This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e302e302f31362d3234203d3e20313337373138.roa
File:                     3138302e3138342e302e302f31362d3234203d3e20313337373138.roa (raw, json)
Hash identifier:          YpzF/IGFKQ9jcjDUA1UqZYCgsV48LkfYm5pZuzT+bV8=
Subject key identifier:   51:74:A6:7B:B0:D4:6A:8B:79:E3:A7:99:B7:6D:D0:FC:36:B2:17:3D
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       267836795D31DF0E1B1F18A9695A2B0FE3C082B1
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e302e302f31362d3234203d3e20313337373138.roa
Signing time:             Tue 20 Jan 2026 02:09:44 +0000
ROA not before:           Tue 20 Jan 2026 02:04:44 +0000
ROA not after:            Tue 19 Jan 2027 02:09:44 +0000
asID:                     137718
IP address blocks:        180.184.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:78:36:79:5d:31:df:0e:1b:1f:18:a9:69:5a:2b:0f:e3:c0:82:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jan 20 02:04:44 2026 GMT
            Not After : Jan 19 02:09:44 2027 GMT
        Subject: CN=5174A67BB0D46A8B79E3A799B76DD0FC36B2173D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:f6:24:9c:5d:73:df:86:57:fc:c1:af:5a:
                    3c:9a:3d:7f:a9:34:9f:7b:1c:98:7e:7d:1a:b2:33:
                    2d:26:86:69:c5:cc:84:8a:05:c4:43:6a:5b:dc:8a:
                    5a:4d:c9:c8:c4:8a:10:73:74:36:db:a5:f5:d4:59:
                    b2:69:ac:b9:40:68:8b:57:20:e1:28:f4:6d:f9:59:
                    01:39:8e:a7:da:d1:c6:55:60:c1:b5:52:84:5c:89:
                    81:c1:e7:4e:ff:a5:b9:fe:e5:ee:57:98:36:0c:e0:
                    94:aa:80:76:1f:4f:09:97:94:ef:58:34:12:a7:61:
                    e3:f2:c4:d6:ad:15:f3:b2:76:c6:ed:07:05:4d:dd:
                    21:f0:df:91:6f:13:0f:01:8a:79:d3:8b:98:d9:aa:
                    d6:01:77:2c:53:a6:f5:63:3f:9e:5c:e5:5a:e0:84:
                    1b:35:7f:e9:79:46:2e:71:e9:8d:de:7b:3c:51:c6:
                    02:40:ab:1c:40:65:71:2b:a9:4f:b0:13:d7:18:83:
                    2d:d3:50:40:b0:dc:58:1d:d5:a0:88:45:dc:d1:bf:
                    4e:80:7c:99:c7:46:e0:69:30:8b:92:a2:17:33:bd:
                    7e:25:6a:2e:7c:b7:fe:c1:bb:1d:a0:db:99:80:86:
                    2a:04:93:b8:af:08:b5:58:32:16:93:53:9c:2f:a9:
                    7d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:74:A6:7B:B0:D4:6A:8B:79:E3:A7:99:B7:6D:D0:FC:36:B2:17:3D
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e302e302f31362d3234203d3e20313337373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:d3:10:c5:cc:df:13:fa:32:32:1f:6f:50:20:d1:53:a6:2c:
         3d:3b:4c:17:34:56:b7:c3:07:49:dc:32:d3:01:06:3b:90:9c:
         c1:36:41:ee:56:fe:89:fd:95:38:29:5a:1e:37:88:11:13:eb:
         70:fa:ac:10:b6:48:ac:10:bc:02:3e:10:bd:55:67:9d:99:cd:
         4b:b7:d2:19:32:6e:0b:d0:3f:ca:34:42:28:38:74:31:91:16:
         35:bd:81:f6:aa:f2:0b:8f:44:ca:ea:29:b4:e0:ea:89:b6:65:
         1d:e9:15:5f:67:be:a2:49:5d:0d:7f:06:86:88:28:e0:cd:dc:
         33:bd:fd:18:6f:48:0d:4e:ed:e0:4e:ae:55:cf:1c:47:59:1a:
         ce:86:5d:1c:8c:b5:a3:53:a7:ba:11:72:44:ee:52:03:7d:ff:
         a9:be:b3:73:2d:85:b4:35:3a:21:86:0d:9b:5f:e0:b7:0d:39:
         48:22:4c:0a:73:a7:dd:9d:82:74:78:4a:fb:7c:8f:3c:83:10:
         ed:09:83:cb:11:8a:39:4c:fa:40:ce:48:92:98:25:db:aa:0b:
         e2:1c:b2:39:b0:01:28:b2:c6:b1:b9:10:7b:5f:6b:09:af:0e:
         c1:74:8d:c8:ff:e9:a7:ce:dd:69:58:eb:22:09:01:73:04:e3:
         75:a4:66:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:08:20 2026 by rpki-client