This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/34352e3131362e3230382e302f32322d3234203d3e203633373031.roa
File:                     34352e3131362e3230382e302f32322d3234203d3e203633373031.roa (raw, json)
Hash identifier:          U7pMxSAG3hJgdZF9MfZ18nxXUA9nKKA1bO/qYqQYHtk=
Subject key identifier:   4B:AE:D2:A7:57:07:02:86:59:55:92:24:0C:03:82:95:89:89:30:D4
Certificate issuer:       /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
Certificate serial:       1EE1B30FC3A086774A0C9DACCE9CB74A65BB63CA
Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/34352e3131362e3230382e302f32322d3234203d3e203633373031.roa
Signing time:             Tue 20 Jan 2026 02:19:09 +0000
ROA not before:           Tue 20 Jan 2026 02:14:09 +0000
ROA not after:            Tue 19 Jan 2027 02:19:09 +0000
asID:                     63701
IP address blocks:        45.116.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 17:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e1:b3:0f:c3:a0:86:77:4a:0c:9d:ac:ce:9c:b7:4a:65:bb:63:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
        Validity
            Not Before: Jan 20 02:14:09 2026 GMT
            Not After : Jan 19 02:19:09 2027 GMT
        Subject: CN=4BAED2A757070286595592240C038295898930D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d2:0a:44:ac:5e:e0:76:64:0c:52:4b:14:7f:
                    eb:e9:19:6c:23:ef:ba:25:8b:ed:a2:4c:53:ba:80:
                    8c:ac:43:4f:57:b9:92:0a:c7:16:95:7d:60:40:34:
                    28:04:80:05:ba:d4:25:45:18:52:63:3e:08:57:b0:
                    a2:29:68:97:55:1f:43:45:e9:27:41:f2:55:d7:92:
                    0c:f7:98:6a:fc:13:95:03:f0:c7:2e:42:e0:e4:c6:
                    cf:ae:fb:fe:8f:6d:69:d9:55:1d:3b:cc:26:ea:d9:
                    82:c7:5a:59:ca:e7:59:b1:6d:32:19:77:d8:6c:db:
                    26:db:2e:a0:5b:8c:b6:b9:f1:18:bc:41:6c:cf:63:
                    7e:1d:ba:cf:23:bf:32:da:08:86:8c:9f:0b:4b:f7:
                    ad:75:3b:c3:f6:bf:bd:c4:7d:80:8b:20:6c:a9:d3:
                    10:04:90:db:0b:e7:73:04:0c:9f:d5:b7:25:5b:14:
                    5f:c5:42:a1:7b:0e:6d:06:5b:22:22:ec:30:18:d9:
                    5d:94:30:1c:f1:bc:81:99:f6:40:ad:6e:31:86:98:
                    d7:4d:47:c3:db:af:00:f9:34:84:29:09:70:82:1f:
                    27:ef:b8:8c:2b:18:14:d6:4b:91:4a:a5:8f:1a:87:
                    05:c9:49:3a:1e:30:c0:00:b4:a1:56:6a:01:68:d5:
                    45:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AE:D2:A7:57:07:02:86:59:55:92:24:0C:03:82:95:89:89:30:D4
            X509v3 Authority Key Identifier:
                keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/34352e3131362e3230382e302f32322d3234203d3e203633373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:98:65:df:d4:99:d1:ce:95:df:4b:87:34:16:7c:4a:1d:a4:
         28:02:7f:ad:67:10:1b:b5:bc:ef:6e:99:b5:44:55:83:20:05:
         fc:8e:ec:35:17:0f:31:42:31:77:56:4c:4f:5a:56:f9:bf:4e:
         95:44:57:b4:c2:e7:0c:e5:9a:cd:44:2a:03:fa:2c:09:b1:61:
         70:9d:e0:79:db:dc:ef:02:9b:8d:21:06:c0:0d:1c:8f:7c:5b:
         66:3d:65:3f:00:a3:3b:b8:4d:d1:8c:2e:17:55:2f:ca:bb:9c:
         c5:d3:90:e5:cf:4a:d9:ae:8b:18:13:23:f2:41:2e:25:68:b9:
         25:5d:ae:9b:21:85:cf:ef:5b:25:16:ea:f2:a6:44:4f:3b:95:
         40:ad:08:65:77:35:1b:eb:94:e7:2f:a5:f4:56:69:7b:a5:a2:
         3c:69:8a:5f:7e:cf:68:4d:f5:04:f7:30:74:3e:fd:a0:bd:12:
         77:c7:83:3e:64:b5:81:fe:47:6f:6a:db:b9:e2:2f:24:db:f6:
         d0:30:3d:f1:77:75:a5:50:5f:90:a6:11:17:3a:6a:5a:0a:22:
         cf:c1:01:2c:88:42:15:af:9a:3d:54:d1:70:ca:67:d4:a0:30:
         14:a9:3c:93:0c:89:b7:41:78:52:34:23:54:f1:97:31:e0:18:
         8b:f8:98:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:46 2026 by rpki-client