This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234332e302f32342d3234203d3e20313339313337.roa
File:                     34352e3132302e3234332e302f32342d3234203d3e20313339313337.roa (raw, json)
Hash identifier:          1be9Euh5e7G5ROOR4V5vjgoKQPE3Z/bfxVV7ergfWTQ=
Subject key identifier:   6B:1C:3F:A1:89:B3:7F:9D:C1:05:6B:1C:86:60:44:3E:71:52:1F:2A
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       4AF5CDBF599C83DC81FD7ACD49379C0194CF61E3
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234332e302f32342d3234203d3e20313339313337.roa
Signing time:             Tue 20 Jan 2026 02:16:41 +0000
ROA not before:           Tue 20 Jan 2026 02:11:41 +0000
ROA not after:            Tue 19 Jan 2027 02:16:41 +0000
asID:                     139137
IP address blocks:        45.120.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f5:cd:bf:59:9c:83:dc:81:fd:7a:cd:49:37:9c:01:94:cf:61:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:11:41 2026 GMT
            Not After : Jan 19 02:16:41 2027 GMT
        Subject: CN=6B1C3FA189B37F9DC1056B1C8660443E71521F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:bc:7f:4d:a1:d4:95:f9:6f:af:49:17:84:
                    e4:70:6b:d6:fd:03:d7:d7:9b:7f:06:7e:c3:ba:b1:
                    c6:c0:6a:06:11:d1:54:d0:f1:17:13:29:64:87:20:
                    4b:d4:2f:0d:79:60:6a:31:4d:c9:81:b0:78:90:dd:
                    8c:0b:3b:b4:d0:eb:03:17:e0:bf:28:51:9c:9d:6e:
                    73:ae:99:f2:f7:09:e1:93:28:42:86:e8:83:30:23:
                    9a:98:d3:60:49:a1:e4:cd:85:8c:d6:c0:57:4c:19:
                    bf:93:e3:01:be:86:8c:0e:67:5f:72:e0:d3:b9:a7:
                    8a:32:88:e9:b2:12:17:7e:67:e3:35:eb:f0:9b:d0:
                    cd:cc:66:6e:83:fb:ed:de:d3:30:54:69:35:38:03:
                    c1:7f:19:13:41:21:c3:a5:2f:53:c3:76:ea:21:07:
                    e0:3f:81:fb:a3:fa:d8:f9:ce:d4:d4:a2:68:7d:43:
                    98:1a:11:ad:29:ed:ab:d7:6c:ed:90:53:e0:68:2b:
                    ba:d1:16:f5:50:9a:d6:8e:1f:aa:4b:81:3d:ed:4c:
                    b2:c2:c2:29:0a:a8:38:c3:36:96:b9:7a:19:b5:37:
                    5f:49:0e:5d:2f:ff:ad:c0:6a:c2:a0:bc:2e:a3:ff:
                    61:f7:4f:38:fd:16:88:e6:14:5f:ad:0b:b1:2e:43:
                    57:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1C:3F:A1:89:B3:7F:9D:C1:05:6B:1C:86:60:44:3E:71:52:1F:2A
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234332e302f32342d3234203d3e20313339313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:08:a1:7d:c8:5d:c7:b7:ed:df:c9:61:96:0d:e3:1e:7a:ad:
         ef:a9:d2:b6:5d:c9:55:78:d7:5e:f7:d0:ef:c1:4c:d4:ae:77:
         7d:84:1f:8d:7f:0a:f4:cc:a7:8a:d2:ee:92:53:17:6f:11:cd:
         a1:0d:e4:f3:3d:9d:d4:f3:b1:4a:f5:db:ad:6b:31:6a:e1:b2:
         6c:bb:1f:44:93:bf:d8:08:27:42:ad:88:a9:28:8e:c0:89:79:
         2e:70:da:76:4d:cd:04:eb:e6:8b:c2:5a:94:ef:5d:ec:2d:7e:
         b2:e6:c0:5b:12:d1:a8:50:d3:a2:af:2f:2b:f0:2e:aa:d6:9c:
         d4:ca:c0:f7:6a:c2:a7:ff:ae:21:13:98:54:8d:7d:af:1d:99:
         d4:13:4a:30:a2:cc:bb:2c:ce:b7:5c:5f:a2:0c:bc:1b:a4:5b:
         f4:46:9c:e9:ef:84:95:9c:36:d2:95:c2:2a:7f:5a:36:a2:a0:
         dd:5f:3c:65:95:41:46:6d:d7:dd:58:a9:c6:b6:7a:6d:0b:1d:
         d9:80:7c:c7:95:fe:23:0d:ea:72:07:ec:fb:28:4e:da:b4:98:
         02:81:29:a0:f9:3e:65:4e:06:64:42:2e:52:cf:d5:f8:50:3a:
         a0:6c:4d:81:f9:dc:f5:d7:10:ba:93:24:9d:f1:39:59:46:13:
         ad:a4:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:16:07 2026 by rpki-client