This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e20313339313337.roa
File:                     323430323a376438303a3a2f34382d3438203d3e20313339313337.roa (raw, json)
Hash identifier:          Pn/OFis0y50GpL+XNzp0wlqQHD7zgC20TgSIQkTbqkI=
Subject key identifier:   E6:24:C4:ED:65:42:9D:77:02:D8:C2:53:12:0F:B7:1A:E8:83:AC:1A
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       3E93038ED2217694B6170A861268AE5DEE6B289F
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e20313339313337.roa
Signing time:             Tue 20 Jan 2026 02:15:39 +0000
ROA not before:           Tue 20 Jan 2026 02:10:39 +0000
ROA not after:            Tue 19 Jan 2027 02:15:39 +0000
asID:                     139137
IP address blocks:        2402:7d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:93:03:8e:d2:21:76:94:b6:17:0a:86:12:68:ae:5d:ee:6b:28:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:39 2026 GMT
            Not After : Jan 19 02:15:39 2027 GMT
        Subject: CN=E624C4ED65429D7702D8C253120FB71AE883AC1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b2:84:52:8a:30:3e:86:bb:a4:3d:e5:c7:a1:
                    3d:83:86:c3:09:cb:87:7f:d4:5f:ff:1f:59:22:94:
                    aa:ce:3c:38:77:5c:ae:b6:e2:8f:7f:f9:e6:20:da:
                    3d:a7:21:70:e7:b7:3d:43:2a:f1:d2:2f:ed:d1:33:
                    8c:c6:38:8c:be:90:f1:2e:08:4c:df:98:cc:cf:50:
                    45:8c:93:37:aa:1c:aa:3b:09:a2:63:f6:15:07:a9:
                    ba:39:fb:f4:fd:00:84:85:a5:e6:83:3a:69:6a:f3:
                    4b:c5:8d:39:d3:3e:f9:41:3a:9b:ef:c1:49:2d:28:
                    10:8d:ed:e7:5c:5e:9f:58:6f:55:14:60:57:0f:9a:
                    f9:e0:bd:ed:a7:3a:55:74:98:2c:01:bf:54:55:b8:
                    5f:2e:e6:d8:e0:36:36:b8:8a:1a:f5:8b:da:0f:58:
                    34:46:d8:5c:7b:62:59:80:0c:08:90:3d:c6:05:be:
                    a0:99:18:76:e0:b2:99:fb:ca:62:97:ac:28:f4:75:
                    69:ff:a8:cb:ec:7d:b8:45:de:46:6b:aa:bd:03:dc:
                    67:ec:1e:6d:1d:f6:5e:f3:8b:f1:72:ec:cf:c8:4b:
                    b4:68:b1:5a:3c:2f:94:bd:50:f0:c5:00:e2:ed:25:
                    60:9f:33:f7:49:5f:93:b3:00:e3:5f:23:f1:7b:cd:
                    14:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:24:C4:ED:65:42:9D:77:02:D8:C2:53:12:0F:B7:1A:E8:83:AC:1A
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e20313339313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         cd:ea:2b:bd:46:b0:69:af:34:e4:83:9b:1a:4a:b5:ba:58:27:
         8f:23:24:70:73:5d:bd:8e:42:81:4b:0b:6b:19:07:8a:39:75:
         99:af:8b:c7:4f:c0:26:60:22:26:6f:9c:3c:9c:76:b0:fc:a2:
         41:90:35:e2:4f:a0:92:bd:d5:cd:05:7f:a2:49:1f:6d:a3:94:
         2e:1d:2f:b9:6e:0c:c5:0f:dd:90:84:fd:30:56:02:10:9a:ef:
         1d:90:e4:d6:e7:77:fc:51:49:22:bc:9a:03:cd:32:cc:8b:fc:
         3a:bc:f0:c9:d3:24:8a:9c:1a:76:78:37:af:a8:71:95:2f:90:
         27:c7:15:17:60:81:c7:3e:39:7b:d8:93:7e:db:d4:bb:b6:92:
         ee:fe:c3:12:88:bb:c2:74:6a:84:ba:42:15:56:48:76:c1:27:
         49:e2:27:8d:82:9e:30:26:89:eb:b1:61:8e:dc:f7:40:9e:ee:
         8c:2b:d9:70:37:d4:86:0d:d1:76:af:d7:10:b3:4d:b9:66:9e:
         a9:47:2e:4e:f0:f4:97:29:45:5f:99:67:68:ce:96:22:1b:a4:
         68:59:85:cd:57:85:09:a2:65:f0:fa:df:54:be:58:3f:04:69:
         5c:34:58:a1:67:05:a0:3c:f8:aa:36:61:e0:ad:49:34:ea:34:
         aa:f5:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:01:54 2026 by rpki-client