This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3135322e302f32322d3234203d3e20313338343231.roa
File:                     3138302e3138342e3135322e302f32322d3234203d3e20313338343231.roa (raw, json)
Hash identifier:          Yd9z+BiC59oIsFsUHx/R/rO371+CNGypCYgfJB74p80=
Subject key identifier:   05:D4:BA:AA:6C:9D:50:49:50:98:32:FE:DD:5A:27:96:CA:E4:1D:EC
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       1A0CF643DA64376E4439330DC5CBFB9F8ED9CE35
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3135322e302f32322d3234203d3e20313338343231.roa
Signing time:             Tue 20 Jan 2026 02:09:42 +0000
ROA not before:           Tue 20 Jan 2026 02:04:42 +0000
ROA not after:            Tue 19 Jan 2027 02:09:42 +0000
asID:                     138421
IP address blocks:        180.184.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0c:f6:43:da:64:37:6e:44:39:33:0d:c5:cb:fb:9f:8e:d9:ce:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jan 20 02:04:42 2026 GMT
            Not After : Jan 19 02:09:42 2027 GMT
        Subject: CN=05D4BAAA6C9D5049509832FEDD5A2796CAE41DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:43:b0:77:ab:f1:9d:28:03:a5:6c:23:bb:21:
                    b1:f3:d0:76:c6:c4:ca:aa:e4:ff:4e:73:c1:32:bf:
                    c6:d7:a2:0f:4e:8d:58:1c:83:ef:b1:e8:45:ce:24:
                    10:f8:db:36:de:95:10:68:22:60:65:ce:09:da:80:
                    4c:79:f2:d7:80:7d:0d:e9:1e:69:b6:4c:aa:ec:2a:
                    b8:29:8d:19:dd:22:14:70:01:e9:97:08:d0:b4:0b:
                    18:59:48:36:03:c0:5f:65:5c:52:f3:ce:ab:a1:f7:
                    76:c7:ce:2b:03:fa:0f:6d:bf:59:da:d7:16:66:7a:
                    f3:30:fe:4a:36:85:57:12:f4:24:64:ad:80:88:e3:
                    83:89:eb:c0:4c:a6:e7:4a:35:6f:1f:d4:51:00:9d:
                    39:a0:48:63:2d:d1:35:6e:ee:48:d7:9f:75:9b:5c:
                    ad:79:b9:b8:1e:a5:af:fd:b8:77:12:8f:c2:5d:db:
                    be:d9:a7:87:e8:9e:30:0a:87:25:9c:7f:d4:2d:74:
                    f4:99:f6:fb:85:53:fd:49:24:d9:df:6a:4e:50:21:
                    26:59:d4:d2:30:d6:00:37:9e:d4:9a:2c:6e:00:a6:
                    83:e9:e4:69:69:88:0c:6a:1d:9c:1d:4e:d6:7b:1d:
                    46:5d:6d:aa:2f:91:ab:96:2c:11:bf:38:e8:fa:48:
                    ae:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D4:BA:AA:6C:9D:50:49:50:98:32:FE:DD:5A:27:96:CA:E4:1D:EC
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3135322e302f32322d3234203d3e20313338343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.184.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:1c:87:49:d3:c4:84:68:ec:dd:de:25:1a:c6:84:dc:92:cc:
         7b:e3:6b:bb:7e:97:a7:14:65:ff:fd:12:cd:31:5c:6b:17:02:
         ea:d6:81:3c:49:a2:16:26:50:71:20:87:6b:d4:cb:7e:6e:eb:
         75:48:3f:c8:ca:06:7b:ad:2b:b4:7c:d3:72:4b:a0:d5:ec:bb:
         8d:7a:27:ab:d1:a2:0b:3a:dd:37:c3:08:61:c2:40:4f:87:2e:
         b5:84:a7:d8:9f:a1:f4:86:2d:6f:04:4d:eb:d7:27:62:26:30:
         5b:ae:d3:56:1a:cb:e1:c4:00:51:f1:d4:1e:62:25:45:39:e1:
         b4:5f:2b:c0:99:9f:e0:e8:1b:1f:6a:8d:d1:2f:ad:63:6f:98:
         68:60:ff:bf:21:1e:b5:72:bc:ad:7a:27:a2:0b:29:c2:ed:e3:
         8f:55:17:c0:6d:df:31:77:ff:16:2d:19:0e:2e:9a:8f:51:c0:
         42:e8:eb:c1:11:dd:e7:b7:5c:c4:95:f2:38:54:ca:0b:87:7d:
         3e:66:a4:d3:9b:20:bf:a8:0d:89:f3:d5:3e:76:3a:04:d3:66:
         96:d9:75:41:25:ce:5b:d8:f3:b9:4e:3c:75:f0:21:03:9c:63:
         fc:ed:45:a8:1f:e1:72:ac:d4:c1:33:a8:36:2f:b8:97:6c:61:
         46:92:17:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:02:41 2026 by rpki-client