This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e33322e302f31392d3234203d3e20313338343231.roa
File:                     3131382e3134352e33322e302f31392d3234203d3e20313338343231.roa (raw, json)
Hash identifier:          0jocNA+jGqAOnS5bjSDW9Hv52wc1lzh1P6q6BgobXUo=
Subject key identifier:   A4:7C:45:AB:6B:44:D5:9D:96:9F:1A:4A:46:80:1C:6A:85:33:B1:EB
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       6B51BBABB21BB320E7A19A7136230DFB56D31279
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e33322e302f31392d3234203d3e20313338343231.roa
Signing time:             Tue 20 Jan 2026 02:09:43 +0000
ROA not before:           Tue 20 Jan 2026 02:04:43 +0000
ROA not after:            Tue 19 Jan 2027 02:09:43 +0000
asID:                     138421
IP address blocks:        118.145.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:51:bb:ab:b2:1b:b3:20:e7:a1:9a:71:36:23:0d:fb:56:d3:12:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jan 20 02:04:43 2026 GMT
            Not After : Jan 19 02:09:43 2027 GMT
        Subject: CN=A47C45AB6B44D59D969F1A4A46801C6A8533B1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:ec:a9:d2:0a:4d:b6:74:d0:2e:93:f9:fe:
                    45:97:ae:09:82:b2:57:02:39:4e:48:df:ed:71:d5:
                    8c:2f:d0:c2:7d:67:03:77:ce:10:79:6e:eb:d0:57:
                    ac:cd:d5:77:8d:58:b4:80:bd:9d:03:79:de:34:1c:
                    f6:e8:59:67:db:b7:08:50:e7:18:8b:54:72:34:2d:
                    78:43:29:2f:30:0e:7a:8d:bd:b2:9b:b9:cd:85:76:
                    f7:fa:da:af:40:69:f9:f2:0a:9c:e6:44:1a:a2:be:
                    3f:6b:ff:ab:ba:41:4b:c2:40:86:d1:63:4b:40:cf:
                    74:fc:16:7b:63:d2:d8:84:66:48:2f:6b:1b:cf:1b:
                    a1:d3:f7:b4:8d:e3:44:78:b0:2a:e0:6e:30:91:35:
                    d6:e5:e3:77:93:76:34:38:56:0d:95:bf:5a:10:78:
                    67:e6:dc:1d:d8:f5:c1:7f:2e:25:e8:63:25:c2:ca:
                    04:e6:cb:35:14:78:a9:f1:a3:36:4e:26:be:43:d0:
                    93:84:1a:19:15:78:8c:f6:2f:26:07:86:af:05:12:
                    c3:84:b9:0a:f7:d4:16:74:ba:f2:63:a9:19:40:8e:
                    a0:1b:a8:d2:bf:5a:9f:5e:0e:0d:67:3b:6a:25:03:
                    ed:8e:89:a1:b1:64:f7:d7:e7:ba:81:82:a9:34:09:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7C:45:AB:6B:44:D5:9D:96:9F:1A:4A:46:80:1C:6A:85:33:B1:EB
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131382e3134352e33322e302f31392d3234203d3e20313338343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.145.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         47:16:c5:39:03:40:79:54:31:e3:8d:1c:a4:05:9f:5c:cd:0e:
         71:88:40:82:5e:c5:c2:0e:4c:0d:89:7d:af:89:b1:64:cc:69:
         f3:6c:f0:8b:9b:4d:87:e1:4e:0f:8e:61:31:87:4d:1e:46:28:
         df:55:d8:da:1b:31:23:e5:e4:a5:3f:6d:0c:72:f7:dc:83:bc:
         14:77:40:9b:20:a0:58:7f:7e:fd:24:9f:85:9a:cf:1a:38:8a:
         d9:70:f4:dc:05:12:e8:7c:1f:0a:35:42:8a:8a:c2:c5:12:12:
         d2:8f:d2:dc:73:38:80:f4:06:f8:42:37:c7:12:4a:77:83:95:
         fe:2a:bf:9f:cb:7e:4c:6f:23:57:fa:fd:87:4f:d1:c2:4b:56:
         bd:9d:4d:95:c4:cd:b6:ed:31:99:3f:05:99:5f:81:1e:30:f7:
         05:f7:44:b7:1e:6e:03:11:75:75:49:18:9a:80:12:64:09:f7:
         4f:75:f4:97:c2:30:51:16:c3:c9:5c:14:e7:46:2b:66:aa:5c:
         29:46:fe:07:2e:d3:57:99:50:1f:98:12:25:02:25:ac:68:b8:
         77:59:03:ad:83:31:0a:cb:4e:c0:2c:9f:ae:fa:08:98:1b:96:
         b0:3c:2b:5e:71:78:f1:99:5c:fe:50:94:3d:74:6e:46:29:84:
         50:40:ba:56
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUa1G7q7IbsyDnoZpxNiMN+1bTEnkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE
MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDNaFw0yNzAxMTkwMjA5NDNaMDMxMTAvBgNV
BAMTKEE0N0M0NUFCNkI0NEQ1OUQ5NjlGMUE0QTQ2ODAxQzZBODUzM0IxRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmzuyp0gpNtnTQLpP5/kWXrgmC
slcCOU5I3+1x1Ywv0MJ9ZwN3zhB5buvQV6zN1XeNWLSAvZ0Ded40HPboWWfbtwhQ
5xiLVHI0LXhDKS8wDnqNvbKbuc2Fdvf62q9AafnyCpzmRBqivj9r/6u6QUvCQIbR
Y0tAz3T8Fntj0tiEZkgvaxvPG6HT97SN40R4sCrgbjCRNdbl43eTdjQ4Vg2Vv1oQ
eGfm3B3Y9cF/LiXoYyXCygTmyzUUeKnxozZOJr5D0JOEGhkVeIz2LyYHhq8FEsOE
uQr31BZ0uvJjqRlAjqAbqNK/Wp9eDg1nO2olA+2OiaGxZPfX57qBgqk0CRX/AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUpHxFq2tE1Z2WnxpKRoAcaoUzseswHwYDVR0j
BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB
NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU2OTE2NTAvMC8zMTMxMzgyZTMx
MzQzNTJlMzMzMjJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBXaRIDANBgkqhkiG9w0BAQsFAAOCAQEARxbFOQNAeVQx440cpAWf
XM0OcYhAgl7Fwg5MDYl9r4mxZMxp82zwi5tNh+FOD45hMYdNHkYo31XY2hsxI+Xk
pT9tDHL33IO8FHdAmyCgWH9+/SSfhZrPGjiK2XD03AUS6HwfCjVCiorCxRIS0o/S
3HM4gPQG+EI3xxJKd4OV/iq/n8t+TG8jV/r9h0/RwktWvZ1NlcTNtu0xmT8FmV+B
HjD3BfdEtx5uAxF1dUkYmoASZAn3T3X0l8IwURbDyVwU50YrZqpcKUb+By7TV5lQ
H5gSJQIlrGi4d1kDrYMxCstOwCyfrvoImBuWsDwrXnF48Zlc/lCUPXRuRimEUEC6
Vg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:39:01 2026 by rpki-client