This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3136382e302f32312d3234203d3e2034383131.roa
File:                     3138302e3138342e3136382e302f32312d3234203d3e2034383131.roa (raw, json)
Hash identifier:          3Yf9x1AW+QNhM32+1I+rVgY6fi3OzFL2PzobHzk+QyU=
Subject key identifier:   CD:49:50:29:2C:C9:C6:6C:87:29:D1:E6:CE:0F:4C:F2:FA:71:E9:AA
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       55215BD3C42FC99264E0913331CC3DD9BBF0F450
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3136382e302f32312d3234203d3e2034383131.roa
Signing time:             Tue 20 Jan 2026 02:09:43 +0000
ROA not before:           Tue 20 Jan 2026 02:04:43 +0000
ROA not after:            Tue 19 Jan 2027 02:09:43 +0000
asID:                     4811
IP address blocks:        180.184.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:21:5b:d3:c4:2f:c9:92:64:e0:91:33:31:cc:3d:d9:bb:f0:f4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jan 20 02:04:43 2026 GMT
            Not After : Jan 19 02:09:43 2027 GMT
        Subject: CN=CD4950292CC9C66C8729D1E6CE0F4CF2FA71E9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:6b:ad:5b:f4:87:ed:a5:54:ec:f8:0b:0a:
                    d1:42:d6:90:4e:54:2a:cf:81:80:93:61:6a:d4:28:
                    70:45:2d:94:d3:b5:f6:2c:7c:66:05:56:91:77:48:
                    3a:31:a4:44:40:1c:d1:27:cb:30:6e:91:ce:5e:cf:
                    c6:20:42:65:48:f0:cc:2c:e8:f9:8c:ee:dc:e8:bf:
                    6a:ca:79:f9:f3:2d:22:d3:65:0b:34:84:f1:ac:50:
                    82:d4:7b:6e:c0:eb:12:92:0c:50:8c:33:d1:1b:21:
                    0b:16:0a:b9:a0:1b:ce:9a:c7:ab:f8:26:7c:34:86:
                    d2:55:b4:e0:ac:4f:f6:34:a8:b9:5c:f9:64:10:b5:
                    b2:aa:50:18:02:c8:6d:8a:24:29:c8:6a:30:a3:0c:
                    55:d1:f3:17:52:ae:e9:c7:2f:8e:fb:50:d8:a1:4f:
                    d3:03:63:0f:73:0b:83:3d:17:b9:2d:61:3b:83:01:
                    39:56:3d:c8:7f:95:cc:ff:d5:aa:10:8c:04:58:21:
                    52:8b:d9:72:65:60:03:9c:a8:4c:34:ec:ef:8e:54:
                    a4:88:57:50:9f:f6:c9:03:4e:32:6c:77:3f:f8:01:
                    7b:e5:b9:e9:9c:ea:65:a8:b2:d8:a0:ce:d3:3d:5c:
                    58:31:7a:8a:ff:8e:a3:00:3b:99:b3:c5:69:ab:40:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:49:50:29:2C:C9:C6:6C:87:29:D1:E6:CE:0F:4C:F2:FA:71:E9:AA
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3136382e302f32312d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.184.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:bc:67:75:e3:48:f6:f8:12:dc:26:04:70:a4:d7:b7:10:1b:
         65:98:98:d3:f0:98:76:dd:a7:4b:68:e3:ac:80:3a:f6:43:c8:
         31:f1:c9:86:08:97:08:48:3d:5d:2b:19:ef:ff:69:af:63:37:
         9a:ee:95:36:59:93:a8:79:5d:5b:03:44:e8:56:c4:67:be:7a:
         84:f7:2b:9b:46:28:16:8e:c2:99:1e:d3:ac:91:aa:85:89:3d:
         3a:ba:84:a5:47:ae:58:41:6f:bd:92:b5:11:7e:20:ad:26:fb:
         25:be:cf:35:f4:ed:de:c5:0a:47:3d:30:eb:2d:4d:62:45:2a:
         7e:2e:69:0a:1e:32:85:d2:1d:39:18:83:db:15:10:72:f3:5b:
         60:10:dc:f1:dd:29:4b:cf:1a:8a:5a:0e:c5:9a:ce:4c:59:fb:
         53:97:f2:e2:08:70:31:2f:03:d2:be:25:74:f5:28:5d:61:50:
         48:9e:17:88:7a:32:39:78:43:2d:75:17:92:6c:bb:34:aa:3a:
         96:96:f1:31:5f:bb:bf:85:23:8d:90:d3:2e:40:4c:47:04:9b:
         69:7a:76:c2:20:53:ff:12:e6:02:05:c3:2c:1c:9e:04:ee:f8:
         fd:f4:2f:22:cd:ca:68:53:74:b3:1a:a9:c7:16:43:6c:13:e1:
         e4:99:3f:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:38:07 2026 by rpki-client