This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3134342e302f32312d3234203d3e2034383131.roa
File:                     3138302e3138342e3134342e302f32312d3234203d3e2034383131.roa (raw, json)
Hash identifier:          f/m62/RIZzINPvKT/kf4lF2rJrfh6rjkzM1597BDNLU=
Subject key identifier:   E5:F9:8B:9F:82:45:24:B4:6C:AF:5B:9C:DC:B2:DD:1B:B3:BE:99:D9
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       1B941663EE65157CBE08CE75B9EA557C87F141E3
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3134342e302f32312d3234203d3e2034383131.roa
Signing time:             Tue 20 Jan 2026 02:09:41 +0000
ROA not before:           Tue 20 Jan 2026 02:04:41 +0000
ROA not after:            Tue 19 Jan 2027 02:09:41 +0000
asID:                     4811
IP address blocks:        180.184.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:94:16:63:ee:65:15:7c:be:08:ce:75:b9:ea:55:7c:87:f1:41:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jan 20 02:04:41 2026 GMT
            Not After : Jan 19 02:09:41 2027 GMT
        Subject: CN=E5F98B9F824524B46CAF5B9CDCB2DD1BB3BE99D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c8:12:58:54:a4:01:f9:cd:92:80:64:0f:b6:
                    83:2d:80:6c:df:4c:75:a0:df:4f:27:f3:80:d2:27:
                    2b:92:cc:4d:f1:18:ee:df:9f:b8:09:15:6a:3a:f7:
                    7e:c6:43:3f:49:37:d9:9b:52:8e:ae:b3:49:f2:44:
                    83:0a:01:ee:82:b9:6e:53:15:7c:5c:e1:7d:e3:b1:
                    97:a1:09:e0:18:20:ac:49:f9:83:85:39:44:b4:3f:
                    8e:38:6c:f5:96:b6:3a:81:db:18:75:fa:81:5b:2e:
                    2e:d7:41:00:9c:8e:05:12:12:0e:e8:6a:42:02:5b:
                    a2:4c:b9:05:c6:68:5b:61:04:0a:d2:84:34:72:03:
                    e6:d5:1c:22:f5:7a:dd:7a:91:7c:b6:3f:3f:42:36:
                    99:37:24:7b:ba:c7:18:46:0f:f3:9c:c7:be:de:6e:
                    7b:43:15:ff:37:86:69:27:80:fc:6d:29:df:b2:fd:
                    8e:ce:da:c2:de:42:a7:14:2f:5e:9c:fc:d4:29:8b:
                    2f:a2:3a:73:d0:c8:a4:e3:2d:da:b5:38:e1:8d:ea:
                    16:75:38:1b:93:b7:71:7b:6f:38:b7:4c:55:19:eb:
                    de:ed:7a:6a:20:75:c6:49:3d:02:ba:82:10:78:34:
                    1b:c4:1e:a2:34:5c:ac:13:b6:44:f5:91:e7:70:70:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F9:8B:9F:82:45:24:B4:6C:AF:5B:9C:DC:B2:DD:1B:B3:BE:99:D9
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3134342e302f32312d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.184.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:0b:ff:36:9d:7f:e3:9b:a5:9d:a4:fe:a6:1f:02:83:ea:6f:
         76:f0:b4:15:e6:bf:73:81:04:c9:b5:ec:40:c9:52:ca:54:a7:
         02:28:ab:46:67:8a:54:e1:88:bf:b6:53:16:67:b6:c9:22:91:
         54:97:58:9d:f9:70:6e:da:b7:43:f6:d6:dc:0b:f8:bd:e5:d1:
         65:1c:ff:7d:0a:47:9f:72:64:2c:aa:a5:be:70:65:1d:45:89:
         2a:ad:54:e8:3c:19:e5:79:92:b8:b6:8d:ef:18:1b:fc:07:46:
         7a:1d:a8:f3:87:79:ef:e0:98:45:3c:ac:92:0d:8b:67:b6:3b:
         bb:ce:45:30:dc:89:47:68:f5:d7:3d:da:eb:10:33:b1:67:38:
         e8:1f:a1:c9:cd:b7:c8:53:33:1f:84:d7:71:24:4c:9f:c6:4d:
         84:bf:02:f3:48:68:03:2b:85:ad:e1:32:7b:6e:1b:5b:db:43:
         84:24:5e:cc:22:06:b7:21:e6:12:68:9a:e7:92:00:b9:65:74:
         07:a5:c6:f7:a7:fd:47:4c:35:7e:f1:e7:0a:9d:4a:05:46:8a:
         af:5c:ea:33:2f:5a:86:a3:d0:e8:90:49:4d:5b:e8:e8:b2:e0:
         7e:75:65:8d:cf:ba:7e:f7:db:a6:bf:6a:c3:77:2e:93:09:71:
         df:04:39:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:16 2026 by rpki-client