This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e203633353832.roa
File:                     323430323a376438303a3a2f34382d3438203d3e203633353832.roa (raw, json)
Hash identifier:          pWwhdCREFW4rCO/0NV0KXkH0YFcsDMYJYDWjKGW7qkw=
Subject key identifier:   00:F4:BA:BE:DB:54:16:5C:29:76:E7:BB:26:9D:3E:5E:28:FA:63:EE
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       1386797BE3B249663FF18661AD176AB13BBFAF50
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e203633353832.roa
Signing time:             Tue 20 Jan 2026 02:16:42 +0000
ROA not before:           Tue 20 Jan 2026 02:11:42 +0000
ROA not after:            Tue 19 Jan 2027 02:16:42 +0000
asID:                     63582
IP address blocks:        2402:7d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:86:79:7b:e3:b2:49:66:3f:f1:86:61:ad:17:6a:b1:3b:bf:af:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:11:42 2026 GMT
            Not After : Jan 19 02:16:42 2027 GMT
        Subject: CN=00F4BABEDB54165C2976E7BB269D3E5E28FA63EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:79:c6:24:89:a7:76:a8:eb:de:2f:c7:d5:46:
                    0b:2b:6b:df:06:b8:4f:b5:77:63:1b:f8:89:63:aa:
                    27:85:42:47:2f:84:0b:a4:7b:d7:f5:72:6c:12:2f:
                    fd:c6:4e:7b:e6:1f:2a:9f:99:d5:f9:93:cf:e8:47:
                    f0:91:e4:2b:52:f2:86:03:c2:47:6f:08:5d:af:b2:
                    69:3a:7a:d7:13:27:e2:c1:fc:68:24:58:12:01:0a:
                    3e:b1:a7:71:2a:db:b2:cb:81:aa:c7:c1:88:a2:3f:
                    8c:62:7c:df:ad:11:88:2c:a3:99:70:9f:94:09:9d:
                    6f:09:04:85:07:8c:bd:45:7b:58:ee:1b:f5:11:14:
                    1f:c0:14:20:28:43:7c:34:2e:9b:6d:b4:10:27:b2:
                    94:ae:a8:0e:5a:fb:95:a6:14:cf:ab:41:be:b2:95:
                    87:5d:99:b9:c1:9f:c3:aa:4e:a3:ed:b5:a7:14:f0:
                    9d:3c:dd:9e:d1:f8:04:6c:cd:55:dc:f4:20:5e:1f:
                    93:0b:98:f2:59:66:99:20:b7:f2:3e:fe:02:3a:a8:
                    63:7f:0f:5c:98:a2:c6:88:76:ff:aa:e6:d6:41:8f:
                    90:07:2b:54:31:0b:8e:5c:7f:a4:0e:8e:83:7e:15:
                    2f:90:2c:1b:c7:c2:5c:fb:bd:4d:b8:37:48:91:75:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F4:BA:BE:DB:54:16:5C:29:76:E7:BB:26:9D:3E:5E:28:FA:63:EE
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e203633353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:06:5b:ae:f0:b1:24:2e:b0:f7:33:2f:89:97:54:96:8f:eb:
         b9:05:e9:be:ea:cd:03:22:85:4f:f3:e1:de:f9:0c:fd:ca:b0:
         fc:64:a4:3e:c8:be:e8:f3:ab:67:22:e1:bb:db:ab:4b:f2:40:
         b9:49:cd:c0:07:f1:53:c5:36:17:72:e0:3d:a9:0a:c5:80:50:
         a3:1a:3f:eb:a6:d6:6b:bd:9f:34:9a:1d:98:ac:4b:ab:0a:09:
         af:af:50:73:fb:29:53:a3:eb:c3:b5:f3:5d:05:e6:63:13:cd:
         52:12:10:ef:56:c3:b1:4b:cb:eb:db:2a:ff:b5:5c:78:4a:3b:
         bc:2a:e8:f9:c5:f7:27:fb:9b:39:bd:62:2c:3d:8d:fd:94:33:
         9e:a8:34:cb:75:5b:9a:18:37:ed:86:49:43:56:dd:7b:60:4c:
         42:81:2d:c4:89:fc:36:b5:de:55:0f:39:34:15:cc:dd:db:a0:
         ce:9a:87:7a:44:21:38:49:6f:7c:31:03:9f:17:3f:10:73:78:
         78:23:d3:5a:4c:f9:6e:79:a3:29:32:25:7f:2a:8a:a2:ca:52:
         e5:30:b6:ef:96:71:34:80:67:36:66:5c:41:9e:a4:88:f7:62:
         4c:e4:08:d8:d1:0d:97:43:fe:8e:bb:4c:60:05:4a:45:c2:56:
         d9:76:e2:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:54 2026 by rpki-client