This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e203633353833.roa
File:                     323430323a376438303a3a2f34382d3438203d3e203633353833.roa (raw, json)
Hash identifier:          QoCMvsZW88EQlWeaqlEB4akC78wX3f+KlzhQwp1ckf8=
Subject key identifier:   3F:CF:04:17:24:48:5F:75:73:5D:D0:90:7F:EB:0D:7F:02:80:DA:7D
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       6AD9684E9DB9859BC73AF5CF1D42E1EA232C6042
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e203633353833.roa
Signing time:             Tue 20 Jan 2026 02:15:39 +0000
ROA not before:           Tue 20 Jan 2026 02:10:39 +0000
ROA not after:            Tue 19 Jan 2027 02:15:39 +0000
asID:                     63583
IP address blocks:        2402:7d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d9:68:4e:9d:b9:85:9b:c7:3a:f5:cf:1d:42:e1:ea:23:2c:60:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:39 2026 GMT
            Not After : Jan 19 02:15:39 2027 GMT
        Subject: CN=3FCF041724485F75735DD0907FEB0D7F0280DA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:0a:e3:ce:be:7b:d6:4c:78:25:e0:e7:df:
                    ca:81:4f:65:eb:ee:15:4d:1e:7f:6b:1d:cd:3f:d2:
                    ed:58:c8:5a:05:00:ba:33:7a:3c:1a:9b:80:e1:ab:
                    c9:1b:f5:a3:27:74:7b:fb:9e:06:ac:74:72:22:90:
                    bd:9b:63:53:0e:68:a2:22:55:eb:de:b3:55:6c:73:
                    b5:0e:b9:7d:d1:67:97:ee:d8:21:78:41:70:5a:0e:
                    15:f4:30:3c:89:d7:a9:13:2b:6a:c0:31:1f:eb:ea:
                    63:41:ec:c8:5e:00:65:36:c6:ce:9a:5c:74:52:63:
                    c7:66:56:4c:a8:97:01:67:07:8d:c7:3d:e0:9e:1e:
                    7a:8d:a4:1f:50:ef:88:7c:06:7a:b6:77:05:c8:96:
                    3a:70:b1:81:2d:01:11:00:67:a0:e4:24:2a:cb:d4:
                    72:34:74:aa:9d:78:20:b3:68:40:ac:98:fa:ca:f9:
                    1b:e3:7e:12:26:d0:c4:33:85:ce:36:3b:9e:6b:e2:
                    a8:24:e9:58:14:42:ec:49:c6:99:de:1f:17:de:81:
                    25:68:6e:c8:f2:03:63:d6:0c:f1:de:ed:b3:4f:ad:
                    94:59:ba:e7:b0:f4:65:19:09:65:5c:b3:81:25:05:
                    48:78:4f:88:61:e8:99:f3:e8:c8:f8:91:35:44:2c:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CF:04:17:24:48:5F:75:73:5D:D0:90:7F:EB:0D:7F:02:80:DA:7D
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/323430323a376438303a3a2f34382d3438203d3e203633353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         d8:67:1e:43:18:50:99:ca:80:5a:1d:25:6e:e0:2f:5f:17:fb:
         c5:ee:27:45:31:57:5f:59:b6:5f:83:77:ee:7f:24:00:c2:4f:
         87:ea:8d:ca:32:97:10:43:f4:0a:b6:10:53:b2:b0:aa:be:d7:
         1b:74:69:31:ba:9b:a2:c7:f8:7c:5b:f5:63:2d:f5:8b:62:4e:
         54:f6:37:ad:6b:9c:9f:50:2b:36:a1:3d:ac:93:8c:13:d4:ac:
         ca:77:13:48:60:eb:7e:b5:ae:0a:67:62:13:84:10:b5:75:a3:
         5c:b4:f9:d1:1e:16:a1:fa:d8:52:1b:fa:47:db:ef:57:0a:11:
         cd:f0:92:61:f4:6f:4a:5b:0e:f3:5a:94:38:13:8b:26:e6:2c:
         26:47:ff:44:6f:33:66:84:00:41:51:94:d9:74:60:56:d7:f8:
         e2:81:a7:1d:4f:9d:93:4e:02:14:58:29:90:18:92:ff:da:5a:
         76:a2:74:2d:8d:57:89:67:74:4a:27:be:b5:d1:28:00:4e:53:
         a5:27:55:9e:32:4b:4c:61:bc:63:ef:62:c1:80:55:a4:7e:3d:
         f3:8a:fe:c3:8d:61:b8:0c:bc:b9:9f:a7:4c:58:9e:90:dd:ca:
         9d:fc:79:12:d1:6d:5a:e2:2b:e1:9e:cb:ee:03:d7:59:cc:bd:
         3a:ee:00:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:17:18 2026 by rpki-client