76:ea:aa:ef:05:a7:2f:f7:e3:31:1f:d1:e9:e7:3a:d6:
         97:33:77:56:04:ce:f2:26:c9:a4:a2:f0:49:b3:c0:ce:46:f0:
         a4:30:6e:5f:b4:8c:c5:c0:67:74:b0:00:fc:fd:02:bb:42:ac:
         ad:ac:83:ed:ff:19:37:43:0b:73:9d:15:81:99:7e:ed:8e:6d:
         f2:37:71:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:21 2026 by rpki-client