This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e36342e302f32302d3230203d3e203538383334.roa
File:                     3132342e3234302e36342e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier:          aj0lavjXozsfqVQmX5zEWt/8xqzotLBeMnJRBj9VcsY=
Subject key identifier:   B6:6A:55:39:2F:D2:78:D1:51:3D:64:71:E4:18:BA:10:4A:96:82:DC
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       6CA029473BFD057420E34A8E4BE253E67EE07189
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e36342e302f32302d3230203d3e203538383334.roa
Signing time:             Tue 20 Jan 2026 02:13:06 +0000
ROA not before:           Tue 20 Jan 2026 02:08:06 +0000
ROA not after:            Tue 19 Jan 2027 02:13:06 +0000
asID:                     58834
IP address blocks:        124.240.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a0:29:47:3b:fd:05:74:20:e3:4a:8e:4b:e2:53:e6:7e:e0:71:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Jan 20 02:08:06 2026 GMT
            Not After : Jan 19 02:13:06 2027 GMT
        Subject: CN=B66A55392FD278D1513D6471E418BA104A9682DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:49:f3:0f:38:87:0c:1c:51:56:76:b7:da:
                    87:69:dc:8e:f4:f0:cc:43:df:bf:1f:85:2c:5d:98:
                    94:d8:a6:3f:48:44:b5:23:32:cd:e9:98:7f:cb:89:
                    9a:44:dc:7d:d5:97:19:67:47:0a:a5:90:8d:cd:fd:
                    4e:23:51:bc:b9:b1:53:74:e9:2f:8f:d2:84:0b:ee:
                    2e:aa:8b:45:11:b1:0e:bc:e1:57:70:4d:d8:ab:8c:
                    2f:ca:8b:7a:2e:7e:a0:43:8f:11:41:d8:55:f9:d8:
                    eb:1a:2f:ca:04:08:92:dd:df:f1:69:cc:55:a6:b8:
                    c9:64:23:7d:6c:7c:da:2c:da:23:dd:c8:1f:d9:ce:
                    c1:e5:fd:18:cb:fe:85:11:65:aa:a1:17:02:2d:32:
                    13:72:9f:c0:74:19:6d:ea:04:cc:c2:2f:b8:b9:3a:
                    62:68:94:2f:64:b1:71:32:2a:cb:e4:6b:ac:22:b9:
                    64:ff:ac:01:3e:6d:54:64:67:2d:7b:41:da:ad:d1:
                    a9:84:ed:cb:03:96:48:81:e2:df:6c:f4:c2:9e:21:
                    11:53:3b:c6:8c:55:c8:dc:ce:69:84:b6:33:49:d2:
                    45:8a:4a:dd:e2:5f:86:26:c2:dd:c5:b7:a3:a2:2f:
                    a9:b1:2f:22:7a:35:69:b3:a1:1f:48:8f:4f:a0:69:
                    f0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6A:55:39:2F:D2:78:D1:51:3D:64:71:E4:18:BA:10:4A:96:82:DC
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e36342e302f32302d3230203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.240.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:f7:57:58:c0:6a:bc:c8:e4:fa:88:26:4d:c5:cf:e1:55:32:
         fe:43:20:96:8d:5b:22:8a:99:8c:aa:c5:14:6c:fc:9e:64:dc:
         24:c4:09:5b:72:b3:05:65:40:a1:cf:50:ad:08:d2:5d:ce:31:
         59:e5:f0:47:cb:45:3c:29:e7:21:f5:57:b2:60:99:05:5f:67:
         c0:a6:05:f6:ca:df:92:7b:6d:59:14:87:69:61:8c:90:14:66:
         11:c0:e5:05:5e:fd:26:af:69:3f:bd:8e:24:ad:8f:ca:73:95:
         eb:b3:58:6a:d7:66:30:86:27:65:e6:24:c9:2b:a7:04:52:ab:
         b3:52:cf:4b:af:6f:eb:8f:5b:ab:a3:b0:59:00:c2:91:f6:28:
         6f:fb:f4:3a:5f:4d:36:6f:0e:70:46:30:35:c4:0a:a7:eb:65:
         92:a2:7e:60:39:af:0b:f7:5f:ee:57:d5:14:ca:e5:b1:20:5f:
         e9:a9:4d:be:8f:e9:cf:2e:20:b6:9d:64:6f:e2:6a:d4:fa:fb:
         d8:4e:2b:06:e9:94:be:7a:d1:7e:cd:b5:6a:08:77:47:91:16:
         67:13:a1:0d:ab:10:4b:d7:d5:8e:02:05:ea:e1:a9:13:4e:5f:
         64:57:98:a7:21:3f:94:19:e7:c2:d4:94:51:95:f9:bc:8e:7c:
         9f:ad:54:c5
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUbKApRzv9BXQg40qOS+JT5n7gcYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjAxMjAwMjA4MDZaFw0yNzAxMTkwMjEzMDZaMDMxMTAvBgNV
BAMTKEI2NkE1NTM5MkZEMjc4RDE1MTNENjQ3MUU0MThCQTEwNEE5NjgyREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw80nzDziHDBxRVna32odp3I70
8MxD378fhSxdmJTYpj9IRLUjMs3pmH/LiZpE3H3VlxlnRwqlkI3N/U4jUby5sVN0
6S+P0oQL7i6qi0URsQ684VdwTdirjC/Ki3oufqBDjxFB2FX52OsaL8oECJLd3/Fp
zFWmuMlkI31sfNos2iPdyB/ZzsHl/RjL/oURZaqhFwItMhNyn8B0GW3qBMzCL7i5
OmJolC9ksXEyKsvka6wiuWT/rAE+bVRkZy17Qdqt0amE7csDlkiB4t9s9MKeIRFT
O8aMVcjczmmEtjNJ0kWKSt3iX4Ymwt3Ft6OiL6mxLyJ6NWmzoR9Ij0+gafArAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUtmpVOS/SeNFRPWRx5Bi6EEqWgtwwHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDU1MzM0NS8wLzMxMzIzNDJlMzIz
NDMwMmUzNjM0MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzODM4MzMzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBHzwQDANBgkqhkiG9w0BAQsFAAOCAQEAhvdXWMBqvMjk+ogmTcXP4VUy
/kMglo1bIoqZjKrFFGz8nmTcJMQJW3KzBWVAoc9QrQjSXc4xWeXwR8tFPCnnIfVX
smCZBV9nwKYF9srfknttWRSHaWGMkBRmEcDlBV79Jq9pP72OJK2PynOV67NYatdm
MIYnZeYkySunBFKrs1LPS69v649bq6OwWQDCkfYob/v0Ol9NNm8OcEYwNcQKp+tl
kqJ+YDmvC/df7lfVFMrlsSBf6alNvo/pzy4gtp1kb+Jq1Pr72E4rBumUvnrRfs21
agh3R5EWZxOhDasQS9fVjgIF6uGpE05fZFeYpyE/lBnnwtSUUZX5vI58n61UxQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:37 2026 by rpki-client