This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa
File:                     3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (raw, json)
Hash identifier:          pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=
Subject key identifier:   98:2E:B0:43:B7:29:AF:4B:E3:75:C8:F4:6F:9B:F1:E8:E8:70:6B:4E
Certificate issuer:       /CN=8FAB27452D80D270582E88C3F77F13734A31720D
Certificate serial:       4523036C3EA9E4D2834DFED3D659491DD3B53416
Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa
Signing time:             Tue 20 Jan 2026 02:10:54 +0000
ROA not before:           Tue 20 Jan 2026 02:05:54 +0000
ROA not after:            Tue 19 Jan 2027 02:10:54 +0000
asID:                     139148
IP address blocks:        115.172.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:23:03:6c:3e:a9:e4:d2:83:4d:fe:d3:d6:59:49:1d:d3:b5:34:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D
        Validity
            Not Before: Jan 20 02:05:54 2026 GMT
            Not After : Jan 19 02:10:54 2027 GMT
        Subject: CN=982EB043B729AF4BE375C8F46F9BF1E8E8706B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b3:cd:bb:78:b3:0e:7b:98:e7:98:93:28:8e:
                    23:ba:1d:15:1e:71:2f:95:96:50:d6:79:92:c6:34:
                    6a:ad:19:d6:27:97:61:6d:f1:db:95:60:c0:2d:3a:
                    f7:c9:01:50:da:29:92:9a:70:21:9d:bb:f7:3f:f3:
                    20:00:f6:fd:64:22:fd:3f:ea:4f:67:40:1e:16:63:
                    f2:bf:38:d3:48:44:af:8f:23:c6:b6:97:8b:50:1c:
                    fd:5b:18:00:ee:c4:f0:ff:1f:21:15:79:49:34:43:
                    e7:f4:65:03:c5:dd:b3:78:f1:27:b8:d9:4f:d7:ac:
                    3b:52:fd:76:9b:09:12:dd:67:c2:d8:20:f0:33:f1:
                    69:31:83:1e:10:08:83:7e:75:e3:32:d8:1a:4a:da:
                    ef:fe:ed:3f:64:8c:d7:a5:1a:31:8a:3b:fa:56:c6:
                    0d:e2:33:e2:e7:6e:66:3f:3a:0c:c4:81:5d:2b:5b:
                    a8:f6:28:3f:13:e4:a8:c9:b4:8b:86:df:bb:70:8c:
                    ca:e5:65:e1:12:07:0c:78:30:06:b7:8e:2d:97:31:
                    70:66:68:85:23:d0:dd:cb:4a:80:48:db:f3:7c:a4:
                    d2:ca:6b:f8:e7:b7:c4:7e:d6:59:a5:e1:3e:2c:86:
                    8d:3c:c3:8c:a1:4d:ae:f1:e5:f4:06:23:c4:dc:1d:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2E:B0:43:B7:29:AF:4B:E3:75:C8:F4:6F:9B:F1:E8:E8:70:6B:4E
            X509v3 Authority Key Identifier:
                keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.172.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:04:94:85:e1:44:f4:03:e0:3d:ab:cc:ed:66:89:67:7f:e4:
         00:6b:59:74:9c:4e:79:54:c9:e6:21:3b:e0:dd:6b:25:e2:53:
         09:78:98:b7:30:04:d8:4f:2e:57:ed:b3:cb:83:b3:75:ab:96:
         58:f8:d1:6b:93:33:90:d8:b6:aa:42:74:46:61:b7:61:4a:61:
         e4:06:b3:d7:4b:34:3c:1e:53:ba:10:41:49:4e:80:18:5b:bb:
         e4:8e:e3:7e:97:bf:56:d9:be:eb:7e:7f:33:19:57:c2:b2:99:
         d2:c3:98:14:e6:31:5a:63:17:74:0c:be:5d:4e:cd:c3:43:05:
         eb:44:b2:f1:6f:1d:e0:ae:0c:fc:1c:7c:b4:62:aa:f3:35:f9:
         e4:4c:15:f7:08:48:2e:ce:08:5a:61:cb:bf:32:a7:22:09:df:
         46:a6:1b:4c:06:15:90:60:de:15:7c:54:96:ff:46:9e:d9:23:
         9e:d1:8d:6c:fe:29:33:0d:f3:6a:f0:b5:5c:62:d4:75:d3:db:
         47:5d:01:4e:60:25:a0:7f:6a:90:7d:88:05:7b:36:63:88:a0:
         82:26:1f:2e:81:db:a6:31:e9:a1:e4:98:34:6d:ab:db:10:86:
         6e:ec:0a:b0:fe:38:3c:65:3f:35:f4:f9:4d:8a:e9:a8:f2:8c:
         ce:fc:6f:f3
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIURSMDbD6p5NKDTf7T1llJHdO1NBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0
QTMxNzIwRDAeFw0yNjAxMjAwMjA1NTRaFw0yNzAxMTkwMjEwNTRaMDMxMTAvBgNV
BAMTKDk4MkVCMDQzQjcyOUFGNEJFMzc1QzhGNDZGOUJGMUU4RTg3MDZCNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCis827eLMOe5jnmJMojiO6HRUe
cS+VllDWeZLGNGqtGdYnl2Ft8duVYMAtOvfJAVDaKZKacCGdu/c/8yAA9v1kIv0/
6k9nQB4WY/K/ONNIRK+PI8a2l4tQHP1bGADuxPD/HyEVeUk0Q+f0ZQPF3bN48Se4
2U/XrDtS/XabCRLdZ8LYIPAz8Wkxgx4QCIN+deMy2BpK2u/+7T9kjNelGjGKO/pW
xg3iM+LnbmY/OgzEgV0rW6j2KD8T5KjJtIuG37twjMrlZeESBwx4MAa3ji2XMXBm
aIUj0N3LSoBI2/N8pNLKa/jnt8R+1lml4T4sho08w4yhTa7x5fQGI8TcHVXlAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUmC6wQ7cpr0vjdcj0b5vx6Ohwa04wHwYDVR0j
BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx
MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyNzExMDcvMC8zMTMxMzUyZTMx
MzczMjJlMzMzMjJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzMzOTMxMzQzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBXOsIDANBgkqhkiG9w0BAQsFAAOCAQEArQSUheFE9APgPavM7WaJ
Z3/kAGtZdJxOeVTJ5iE74N1rJeJTCXiYtzAE2E8uV+2zy4OzdauWWPjRa5MzkNi2
qkJ0RmG3YUph5Aaz10s0PB5TuhBBSU6AGFu75I7jfpe/Vtm+635/MxlXwrKZ0sOY
FOYxWmMXdAy+XU7Nw0MF60Sy8W8d4K4M/Bx8tGKq8zX55EwV9whILs4IWmHLvzKn
IgnfRqYbTAYVkGDeFXxUlv9GntkjntGNbP4pMw3zavC1XGLUddPbR10BTmAloH9q
kH2IBXs2Y4iggiYfLoHbpjHpoeSYNG2r2xCGbuwKsP44PGU/NfT5TYrpqPKMzvxv
8w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:37 2026 by rpki-client