This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3138342e302f32322d3234203d3e20313338343231.roa
File:                     3138302e3138342e3138342e302f32322d3234203d3e20313338343231.roa (raw, json)
Hash identifier:          FSmNy26QavSPCHi9jAVzySjOGAcyTgfzhKag58C0fx0=
Subject key identifier:   97:88:BE:2B:73:EA:E5:C1:B1:BA:D2:F1:B6:8B:C5:47:2D:35:9E:F8
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       2A6935AC370F4C043F1AAB134D008B1E85A489EB
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3138342e302f32322d3234203d3e20313338343231.roa
Signing time:             Tue 20 Jan 2026 02:09:42 +0000
ROA not before:           Tue 20 Jan 2026 02:04:42 +0000
ROA not after:            Tue 19 Jan 2027 02:09:42 +0000
asID:                     138421
IP address blocks:        180.184.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:69:35:ac:37:0f:4c:04:3f:1a:ab:13:4d:00:8b:1e:85:a4:89:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jan 20 02:04:42 2026 GMT
            Not After : Jan 19 02:09:42 2027 GMT
        Subject: CN=9788BE2B73EAE5C1B1BAD2F1B68BC5472D359EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a7:6a:a4:50:65:2e:a7:2c:c6:db:a5:3f:56:
                    4f:02:f7:30:35:14:9d:d8:ca:86:94:c0:0b:52:84:
                    97:ea:30:45:6e:f1:ad:b8:43:32:92:08:97:18:bb:
                    bb:9d:b8:44:53:36:a3:f3:e5:b0:c4:a9:3e:69:bb:
                    28:db:b2:8a:59:f5:df:f5:a7:58:ac:c4:17:1a:50:
                    62:87:54:26:8a:60:53:c9:7c:0d:90:88:8a:ca:59:
                    a9:07:ec:d0:4d:41:66:4b:33:df:f3:3f:d2:47:fd:
                    76:c0:dc:70:09:e3:71:0b:93:3e:74:c6:56:3c:ee:
                    59:3e:68:4b:3a:88:c1:35:50:24:76:b1:f5:8c:55:
                    6b:8a:0c:f4:d2:05:a4:67:bb:33:5a:1a:4f:13:37:
                    97:a3:cd:f6:ed:94:72:d3:ab:cc:f2:42:47:1a:f0:
                    5e:65:4d:67:91:42:00:4a:a5:4f:a9:be:0e:da:84:
                    d2:1a:75:d0:43:f4:96:05:f4:d5:7b:5b:be:aa:41:
                    44:c3:1b:33:1d:06:1a:0b:4e:16:bf:97:47:78:1d:
                    8f:ce:7e:d8:93:0b:4d:7f:b3:21:c3:d8:2f:69:af:
                    f0:34:4d:68:b3:da:cf:bd:5e:39:cf:df:80:26:7a:
                    aa:9c:85:15:16:33:6c:83:a6:9a:3c:5d:5e:f0:06:
                    af:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:88:BE:2B:73:EA:E5:C1:B1:BA:D2:F1:B6:8B:C5:47:2D:35:9E:F8
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3138342e302f32322d3234203d3e20313338343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.184.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:61:05:5a:d6:1d:2b:31:19:1e:b6:fa:87:2d:f6:d1:d0:5b:
         2d:1a:07:bf:ee:62:a8:ac:f9:fb:6f:f4:65:ee:c2:fb:2d:04:
         ee:30:82:71:93:f4:7c:35:4c:9a:d2:eb:79:60:4a:4e:1c:e9:
         b4:80:37:a6:a0:0e:08:78:a1:07:f7:8e:fb:52:f2:8d:d7:e0:
         aa:28:71:5c:5c:a4:42:ae:d0:f9:8f:35:fb:f6:db:d7:ff:56:
         58:c5:1a:cc:ca:66:9a:d2:0b:06:6d:e0:42:a8:52:77:d4:fe:
         9d:2a:c2:cb:a8:5c:e2:01:4f:11:b1:78:ed:71:81:06:c5:cc:
         98:56:7b:dc:b9:a5:e6:8a:a2:5b:40:bc:ee:55:70:ea:7f:8a:
         16:31:7f:ff:c0:03:2e:e1:32:85:8f:d7:20:90:e9:26:21:3d:
         df:b6:ac:f0:38:5a:01:5f:9b:6c:35:e5:48:27:79:e1:c7:65:
         8c:1d:a8:5e:70:f0:e6:dc:5f:6e:1c:d2:d6:67:58:47:60:eb:
         20:81:af:dd:12:a6:94:b3:92:53:48:0c:6a:c1:9b:1b:59:c4:
         6a:67:7a:a2:b1:73:61:21:92:63:3b:b2:81:87:eb:c6:7a:0c:
         9b:49:02:87:f2:87:77:95:d3:46:83:10:a9:c5:26:b8:6a:21:
         b9:8a:49:33
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUKmk1rDcPTAQ/GqsTTQCLHoWkieswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE
MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDJaFw0yNzAxMTkwMjA5NDJaMDMxMTAvBgNV
BAMTKDk3ODhCRTJCNzNFQUU1QzFCMUJBRDJGMUI2OEJDNTQ3MkQzNTlFRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwp2qkUGUupyzG26U/Vk8C9zA1
FJ3YyoaUwAtShJfqMEVu8a24QzKSCJcYu7uduERTNqPz5bDEqT5puyjbsopZ9d/1
p1isxBcaUGKHVCaKYFPJfA2QiIrKWakH7NBNQWZLM9/zP9JH/XbA3HAJ43ELkz50
xlY87lk+aEs6iME1UCR2sfWMVWuKDPTSBaRnuzNaGk8TN5ejzfbtlHLTq8zyQkca
8F5lTWeRQgBKpU+pvg7ahNIaddBD9JYF9NV7W76qQUTDGzMdBhoLTha/l0d4HY/O
ftiTC01/syHD2C9pr/A0TWiz2s+9XjnP34AmeqqchRUWM2yDppo8XV7wBq/3AgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUl4i+K3Pq5cGxutLxtovFRy01nvgwHwYDVR0j
BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB
NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzEzODMwMmUz
MTM4MzQyZTMxMzgzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArS4uDANBgkqhkiG9w0BAQsFAAOCAQEAEmEFWtYdKzEZHrb6
hy320dBbLRoHv+5iqKz5+2/0Ze7C+y0E7jCCcZP0fDVMmtLreWBKThzptIA3pqAO
CHihB/eO+1LyjdfgqihxXFykQq7Q+Y81+/bb1/9WWMUazMpmmtILBm3gQqhSd9T+
nSrCy6hc4gFPEbF47XGBBsXMmFZ73Lml5oqiW0C87lVw6n+KFjF//8ADLuEyhY/X
IJDpJiE937as8DhaAV+bbDXlSCd54cdljB2oXnDw5txfbhzS1mdYR2DrIIGv3RKm
lLOSU0gMasGbG1nEamd6orFzYSGSYzuygYfrxnoMm0kCh/KHd5XTRoMQqcUmuGoh
uYpJMw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:13:21 2026 by rpki-client