This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a3a2f33322d3332203d3e20313339313339.roa
File:                     323430363a333334303a3a2f33322d3332203d3e20313339313339.roa (raw, json)
Hash identifier:          Y8zftJ45Dvevo2D7PvvADIABaUrY/sJOP040cgE1KVE=
Subject key identifier:   2D:F2:14:13:AB:2E:04:1F:9F:28:FB:4E:19:A7:12:B2:E8:69:81:2A
Certificate issuer:       /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260
Certificate serial:       5D52D18683B5804CFC379DB1C3C59A55F943C28A
Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a3a2f33322d3332203d3e20313339313339.roa
Signing time:             Tue 20 Jan 2026 02:18:06 +0000
ROA not before:           Tue 20 Jan 2026 02:13:06 +0000
ROA not after:            Tue 19 Jan 2027 02:18:06 +0000
asID:                     139139
IP address blocks:        2406:3340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:52:d1:86:83:b5:80:4c:fc:37:9d:b1:c3:c5:9a:55:f9:43:c2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260
        Validity
            Not Before: Jan 20 02:13:06 2026 GMT
            Not After : Jan 19 02:18:06 2027 GMT
        Subject: CN=2DF21413AB2E041F9F28FB4E19A712B2E869812A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:e5:51:66:86:93:c7:93:c7:74:7d:04:f0:
                    81:bd:b5:40:17:91:0a:42:e2:11:3f:41:e2:29:40:
                    12:dc:c6:8f:da:9e:29:35:11:90:09:f4:49:a8:52:
                    9c:8e:db:e8:59:55:f5:28:29:16:a3:57:0b:2c:b0:
                    6d:37:bc:b6:25:da:f5:83:0b:57:d6:2d:9d:1c:d6:
                    69:c4:2a:b2:c7:2c:02:5e:f5:37:52:13:bf:19:4e:
                    6d:5a:83:a1:ca:64:04:25:8d:89:79:29:c8:d8:c6:
                    3a:c8:51:37:88:62:7b:aa:5a:a1:01:35:f0:47:f8:
                    47:de:01:a0:8b:ea:4c:18:23:e6:42:a0:30:4e:7a:
                    c9:90:bf:6f:7b:7c:77:02:5c:52:c1:6a:d8:76:b8:
                    5b:32:29:be:f2:cf:c3:9b:59:cd:fd:f0:60:6e:c9:
                    1c:54:23:8b:5c:46:49:0e:84:7d:5d:80:5f:93:23:
                    92:89:12:09:2c:24:98:62:65:f5:f6:07:c3:f8:e2:
                    20:09:aa:97:16:30:e0:b8:44:f0:b0:ac:35:1f:2e:
                    4e:29:b0:16:77:80:93:c9:38:ea:07:6c:e3:46:b0:
                    31:d1:2a:84:71:dd:4b:8a:b3:1b:2e:c8:40:d9:c2:
                    79:e0:7b:39:4f:0d:fa:ea:e9:8a:7c:77:f6:0e:02:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F2:14:13:AB:2E:04:1F:9F:28:FB:4E:19:A7:12:B2:E8:69:81:2A
            X509v3 Authority Key Identifier:
                keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/323430363a333334303a3a2f33322d3332203d3e20313339313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3340::/32

    Signature Algorithm: sha256WithRSAEncryption
         d4:56:96:c0:98:66:82:53:1f:e2:69:00:7f:a2:c3:e1:ca:ee:
         11:74:ed:f8:0e:fc:46:ab:c8:70:8c:a3:05:de:56:af:61:ca:
         48:76:d2:c9:78:4f:8c:44:83:73:13:27:f8:ef:87:3b:31:3c:
         41:65:2b:5d:25:15:ed:94:91:37:8f:b1:31:a6:78:32:70:70:
         e4:b3:69:5c:ea:3a:6d:c4:2f:53:92:85:f2:c9:01:cc:50:87:
         b9:7c:9b:d6:4f:3c:e8:5f:cc:11:05:bd:97:0e:be:7b:0d:cb:
         21:09:a8:07:68:4e:98:1a:60:fc:55:a7:8b:a3:b3:ce:9a:f6:
         08:9f:13:64:84:c2:29:3a:45:00:dd:87:f9:fc:5b:36:ed:46:
         b9:61:f4:67:13:7d:d6:96:f7:bd:6c:6d:41:b6:d2:fd:5b:8d:
         6e:73:24:73:16:1c:2c:7d:06:87:9f:f6:b3:ab:dc:8d:61:6a:
         68:ab:39:64:a6:0c:50:0d:7d:f4:99:76:18:0f:21:4b:7a:84:
         9a:c6:2e:d9:39:43:29:7e:bd:a9:e1:54:1d:ab:4e:52:26:d5:
         5c:9e:90:bc:8a:08:30:27:c2:63:19:42:ba:71:af:c1:53:34:
         98:a9:45:f6:51:fd:4d:86:ee:e5:23:9e:bf:c5:43:c9:d6:6f:
         92:42:8d:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:50 2026 by rpki-client