This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/323430363a383838303a3a2f33322d3438203d3e20313531323936.roa
File:                     323430363a383838303a3a2f33322d3438203d3e20313531323936.roa (raw, json)
Hash identifier:          6jkJHvaNfJJtutlBO8hSVpCzbKvz9/2EnreSyJOv8js=
Subject key identifier:   DC:F9:18:6C:07:F8:F4:3B:1D:C2:6D:DF:EF:BB:CF:D7:0C:C0:0B:BE
Certificate issuer:       /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial:       6D4DB02CE9681AD831DF2571C91235B1E9F0B7A6
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/323430363a383838303a3a2f33322d3438203d3e20313531323936.roa
Signing time:             Tue 20 Jan 2026 02:18:05 +0000
ROA not before:           Tue 20 Jan 2026 02:13:05 +0000
ROA not after:            Tue 19 Jan 2027 02:18:05 +0000
asID:                     151296
IP address blocks:        2406:8880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 04:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4d:b0:2c:e9:68:1a:d8:31:df:25:71:c9:12:35:b1:e9:f0:b7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
        Validity
            Not Before: Jan 20 02:13:05 2026 GMT
            Not After : Jan 19 02:18:05 2027 GMT
        Subject: CN=DCF9186C07F8F43B1DC26DDFEFBBCFD70CC00BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8f:96:40:69:1f:ef:37:69:d3:7a:e0:d0:ba:
                    5a:36:10:ba:4b:20:0f:98:61:14:4a:4d:a0:cb:31:
                    80:80:10:44:4f:6c:ff:30:7a:44:cb:02:c2:36:1e:
                    cf:c2:80:a5:9b:6b:a3:91:25:70:77:db:ed:0a:ac:
                    d6:60:30:c5:89:27:fe:5e:cd:e0:c6:31:56:0b:5f:
                    12:6e:b4:85:7e:c6:18:96:ea:0e:97:27:52:08:c9:
                    a0:a5:90:2c:fe:60:4e:33:32:5b:c7:d1:bd:7e:de:
                    13:76:cb:93:0c:ee:81:1e:9d:1b:6f:07:91:95:d1:
                    7c:8f:0c:f4:60:40:c7:0e:10:53:c2:dd:91:0a:ee:
                    7f:08:60:94:a6:a2:c2:74:47:9c:12:f8:8e:fc:26:
                    30:bc:e3:a9:89:90:c1:1e:01:f8:d8:d7:b8:1d:c9:
                    38:04:be:10:15:18:61:f3:b6:82:93:50:6f:5e:55:
                    a8:fd:da:b9:3b:10:e0:ff:2a:10:4d:4f:9c:17:e5:
                    fd:f5:ca:d9:b6:0c:d7:2d:4d:af:af:8c:f3:1c:24:
                    50:57:ae:1c:dc:47:8b:1e:61:ff:5b:2c:24:11:5c:
                    48:a3:4a:91:59:75:f9:1f:b5:fd:d6:1c:2b:ab:ed:
                    fb:d9:d2:bd:1c:9a:0f:c3:93:b0:2e:97:2e:bb:0a:
                    cf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F9:18:6C:07:F8:F4:3B:1D:C2:6D:DF:EF:BB:CF:D7:0C:C0:0B:BE
            X509v3 Authority Key Identifier:
                keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/323430363a383838303a3a2f33322d3438203d3e20313531323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8880::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:94:d5:96:a2:01:ce:53:59:d2:56:43:8b:a7:22:a7:f9:cc:
         78:7d:50:18:d0:a9:d2:7e:94:8b:73:2a:0c:ef:92:a7:fc:6e:
         6b:54:ad:8b:1f:a4:db:5b:8e:de:58:cc:5f:a6:74:e5:e5:71:
         f8:04:1b:47:e3:16:e3:95:98:d7:2a:97:9f:10:62:fc:d7:fd:
         db:e3:11:d6:e5:6f:12:ae:8f:05:f8:9d:9a:43:44:b8:f1:c0:
         c3:03:0b:8f:b2:09:91:59:bb:f0:3d:66:05:7f:0c:a3:20:3e:
         07:80:17:46:b0:01:6c:e9:32:e2:e9:51:c8:0a:3b:72:6d:9e:
         7b:4c:78:d4:8d:7b:27:1b:68:2c:d1:67:c9:a7:5a:e3:e8:05:
         c0:ee:fc:6d:23:d3:82:3b:14:c2:2f:2c:61:b4:94:5a:cf:67:
         c0:2b:b8:81:9a:4e:89:be:90:cd:cd:c4:cb:79:29:04:e6:5c:
         27:82:25:8c:37:2e:11:f2:cb:7c:f9:0b:28:89:4d:92:13:c5:
         a7:8f:4c:ee:7a:fb:76:ec:bc:44:e7:93:c0:d8:18:10:2e:3b:
         31:ca:c5:e5:74:28:ca:ab:77:52:6f:2a:b7:a2:02:40:59:47:
         18:80:d7:79:0b:0e:0f:23:54:c3:fe:2d:81:19:2d:8d:19:3a:
         fa:00:39:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:09 2026 by rpki-client