This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3132342e3137352e302e302f31362d3234203d3e20313337373138.roa
File:                     3132342e3137352e302e302f31362d3234203d3e20313337373138.roa (raw, json)
Hash identifier:          qekCWyMDA3qln6jNYWBBkUzhmoACpvJ2RdgVlxF+E5s=
Subject key identifier:   FE:6B:90:94:C4:7E:4E:CB:38:8E:BC:C2:B7:35:6B:21:1F:8D:FF:13
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       3082EEE65587D11F98DC89E4552D933944C5F0B9
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3132342e3137352e302e302f31362d3234203d3e20313337373138.roa
Signing time:             Tue 20 Jan 2026 02:09:41 +0000
ROA not before:           Tue 20 Jan 2026 02:04:41 +0000
ROA not after:            Tue 19 Jan 2027 02:09:41 +0000
asID:                     137718
IP address blocks:        124.175.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:82:ee:e6:55:87:d1:1f:98:dc:89:e4:55:2d:93:39:44:c5:f0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jan 20 02:04:41 2026 GMT
            Not After : Jan 19 02:09:41 2027 GMT
        Subject: CN=FE6B9094C47E4ECB388EBCC2B7356B211F8DFF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:69:05:d6:63:36:47:bb:cd:be:48:a2:c3:
                    67:44:61:ae:4b:ad:4c:06:13:67:82:f4:e9:79:a7:
                    28:4d:36:b4:fc:37:a5:bf:f6:2a:c7:1d:59:54:68:
                    17:b0:ba:9e:2d:db:5c:71:4f:d8:b0:05:ad:7d:92:
                    34:84:ef:0c:c4:d7:45:20:a1:eb:0d:3c:c3:ab:d1:
                    a3:64:23:ea:ec:df:8b:84:0c:0f:49:fa:58:f3:9c:
                    6d:5c:84:98:70:8d:8b:5c:fd:51:39:57:33:74:f8:
                    57:7d:d8:57:fa:38:1a:cb:f6:e8:6d:a7:be:b8:bb:
                    a9:cf:c8:8f:42:c9:e7:59:a2:17:65:dc:65:88:d5:
                    87:c6:44:09:58:3e:ff:6f:83:9c:20:89:35:a7:d8:
                    0a:85:a3:1c:1c:82:be:1f:b1:17:a3:7d:13:3e:a5:
                    72:8c:8d:26:b3:e7:bc:80:f4:25:d6:ab:65:5f:98:
                    78:da:c1:aa:9b:5f:c1:b4:27:c1:b5:ed:46:0b:bf:
                    2a:f5:25:d0:ab:48:fc:67:4f:06:fd:e3:0e:d5:57:
                    fe:80:98:2c:f2:74:50:80:bd:2a:7a:69:c0:80:64:
                    cd:65:2c:67:ce:0e:43:6c:17:af:d4:27:ed:68:c7:
                    b3:37:34:f5:6f:10:e6:33:22:33:61:11:eb:28:54:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6B:90:94:C4:7E:4E:CB:38:8E:BC:C2:B7:35:6B:21:1F:8D:FF:13
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3132342e3137352e302e302f31362d3234203d3e20313337373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         77:29:10:91:68:fb:ad:20:b7:ea:2d:1c:44:a3:07:95:25:49:
         a8:c9:1b:e8:c6:69:89:44:b1:54:83:7c:b2:0c:99:12:9f:cd:
         30:76:d6:5c:1c:e2:f6:d5:d6:e1:a1:dc:ff:49:c1:03:29:fa:
         fe:75:c5:61:ae:d9:82:b2:a9:64:d1:95:9a:03:8f:bb:06:40:
         fe:25:99:03:01:42:ef:9c:8b:f9:94:f2:7f:67:bb:ec:44:7b:
         a7:61:a5:b4:9b:90:45:1e:82:10:5d:35:01:7a:2e:b2:87:8d:
         f9:6f:7b:ae:23:73:28:46:44:08:8d:6f:0f:fd:bd:c4:ff:91:
         2a:49:a6:dd:7b:0f:3c:7d:2a:3e:16:64:bd:8d:2f:4c:a2:a6:
         18:41:4e:5c:93:57:f6:e8:4b:dc:9a:ba:95:59:93:f6:1e:dd:
         ef:e3:13:f6:7f:0b:3c:85:1a:d0:4c:72:bd:07:9f:2c:53:f1:
         1c:ad:86:db:fc:90:ad:e9:ca:1c:02:99:e3:d5:36:65:62:e7:
         e4:c2:ff:a1:29:ff:57:fa:df:7f:66:65:79:af:f4:5a:b2:9f:
         85:9a:0f:12:77:21:a5:00:30:fe:7f:5a:e9:13:be:f9:5c:6c:
         a7:3b:a5:84:5f:16:59:43:a1:06:c4:af:9f:38:5d:ed:9d:06:
         10:63:86:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:56 2026 by rpki-client