This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234332e302f32342d3234203d3e20313339313430.roa
File:                     34352e3132302e3234332e302f32342d3234203d3e20313339313430.roa (raw, json)
Hash identifier:          Fipi8Wx+7Jc32KgUaQgG2u15uwVC2nwvYmT45PhSywE=
Subject key identifier:   6D:2D:54:63:28:62:0A:11:83:A2:68:5B:B1:D9:AA:96:D2:BC:36:D5
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       5D88CDD2FDB238805F6B688C5B9427CD4904BB89
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234332e302f32342d3234203d3e20313339313430.roa
Signing time:             Tue 20 Jan 2026 02:15:37 +0000
ROA not before:           Tue 20 Jan 2026 02:10:37 +0000
ROA not after:            Tue 19 Jan 2027 02:15:37 +0000
asID:                     139140
IP address blocks:        45.120.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:88:cd:d2:fd:b2:38:80:5f:6b:68:8c:5b:94:27:cd:49:04:bb:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:37 2026 GMT
            Not After : Jan 19 02:15:37 2027 GMT
        Subject: CN=6D2D546328620A1183A2685BB1D9AA96D2BC36D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:4e:27:8d:86:62:0c:7c:ba:1a:5d:07:17:
                    e0:12:45:ae:6b:43:0a:2a:b7:a2:0b:6c:8a:a2:1c:
                    e5:76:ec:7e:d9:7c:24:a9:f3:ac:e9:48:e3:01:09:
                    cf:2b:0e:38:05:68:d0:c0:5f:20:c5:3f:42:42:88:
                    fe:d3:e1:e3:bc:53:ac:86:26:b3:12:7c:15:72:5b:
                    fe:9b:1b:89:af:8b:ae:c9:c0:75:4b:67:9c:f4:91:
                    aa:96:5a:3a:cb:b4:7d:ed:77:14:2e:3e:0d:19:30:
                    a5:83:77:89:7a:24:ae:c3:ab:96:db:c3:aa:87:7e:
                    19:07:70:39:f9:18:aa:18:0a:44:3e:7c:3e:e3:5c:
                    72:4d:ee:45:e5:e6:b0:7c:41:7a:f3:ba:dc:1b:27:
                    1a:b6:a4:f9:0e:ea:48:95:0d:e6:a3:e5:81:6c:84:
                    05:e6:5c:89:fa:2d:fd:a5:d9:08:42:7d:e0:4d:5a:
                    1a:b6:a4:d3:ac:ab:a7:74:9e:51:d9:6c:3a:b8:83:
                    ec:5f:62:1a:61:c7:2e:c5:4c:bf:e3:fa:d0:bc:12:
                    dd:13:ef:5c:76:4b:89:63:f3:d8:8c:b5:a6:ce:45:
                    0b:28:c9:19:c0:78:49:9a:74:38:b9:12:b6:f1:d9:
                    bb:0a:04:70:d6:2a:53:df:a2:29:c1:17:7f:8b:79:
                    d7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2D:54:63:28:62:0A:11:83:A2:68:5B:B1:D9:AA:96:D2:BC:36:D5
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234332e302f32342d3234203d3e20313339313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:73:69:11:f0:a7:ce:82:ef:24:66:e6:61:c3:0f:fa:fd:24:
         3d:eb:75:9a:cd:7f:92:77:4e:f2:a7:cf:40:ec:bb:e5:57:df:
         73:d0:40:66:da:20:d0:bf:01:43:ec:20:10:b2:7e:5e:34:e8:
         5c:07:41:13:8d:df:14:15:e1:bd:39:c4:74:c7:5d:ed:c7:fb:
         c4:df:66:61:2e:e4:00:4e:8d:49:31:d1:77:b5:80:f3:83:aa:
         1c:9d:29:aa:09:17:85:be:6d:74:32:37:b6:49:ed:2f:f1:3b:
         83:4b:76:ef:19:fa:1b:eb:e0:2b:a1:13:46:44:67:d1:d5:17:
         74:27:ff:b1:26:b3:83:97:ca:62:56:67:63:80:c5:01:a3:ff:
         e3:93:a7:1e:c6:f7:96:16:78:a3:40:45:c7:ae:c6:68:c8:b9:
         25:7d:12:71:e3:de:91:fb:af:7d:d6:47:0b:02:43:b1:c8:db:
         d4:12:b2:31:4e:59:a2:e5:22:f8:91:aa:86:d6:d2:b4:a0:14:
         ed:1f:b2:b7:ca:16:a7:bf:e9:b4:f6:17:73:bc:d3:36:bd:c2:
         70:4f:cb:ef:08:79:d7:67:99:d7:b7:9a:be:47:e8:39:3c:34:
         50:9a:0d:53:88:f1:52:1c:45:a6:94:c9:d9:8c:f8:5d:5c:93:
         02:f7:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:52 2026 by rpki-client