This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234332e302f32342d3234203d3e203633353832.roa
File:                     34352e3132302e3234332e302f32342d3234203d3e203633353832.roa (raw, json)
Hash identifier:          6kp7cmi2jSBlCGqUbOfkTqNXtVWdPMWw3XHIWkN9GlI=
Subject key identifier:   15:6F:4C:70:33:EC:66:32:79:1F:71:6C:3E:1F:13:A1:7C:2D:2A:61
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       04539EC2B26D8004C20CB032115B039155B52E
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234332e302f32342d3234203d3e203633353832.roa
Signing time:             Tue 20 Jan 2026 02:15:40 +0000
ROA not before:           Tue 20 Jan 2026 02:10:40 +0000
ROA not after:            Tue 19 Jan 2027 02:15:40 +0000
asID:                     63582
IP address blocks:        45.120.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:53:9e:c2:b2:6d:80:04:c2:0c:b0:32:11:5b:03:91:55:b5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:40 2026 GMT
            Not After : Jan 19 02:15:40 2027 GMT
        Subject: CN=156F4C7033EC6632791F716C3E1F13A17C2D2A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:0d:0f:1d:76:a5:41:b4:96:26:0c:a9:00:
                    d3:a4:d3:d4:c9:09:ef:43:97:ef:76:b7:b1:b6:ee:
                    ae:04:7d:eb:4b:8e:2d:32:57:59:19:3b:53:5d:2b:
                    b6:aa:9f:20:87:21:30:af:84:44:47:4c:cf:38:f5:
                    03:0f:20:53:7f:87:7a:98:64:91:81:99:dc:53:02:
                    85:f6:de:ec:1e:0e:9b:10:4f:08:3e:aa:f4:d3:ce:
                    97:c0:41:23:ee:e8:d6:bc:74:df:eb:61:24:f0:f9:
                    d9:39:4d:8a:b1:72:3c:e1:1b:53:53:7c:af:a0:5f:
                    d5:d6:02:60:0c:0f:42:41:ed:91:22:aa:cd:7a:6f:
                    2a:33:d6:04:c7:f0:a7:19:bd:51:1d:3f:5c:7f:57:
                    e7:85:6f:1b:1a:79:b8:1c:48:6d:6f:dd:3c:06:5b:
                    e5:2b:e8:e5:1c:9a:1d:dc:88:f0:75:9f:2b:98:35:
                    fd:53:63:8f:fa:66:66:d3:18:c3:97:e9:97:15:03:
                    e3:f2:6d:83:21:f1:a4:60:fe:bc:ae:a6:cb:b0:98:
                    c3:e2:a1:fc:c5:0a:bf:e2:e5:46:65:02:8f:ba:1f:
                    0b:75:3f:ff:b4:b1:06:76:65:fb:35:23:b1:58:0d:
                    7c:0e:5e:0c:2c:25:fc:36:fe:80:c0:14:d1:bd:cc:
                    77:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6F:4C:70:33:EC:66:32:79:1F:71:6C:3E:1F:13:A1:7C:2D:2A:61
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/34352e3132302e3234332e302f32342d3234203d3e203633353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:ed:45:a1:4e:8a:1b:c3:4d:39:b9:b1:94:7a:6a:13:d2:11:
         af:e7:b8:44:f4:05:27:8b:96:07:60:d4:f5:db:ff:56:23:3a:
         a2:7a:26:a3:15:c6:6b:f5:b7:d1:52:16:e7:04:0a:52:95:bb:
         c4:3d:5a:80:7b:c3:31:52:b0:e4:6c:4f:d1:c0:a4:45:b7:cc:
         55:9f:29:a5:62:35:6c:dc:21:1a:21:94:e8:27:40:e8:0c:16:
         a1:a5:41:0e:c6:a7:97:9b:3e:7b:a9:2d:d1:12:bb:b2:77:0f:
         f6:03:7f:01:16:3e:e3:b9:df:d4:e3:b8:9c:8a:84:4a:86:09:
         bc:5c:b5:71:2d:ae:c3:2b:a6:0c:6a:76:2b:cf:74:ce:f4:34:
         03:8a:d0:4b:e1:65:a5:e3:4c:5a:19:e5:dd:73:4e:7e:90:2d:
         9c:34:f4:09:3e:1c:af:75:b8:45:f6:04:f9:f9:cd:d3:e3:5c:
         d5:13:d3:63:9e:17:60:0e:19:df:f6:99:47:63:1c:1e:14:03:
         8b:08:2d:e7:4c:c4:31:dc:13:43:14:c2:dc:bb:83:3b:ea:1e:
         53:54:1e:45:d9:bc:4a:75:a2:60:79:31:25:db:b5:0d:01:b8:
         1c:fd:77:80:7a:23:00:ec:3c:56:2d:03:87:b5:4b:5b:ae:24:
         0a:d8:fb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:16:24 2026 by rpki-client