This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e302e302f31392d3139203d3e203633353636.roa
File:                     3132322e31312e302e302f31392d3139203d3e203633353636.roa (raw, json)
Hash identifier:          WA5zg0AZiOq5/XX/UbhAjR810o8hOdpxMzpDns/KOgQ=
Subject key identifier:   5F:4A:0C:D8:A2:08:F1:45:4E:3F:D7:87:01:4A:D9:79:56:F5:C1:4B
Certificate issuer:       /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial:       579C9DE85DCE23FBA0A562EB56266E413CE572E9
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e302e302f31392d3139203d3e203633353636.roa
Signing time:             Tue 20 Jan 2026 02:10:55 +0000
ROA not before:           Tue 20 Jan 2026 02:05:55 +0000
ROA not after:            Tue 19 Jan 2027 02:10:55 +0000
asID:                     63566
IP address blocks:        122.11.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9c:9d:e8:5d:ce:23:fb:a0:a5:62:eb:56:26:6e:41:3c:e5:72:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
        Validity
            Not Before: Jan 20 02:05:55 2026 GMT
            Not After : Jan 19 02:10:55 2027 GMT
        Subject: CN=5F4A0CD8A208F1454E3FD787014AD97956F5C14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:8a:6c:52:42:ff:09:39:ad:8f:7d:f6:95:
                    42:8e:29:ce:60:6f:a3:b0:2e:6b:5c:af:f8:13:4a:
                    a0:75:53:00:00:1a:c3:4b:f6:d9:2e:68:eb:6f:96:
                    d7:00:be:c9:70:44:c1:1f:bf:f3:6d:f3:48:57:c9:
                    8c:79:72:c3:a1:1e:c3:b3:6b:cd:2b:e4:57:47:d1:
                    c1:e8:62:f2:2d:35:81:81:59:92:70:14:c8:c8:86:
                    05:36:6d:2f:2c:85:69:9b:1d:ba:00:48:93:7e:00:
                    59:f1:64:6b:c6:5f:a6:8c:59:a3:e7:cb:b4:61:a5:
                    4d:3e:1d:bc:41:b1:94:24:b7:5b:b5:c8:2a:3e:d9:
                    e9:a4:ab:4e:ba:59:fd:97:1f:ec:c4:68:5d:40:cb:
                    8b:65:0f:1c:90:7d:47:b5:84:2e:c1:e5:2e:94:48:
                    26:59:d4:00:b8:2d:c9:b5:46:50:63:9b:22:ed:b0:
                    1c:02:d3:75:6f:8e:dd:1d:31:5f:39:a2:21:4d:c2:
                    a3:de:50:3b:45:8d:67:09:8a:5d:8e:5b:6d:40:66:
                    98:4c:ad:13:21:32:09:5c:88:69:9e:0d:eb:c0:95:
                    28:cd:0e:58:6a:8d:ee:cc:1e:02:ab:0f:7a:b0:46:
                    da:05:9b:4b:86:6b:d9:3b:af:eb:d6:09:bc:c5:c5:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4A:0C:D8:A2:08:F1:45:4E:3F:D7:87:01:4A:D9:79:56:F5:C1:4B
            X509v3 Authority Key Identifier:
                keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e302e302f31392d3139203d3e203633353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.11.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:7b:7d:c5:8b:2c:07:0d:26:a2:85:f5:98:41:5a:42:f7:1b:
         74:ed:3a:0b:60:ae:0d:1a:62:28:be:be:b2:14:60:78:13:67:
         eb:e0:88:9a:11:a7:49:23:42:5f:59:c5:a4:53:07:2d:37:ba:
         d4:6e:84:45:c1:aa:c4:09:d1:99:6c:d2:b7:d0:13:77:8e:d9:
         3a:7e:18:b4:ab:f2:e1:dc:88:dd:70:4a:bf:60:0b:bf:03:a9:
         be:b4:2c:0f:e1:65:62:60:70:82:0a:3b:07:60:f9:01:3f:7a:
         cb:7b:52:dc:34:ff:79:31:c1:87:aa:cf:3e:bf:02:fe:ff:48:
         90:49:a5:a2:92:10:64:28:cd:76:4f:51:6f:27:aa:9e:ce:c4:
         c0:96:47:b1:96:29:36:c6:72:d2:6f:50:70:de:33:eb:42:6b:
         74:6c:23:24:92:11:77:b5:20:eb:ff:b1:93:d9:a5:98:d7:7a:
         b2:a6:1a:e3:f7:dc:b4:29:f8:cd:5b:13:26:ec:0e:42:ed:12:
         60:15:12:69:2f:29:86:56:4a:66:7a:58:01:a6:59:f4:0f:51:
         49:07:c0:80:a0:d5:5f:77:4f:b1:ef:cc:25:f2:d7:29:41:77:
         99:7a:68:a2:f7:c7:89:d1:ec:17:d2:a4:31:f4:25:92:15:7f:
         e2:a8:72:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:08:33 2026 by rpki-client