This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234312e302f32342d3234203d3e203633353833.roa
File:                     34352e3132302e3234312e302f32342d3234203d3e203633353833.roa (raw, json)
Hash identifier:          8kM1bSOrk5F9gg/JhLOcJYLLRgsp9XDqIjlCyRyFWMo=
Subject key identifier:   06:95:FB:87:EF:16:B4:CD:AE:A2:7F:0E:F1:A0:D6:13:54:8E:91:5E
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       07B437493345229DFF2C88CC40955672C55BCEBF
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234312e302f32342d3234203d3e203633353833.roa
Signing time:             Tue 20 Jan 2026 02:15:38 +0000
ROA not before:           Tue 20 Jan 2026 02:10:38 +0000
ROA not after:            Tue 19 Jan 2027 02:15:38 +0000
asID:                     63583
IP address blocks:        45.120.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b4:37:49:33:45:22:9d:ff:2c:88:cc:40:95:56:72:c5:5b:ce:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:38 2026 GMT
            Not After : Jan 19 02:15:38 2027 GMT
        Subject: CN=0695FB87EF16B4CDAEA27F0EF1A0D613548E915E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c8:f9:d7:15:8f:ca:5c:27:05:0a:5f:7e:65:
                    89:85:7c:2f:d3:8b:63:71:8e:ab:a7:bd:79:41:6d:
                    9b:df:8e:1b:a9:81:60:c2:91:5e:26:e6:c8:06:67:
                    1b:65:9b:2b:dc:b8:c1:81:ae:e8:28:8d:a3:3f:d2:
                    10:67:a0:23:17:e5:94:0a:5d:cf:42:8a:ab:0e:6c:
                    bc:9b:5c:e2:24:71:75:d8:01:a2:07:5e:92:8c:50:
                    31:bb:45:e7:21:20:21:9c:16:55:ed:bc:c9:bd:32:
                    b8:0b:42:17:89:be:a8:e3:f5:1f:d0:0e:56:9e:08:
                    2e:ce:76:c6:59:49:4d:55:e9:ef:b0:e4:6e:22:61:
                    1d:14:3e:93:cd:3b:d5:66:a0:91:af:01:59:b8:c6:
                    a4:7d:af:c2:2b:d9:b5:66:27:d6:e4:de:8a:c9:72:
                    65:58:fa:a4:1e:af:65:d7:f7:bc:db:94:5f:43:a6:
                    5f:72:e3:f5:3a:c9:be:42:1c:56:44:9b:e4:c8:8a:
                    f5:98:1d:67:68:0a:fe:8b:30:27:96:0b:1b:ba:5c:
                    61:57:c9:bd:d8:c8:01:e8:07:55:06:07:74:f4:5e:
                    0b:d0:af:f5:c9:79:01:7f:cc:ac:58:4b:a4:a7:37:
                    28:4f:45:28:15:78:e7:b6:5c:2c:28:9c:5d:48:f3:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:95:FB:87:EF:16:B4:CD:AE:A2:7F:0E:F1:A0:D6:13:54:8E:91:5E
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234312e302f32342d3234203d3e203633353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:91:aa:08:ee:d4:c2:2c:df:23:b3:42:15:e4:ce:8f:d8:42:
         ee:d7:e2:56:2e:d9:0f:fa:a7:17:82:29:8c:a9:5d:03:d7:e8:
         d6:18:e2:db:2b:b0:fa:d6:ff:99:2f:2d:67:34:ce:77:bc:17:
         0f:e6:b7:a3:f4:48:14:74:55:8b:d9:71:a8:c5:4c:e1:a3:3e:
         02:21:82:8f:de:43:18:45:6a:d5:12:82:25:65:1f:42:eb:b6:
         77:a2:16:29:12:8f:1d:fa:fa:97:e2:50:64:7d:1c:07:dd:09:
         ba:16:9f:c9:e3:29:b0:e0:a3:3f:46:c1:fd:ab:85:cb:0c:0b:
         52:6a:9b:a9:62:d7:d4:9c:2b:d0:ef:d7:ce:33:37:22:7f:36:
         b5:90:d0:76:46:29:a9:ed:2c:6d:d0:48:52:31:e9:0a:6e:18:
         32:19:20:3a:68:b0:25:90:e6:6a:72:b5:82:28:e5:05:7c:1c:
         30:b4:33:88:93:36:3e:46:87:d3:fb:04:e2:14:d1:fd:97:7e:
         bf:0e:e3:e9:58:1d:fe:8f:fa:4d:5f:80:ad:28:84:c9:34:f6:
         68:53:22:63:dd:8b:31:cf:02:37:5a:2c:02:52:fa:5e:a0:87:
         8a:78:46:8a:f9:6b:f1:de:7f:c1:64:f7:bc:22:70:ee:2d:0c:
         f5:2b:16:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:40:22 2026 by rpki-client