This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/323430313a373065303a3a2f33322d313238203d3e203633353338.roa
File:                     323430313a373065303a3a2f33322d313238203d3e203633353338.roa (raw, json)
Hash identifier:          xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=
Subject key identifier:   EB:02:32:0B:7E:F8:BB:71:37:36:C2:AC:04:71:03:AF:0A:02:BF:64
Certificate issuer:       /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
Certificate serial:       29E22DC5AEB900E7A0B8D1E468D5E6CA1414E4E8
Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/323430313a373065303a3a2f33322d313238203d3e203633353338.roa
Signing time:             Tue 20 Jan 2026 02:16:42 +0000
ROA not before:           Tue 20 Jan 2026 02:11:42 +0000
ROA not after:            Tue 19 Jan 2027 02:16:42 +0000
asID:                     63538
IP address blocks:        2401:70e0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e2:2d:c5:ae:b9:00:e7:a0:b8:d1:e4:68:d5:e6:ca:14:14:e4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
        Validity
            Not Before: Jan 20 02:11:42 2026 GMT
            Not After : Jan 19 02:16:42 2027 GMT
        Subject: CN=EB02320B7EF8BB713736C2AC047103AF0A02BF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:cf:17:89:9a:3e:dd:76:87:61:f2:4d:a6:
                    2a:95:26:dc:48:d9:7c:32:81:bd:bc:bc:a1:55:94:
                    28:69:6f:2e:a3:58:98:23:73:eb:98:e0:5f:96:19:
                    20:20:27:44:f9:27:19:3b:6c:30:03:5d:ae:15:72:
                    ac:96:74:ba:8d:65:49:cc:0e:78:e2:25:40:93:83:
                    32:65:28:30:19:4e:16:29:4e:e3:b5:3f:0d:57:03:
                    3a:1d:64:16:15:0e:5b:8e:b3:e4:10:2e:41:d9:66:
                    e2:30:fb:82:49:34:4e:13:fe:0d:de:34:ed:c0:c3:
                    08:13:da:17:92:39:11:1a:6f:7d:08:79:c3:5c:79:
                    f7:c2:e7:52:4f:3a:cd:d3:2b:75:19:0b:70:74:05:
                    2a:d2:9d:13:86:4c:95:11:e0:3f:1c:0f:6e:b5:50:
                    5c:73:68:03:47:78:dc:9f:04:fb:e1:08:e1:6f:c2:
                    42:4b:13:46:e8:19:8d:be:67:c2:4d:35:d8:1b:f4:
                    44:eb:2c:39:0a:85:04:c2:eb:7e:da:0b:37:54:ea:
                    8b:40:f6:c7:1a:b8:0a:24:c6:82:a6:fb:81:a6:83:
                    fd:e3:36:6b:a0:40:8b:f4:9b:e2:6a:31:e5:62:48:
                    6b:8d:a6:be:16:61:b6:7c:30:97:2e:62:7a:da:5c:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:02:32:0B:7E:F8:BB:71:37:36:C2:AC:04:71:03:AF:0A:02:BF:64
            X509v3 Authority Key Identifier:
                keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/323430313a373065303a3a2f33322d313238203d3e203633353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:70e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:f1:fa:6c:55:cb:33:03:42:be:3e:75:98:9f:f8:19:45:b7:
         d5:70:38:0b:26:34:34:74:46:74:26:60:92:6e:62:a9:22:1b:
         75:bb:01:64:d8:47:b5:be:9f:1a:57:b1:de:b5:d7:48:ee:a2:
         2f:42:3b:07:1f:9d:f2:05:f1:79:38:72:e2:a8:c3:2f:1c:99:
         70:43:14:a0:e1:32:16:c5:df:ef:d7:7e:f3:63:89:28:49:f9:
         fc:e9:31:69:90:22:33:7b:ec:33:a0:5d:17:8a:91:53:85:ea:
         f7:bc:85:b1:3d:4a:1a:a4:6e:aa:dc:40:45:9c:d0:0f:42:76:
         c6:d4:0f:8f:a5:6d:15:7f:96:95:3f:76:d3:7b:d2:cf:3b:5e:
         f9:ed:8e:ed:50:fb:65:8b:c1:f5:41:e0:5f:79:08:05:cf:ff:
         61:06:fd:d0:90:b8:0b:93:df:8f:33:c0:9b:48:9f:04:2c:d5:
         28:48:00:47:d6:82:37:fa:01:33:7a:46:ee:f0:c2:a2:db:cb:
         ff:f5:b2:32:7a:1e:95:0b:99:61:a5:70:57:83:d8:fc:5a:54:
         97:d6:19:c2:48:0e:29:91:c3:d8:39:65:4b:5d:da:db:7e:10:
         d6:aa:28:60:4e:02:49:d8:81:92:44:fb:0e:36:df:5c:fe:24:
         cf:3d:fe:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:19:34 2026 by rpki-client