This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135342e302f32342d3234203d3e20313436383036.roa
File:                     34352e3235302e3135342e302f32342d3234203d3e20313436383036.roa (raw, json)
Hash identifier:          l99sOCrZi70UbDXSO5R5AMtrLov9mja1WYkTDkH+COI=
Subject key identifier:   93:65:88:01:CF:D1:6F:B4:D9:9D:76:B1:8A:10:F1:15:69:50:0E:5F
Certificate issuer:       /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial:       06FA3610D8D8D4C13FA2B241C735C8ED6844A607
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135342e302f32342d3234203d3e20313436383036.roa
Signing time:             Tue 20 Jan 2026 02:20:21 +0000
ROA not before:           Tue 20 Jan 2026 02:15:21 +0000
ROA not after:            Tue 19 Jan 2027 02:20:21 +0000
asID:                     146806
IP address blocks:        45.250.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fa:36:10:d8:d8:d4:c1:3f:a2:b2:41:c7:35:c8:ed:68:44:a6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
        Validity
            Not Before: Jan 20 02:15:21 2026 GMT
            Not After : Jan 19 02:20:21 2027 GMT
        Subject: CN=93658801CFD16FB4D99D76B18A10F11569500E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f4:3f:3e:d7:6f:5a:a1:e9:d7:8c:cb:fd:2a:
                    cc:a0:ce:9a:9c:d1:e2:86:b3:e7:32:91:16:15:c5:
                    b6:e6:18:9a:2a:57:cf:36:89:a6:86:88:7e:f9:e3:
                    db:8f:17:6f:99:96:1b:48:33:4d:dd:5f:76:5a:2d:
                    e8:05:a0:2e:f5:da:cd:50:30:a3:6a:2b:9b:82:ee:
                    bf:cb:31:d2:28:1e:cf:83:9e:28:15:52:e9:cd:bd:
                    0c:9d:ea:45:19:d0:99:5d:43:0a:3f:a7:fd:2a:6a:
                    cb:df:e9:58:80:4a:a9:57:ff:16:90:68:94:9b:0a:
                    d3:b7:03:46:53:8a:c6:29:1e:44:b6:d5:e2:c8:39:
                    ca:de:79:00:71:2a:1f:a3:87:c7:db:9b:71:96:7d:
                    71:23:04:4d:35:5d:e9:95:c7:06:b6:5b:e9:90:76:
                    be:cd:62:7e:db:9d:ac:01:aa:8e:41:10:41:4f:6e:
                    7e:8b:af:7f:a6:4f:d7:46:8f:90:88:33:63:3b:2f:
                    a1:a0:56:fa:4f:d7:45:67:13:ff:2f:50:00:cf:27:
                    bc:1b:fc:b6:12:d2:49:40:f8:07:e3:1d:6c:24:1c:
                    1a:b0:37:e8:3c:b4:61:2f:13:00:a8:a6:f5:c6:f3:
                    e6:87:d3:c9:95:7d:1e:0f:30:f9:dd:cf:e3:3b:f1:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:65:88:01:CF:D1:6F:B4:D9:9D:76:B1:8A:10:F1:15:69:50:0E:5F
            X509v3 Authority Key Identifier:
                keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34352e3235302e3135342e302f32342d3234203d3e20313436383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:c7:a2:35:9c:31:08:94:8a:bb:fb:e9:0b:ce:cb:0c:a8:3c:
         30:6d:e5:d4:24:c7:05:69:21:c5:ab:31:63:81:09:2b:db:e0:
         d5:d4:67:ce:e7:e5:8c:4d:ac:44:d8:34:70:e6:c6:37:2a:a5:
         f9:94:bf:29:e5:14:a1:52:15:be:67:5e:3e:b9:02:d8:d1:ef:
         40:a4:ae:75:96:9a:3e:b0:30:b1:79:07:74:92:24:6d:48:b0:
         01:70:09:00:07:3b:d0:02:3e:0f:1a:d2:05:48:08:d9:a1:31:
         0b:97:0a:82:27:42:b9:ef:12:08:a7:bc:a9:1d:68:62:20:ac:
         00:d6:a3:d0:f3:9e:09:63:7d:8f:71:1e:91:79:e4:bd:5c:49:
         7d:bf:a5:b5:f1:e3:6e:28:d4:ef:f3:10:f2:7c:81:2d:01:e4:
         3c:38:88:a3:61:4a:65:14:f6:cd:da:ea:d0:28:9b:fa:28:8b:
         00:2b:00:00:8f:33:fb:66:9d:c2:13:13:dd:42:b7:29:37:26:
         5a:c1:95:16:f0:ab:c3:92:c6:22:05:28:28:86:bd:e4:cf:40:
         0e:2e:20:42:68:67:99:67:58:12:03:84:9f:d3:1f:13:f4:3a:
         15:f0:92:59:4f:04:fe:96:35:fb:9a:f4:1f:1e:b6:0b:e5:b1:
         bc:12:d7:bd
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUBvo2ENjY1ME/orJBxzXI7WhEpgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE
NjlFNDc4QjAeFw0yNjAxMjAwMjE1MjFaFw0yNzAxMTkwMjIwMjFaMDMxMTAvBgNV
BAMTKDkzNjU4ODAxQ0ZEMTZGQjREOTlENzZCMThBMTBGMTE1Njk1MDBFNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj9D8+129aoenXjMv9Ksygzpqc
0eKGs+cykRYVxbbmGJoqV882iaaGiH7549uPF2+ZlhtIM03dX3ZaLegFoC712s1Q
MKNqK5uC7r/LMdIoHs+DnigVUunNvQyd6kUZ0JldQwo/p/0qasvf6ViASqlX/xaQ
aJSbCtO3A0ZTisYpHkS21eLIOcreeQBxKh+jh8fbm3GWfXEjBE01XemVxwa2W+mQ
dr7NYn7bnawBqo5BEEFPbn6Lr3+mT9dGj5CIM2M7L6GgVvpP10VnE/8vUADPJ7wb
/LYS0klA+AfjHWwkHBqwN+g8tGEvEwCopvXG8+aH08mVfR4PMPndz+M78W63AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUk2WIAc/Rb7TZnXaxihDxFWlQDl8wHwYDVR0j
BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0
Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0ODU4MjUvMC8zNDM1MmUzMjM1
MzAyZTMxMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzAzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAC36mjANBgkqhkiG9w0BAQsFAAOCAQEANceiNZwxCJSKu/vpC87L
DKg8MG3l1CTHBWkhxasxY4EJK9vg1dRnzufljE2sRNg0cObGNyql+ZS/KeUUoVIV
vmdePrkC2NHvQKSudZaaPrAwsXkHdJIkbUiwAXAJAAc70AI+DxrSBUgI2aExC5cK
gidCue8SCKe8qR1oYiCsANaj0POeCWN9j3EekXnkvVxJfb+ltfHjbijU7/MQ8nyB
LQHkPDiIo2FKZRT2zdrq0Cib+iiLACsAAI8z+2adwhMT3UK3KTcmWsGVFvCrw5LG
IgUoKIa95M9ADi4gQmhnmWdYEgOEn9MfE/Q6FfCSWU8E/pY1+5r0Hx62C+WxvBLX
vQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:36 2026 by rpki-client