This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e203633353833.roa
File:                     323430323a376438303a383838383a3a2f34382d3438203d3e203633353833.roa (raw, json)
Hash identifier:          r9p8HCDi6qz5B3x/4kGnIz58SKrEuG3TuJ+Z6hK0E50=
Subject key identifier:   61:C3:71:23:DD:8B:75:DB:8A:26:BF:40:4B:A4:78:C7:EA:F6:20:BE
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       1F399195B2EC66DC92DE6EA8BA9339597A4A8036
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e203633353833.roa
Signing time:             Tue 20 Jan 2026 02:16:41 +0000
ROA not before:           Tue 20 Jan 2026 02:11:41 +0000
ROA not after:            Tue 19 Jan 2027 02:16:41 +0000
asID:                     63583
IP address blocks:        2402:7d80:8888::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:39:91:95:b2:ec:66:dc:92:de:6e:a8:ba:93:39:59:7a:4a:80:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:11:41 2026 GMT
            Not After : Jan 19 02:16:41 2027 GMT
        Subject: CN=61C37123DD8B75DB8A26BF404BA478C7EAF620BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:48:2d:43:2e:00:d1:3d:a3:a9:82:c3:65:
                    b3:c2:2d:47:0c:ad:5b:5b:e3:cf:ac:c6:a7:2b:37:
                    7f:76:54:97:de:11:60:77:ac:18:44:4e:2e:a2:97:
                    f8:a1:68:8c:3b:90:a1:3a:06:a1:95:60:ed:7d:ea:
                    c9:59:74:e2:76:c0:36:b2:22:da:5d:45:21:9d:5a:
                    55:31:66:13:1e:a5:29:20:d0:eb:66:f9:0e:58:93:
                    53:be:9c:40:49:e8:24:ff:bc:b5:53:cd:fb:c8:6e:
                    92:b7:61:99:e0:3c:8e:f7:d1:19:d6:7b:91:e2:09:
                    e0:4f:af:33:fd:04:18:dc:81:6c:2b:64:f3:e8:64:
                    87:28:b4:cc:e2:9f:17:5a:58:62:66:47:8b:b9:5a:
                    36:de:1a:37:f8:09:3f:06:8b:63:5a:e6:f5:24:af:
                    0b:35:d1:f5:bd:c7:ba:aa:bc:99:d2:a1:68:96:cb:
                    68:22:6a:76:c8:c0:2d:36:18:77:0a:c8:87:f9:42:
                    7a:c1:b7:80:21:d1:68:2f:43:f0:de:48:64:d6:c8:
                    b6:f0:13:17:c0:26:74:51:ab:01:93:34:95:ae:5b:
                    d7:4e:f1:d3:82:9e:7e:40:9b:bb:e3:e1:29:f6:f8:
                    77:56:c2:a6:66:6d:68:d5:06:76:8d:65:6f:1d:cb:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C3:71:23:DD:8B:75:DB:8A:26:BF:40:4B:A4:78:C7:EA:F6:20:BE
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a383838383a3a2f34382d3438203d3e203633353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7d80:8888::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:b6:03:57:5e:72:bd:cc:a5:37:e5:56:99:97:bb:6d:ce:f5:
         f9:0e:9a:d3:96:c3:74:35:97:72:1b:22:58:eb:99:d2:08:3a:
         af:62:e2:d4:67:ad:87:2b:61:31:fe:24:6d:a6:2e:66:38:95:
         72:af:94:b3:0c:69:d8:d3:ad:d3:9b:6c:51:50:4d:91:e9:d3:
         60:81:03:74:49:8e:31:eb:39:9c:92:b1:b9:b8:86:c3:18:2d:
         81:29:af:17:9d:43:fd:83:2e:29:41:8c:43:bb:0e:0f:a3:92:
         d9:4d:f9:7b:de:bb:35:48:1f:3b:37:06:33:36:1b:29:71:a3:
         87:bb:c5:fe:1c:52:a4:26:ec:4d:0f:61:fd:85:6c:c5:5c:d5:
         3f:2a:99:64:2c:19:4f:6d:1a:95:f3:a5:3e:78:ee:05:4e:9c:
         25:2e:09:78:35:18:3f:ff:6d:3c:4d:15:18:96:0e:ff:44:fd:
         22:1d:bc:7d:28:bf:6f:1a:84:30:3b:cd:3a:6b:86:e7:b5:21:
         59:16:fa:65:7c:12:e5:d7:c7:27:a8:5e:70:ea:43:08:b8:a0:
         33:c4:0e:86:26:cf:af:3a:3f:09:ab:6f:ad:18:15:24:dd:c8:
         4b:94:30:6c:97:89:2a:75:8f:c4:56:61:a1:6f:8b:ea:2b:d3:
         e7:99:88:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:32:52 2026 by rpki-client