This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/0/323430343a373934303a3a2f33322d3634203d3e203538353933.roa
File:                     323430343a373934303a3a2f33322d3634203d3e203538353933.roa (raw, json)
Hash identifier:          2n26vNuC4VAHaxEXnHKNZy4/eFkSrwrFvVvb66NBmLk=
Subject key identifier:   D7:91:0C:BA:9B:4B:05:3A:C2:B5:67:8F:3F:8A:2A:05:BF:BB:02:8A
Certificate issuer:       /CN=7505D5D0FC8DB66FC48DA4A64839077551466B62
Certificate serial:       14319295180383222B24C493495503B4076CCB6E
Authority key identifier: 75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/323430343a373934303a3a2f33322d3634203d3e203538353933.roa
Signing time:             Tue 20 Jan 2026 02:08:21 +0000
ROA not before:           Tue 20 Jan 2026 02:03:21 +0000
ROA not after:            Tue 19 Jan 2027 02:08:21 +0000
asID:                     58593
IP address blocks:        2404:7940::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:31:92:95:18:03:83:22:2b:24:c4:93:49:55:03:b4:07:6c:cb:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7505D5D0FC8DB66FC48DA4A64839077551466B62
        Validity
            Not Before: Jan 20 02:03:21 2026 GMT
            Not After : Jan 19 02:08:21 2027 GMT
        Subject: CN=D7910CBA9B4B053AC2B5678F3F8A2A05BFBB028A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:5d:ec:e6:69:da:fb:5e:85:ed:28:13:6e:
                    5a:57:f7:f2:34:a9:97:d3:d8:e2:95:75:9a:17:fd:
                    0c:ab:f6:60:3e:42:76:ef:04:f5:21:2f:7e:20:a0:
                    51:e0:63:6e:cc:57:45:c5:13:5b:49:a3:89:6b:37:
                    f7:71:b1:ab:ef:37:a5:57:e7:dc:70:9d:85:c0:60:
                    9f:9e:2c:ed:27:48:d5:b8:f8:8d:13:24:39:c5:5a:
                    a4:80:15:dd:2d:f7:fd:22:fd:9b:ec:75:5a:80:e1:
                    99:cb:27:8c:be:e4:47:02:15:a0:91:55:00:10:b0:
                    df:5c:72:b1:bc:4b:db:1a:33:b6:d0:f9:42:b1:06:
                    82:f3:28:10:6c:a2:2b:e9:0f:77:d9:63:bd:4f:d2:
                    eb:c0:ea:78:2e:59:40:40:46:71:93:dd:9c:99:45:
                    d0:ab:7e:06:3c:18:42:5e:04:42:94:c1:b8:26:86:
                    08:9f:fb:57:8c:15:e6:d1:db:19:83:a2:38:88:94:
                    1b:1c:ed:96:20:36:88:24:6b:8b:44:8d:4e:e3:15:
                    c1:31:bb:28:f5:b7:ee:b9:5c:c2:94:a9:1f:45:d5:
                    e8:d1:5f:05:6a:b5:b4:9e:84:91:01:71:c6:74:71:
                    5e:a7:4e:a0:bf:26:bc:5b:6a:0f:f7:28:75:34:dc:
                    27:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:91:0C:BA:9B:4B:05:3A:C2:B5:67:8F:3F:8A:2A:05:BF:BB:02:8A
            X509v3 Authority Key Identifier:
                keyid:75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/323430343a373934303a3a2f33322d3634203d3e203538353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7940::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:09:81:ae:55:ab:74:b7:b2:ab:a7:44:76:be:37:8a:a3:af:
         1e:48:d2:3a:a0:9e:48:57:72:73:5e:a5:3e:02:a4:50:8e:af:
         47:60:39:bc:e0:bc:7f:a9:f8:aa:a9:b4:79:67:4a:dc:ad:9f:
         89:75:c6:17:20:3e:f9:30:c2:85:e6:22:11:bf:69:87:63:60:
         09:4d:48:b7:21:b8:97:96:15:5a:fa:0c:6c:21:53:a3:d3:09:
         9b:3b:de:ee:f8:0d:7e:6c:67:bf:82:72:6a:f2:f3:e6:33:f2:
         50:06:5e:4e:f9:ab:a9:5c:28:55:ec:ee:f0:c5:a8:d2:9d:75:
         c4:77:9d:56:8c:f5:2b:46:f3:b9:13:ba:a9:c4:74:f7:4c:16:
         16:de:c4:52:b0:0d:7b:8b:80:57:9a:85:eb:38:08:8d:06:94:
         2b:de:d7:91:31:2a:86:f3:e3:22:2f:fe:22:f7:ec:31:83:72:
         e0:04:af:05:6c:d0:3f:14:48:12:0d:0c:20:69:82:f0:cc:43:
         bc:9d:17:b7:13:82:fa:e3:d6:f9:fa:1f:6c:3d:56:b5:d6:d5:
         4d:da:61:a9:1c:c6:4f:63:a5:46:e8:69:59:47:dd:46:a7:4c:
         a1:0f:57:b4:6c:d5:c8:04:6e:bb:a6:61:6d:3c:88:72:e6:4f:
         b3:d4:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:22:33 2026 by rpki-client