This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234352e302f32342d3234203d3e203338383134.roa
File:                     3132332e34392e3234352e302f32342d3234203d3e203338383134.roa (raw, json)
Hash identifier:          AV+aDx+v2jUPKJf06Aq7/Zc2xAoUeTp3ckA3OJ2cWeQ=
Subject key identifier:   61:6B:09:52:EA:0F:9D:76:C6:3B:DF:B1:0A:13:E4:E7:EF:80:1C:54
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       11A5EADBAF367C455C58118204761EF7D651D1A1
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234352e302f32342d3234203d3e203338383134.roa
Signing time:             Tue 20 Jan 2026 02:20:15 +0000
ROA not before:           Tue 20 Jan 2026 02:15:15 +0000
ROA not after:            Tue 19 Jan 2027 02:20:15 +0000
asID:                     38814
IP address blocks:        123.49.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a5:ea:db:af:36:7c:45:5c:58:11:82:04:76:1e:f7:d6:51:d1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Jan 20 02:15:15 2026 GMT
            Not After : Jan 19 02:20:15 2027 GMT
        Subject: CN=616B0952EA0F9D76C63BDFB10A13E4E7EF801C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8d:0d:c7:b3:b2:55:c6:ba:4f:d7:ba:6d:1f:
                    60:b3:95:65:a8:03:db:dd:93:30:5b:22:18:cb:d0:
                    0e:70:41:ab:76:74:28:8c:74:f9:79:ba:35:ce:75:
                    10:ac:fd:21:d1:11:d0:90:f0:a7:32:5c:70:36:47:
                    8c:b8:25:76:3e:3b:49:a5:1d:00:d8:05:88:10:6c:
                    93:31:f5:a6:5f:da:19:cb:d0:c0:b4:df:90:f8:97:
                    09:10:91:55:6b:b0:e2:09:41:23:31:8c:4b:af:3f:
                    bb:6e:3a:5b:83:54:a5:e7:7c:49:bf:71:18:1d:40:
                    e0:19:42:9f:06:9b:b0:ef:5f:01:e9:d2:53:08:2e:
                    39:95:25:3d:3c:cc:1f:e8:75:12:c8:06:9a:97:60:
                    48:51:2f:cd:01:8f:a0:86:10:65:5d:10:ca:46:ac:
                    48:f2:4d:1d:09:ec:77:22:8f:0f:87:c5:df:fe:d7:
                    e9:59:87:47:96:90:14:72:4f:51:a3:a1:c6:cf:e9:
                    d3:7c:e6:46:76:28:37:3b:a8:e0:b7:ec:07:ed:32:
                    12:be:cb:a4:08:52:c9:48:57:58:7a:e2:38:ed:35:
                    68:9c:69:28:b3:82:74:3e:bb:eb:bd:55:75:78:b2:
                    5b:90:b6:d8:7c:7b:e0:b3:39:29:04:f3:a0:6a:bd:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6B:09:52:EA:0F:9D:76:C6:3B:DF:B1:0A:13:E4:E7:EF:80:1C:54
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234352e302f32342d3234203d3e203338383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.49.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:5d:a0:44:a4:8e:07:ff:da:7d:36:bf:7f:56:47:01:99:de:
         9b:00:e5:c8:49:4f:3a:90:4d:8e:16:20:a7:4b:2a:2e:67:f2:
         a8:4d:1a:60:27:0b:15:8e:68:ec:ba:4d:ed:2e:49:e8:7c:cb:
         aa:f1:29:53:42:b8:af:e7:f8:87:bd:81:d4:94:0f:ac:4b:3f:
         b6:2c:c2:41:97:12:db:97:19:94:89:a6:94:c5:0f:5e:13:20:
         dc:08:2c:5c:2e:7b:23:15:8c:22:82:c6:77:89:e0:60:4d:5d:
         c6:22:6d:7c:f6:c2:c5:99:3f:b6:8c:a2:fb:a2:c0:95:1d:c9:
         b6:cc:5c:df:2f:fa:c0:8a:89:56:63:40:d0:78:ea:d7:29:c8:
         d3:29:5f:ec:c1:0f:4f:8b:6a:4b:74:6a:fe:ab:e3:14:1c:02:
         a3:d9:5c:2f:3c:a6:bc:83:9b:bc:66:c1:dd:f5:dc:27:12:27:
         f3:24:30:b7:39:30:5f:c6:aa:6e:bf:44:eb:4e:d7:98:2c:fb:
         f6:d0:32:c7:b4:f1:54:81:ce:36:05:de:c0:17:7f:10:a7:33:
         80:88:e1:0a:0e:08:dd:04:5e:81:2a:4f:a8:00:46:a3:08:f6:
         68:4f:03:e4:60:fa:9c:66:37:34:d4:ba:6d:61:73:6b:0c:f6:
         e5:a0:ef:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:46 2026 by rpki-client