This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3138342e302f32322d3234203d3e2034383131.roa
File:                     3138302e3138342e3138342e302f32322d3234203d3e2034383131.roa (raw, json)
Hash identifier:          0bE5GJ43F/BKto0bmMCI35yfavnRFRFtPEqh5I2v0bs=
Subject key identifier:   49:87:F2:41:AC:C0:66:26:7C:C2:B6:0E:64:07:55:7D:F8:46:81:51
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       710719D62FFF0E603D6F948DF41697C9B572C4B4
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3138342e302f32322d3234203d3e2034383131.roa
Signing time:             Tue 20 Jan 2026 02:09:45 +0000
ROA not before:           Tue 20 Jan 2026 02:04:45 +0000
ROA not after:            Tue 19 Jan 2027 02:09:45 +0000
asID:                     4811
IP address blocks:        180.184.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:07:19:d6:2f:ff:0e:60:3d:6f:94:8d:f4:16:97:c9:b5:72:c4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jan 20 02:04:45 2026 GMT
            Not After : Jan 19 02:09:45 2027 GMT
        Subject: CN=4987F241ACC066267CC2B60E6407557DF8468151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:e9:ca:46:56:01:3d:4a:fa:62:54:22:d9:
                    4e:a2:96:3d:f3:a1:a3:99:f0:2d:15:5b:82:c2:8f:
                    c4:62:e9:a2:f5:ef:6f:8c:8a:45:b6:86:61:af:9b:
                    5b:6f:2b:b9:21:bc:10:bb:d2:57:da:dd:fd:55:c1:
                    a0:c5:56:d7:4d:c7:92:3b:8c:1c:2e:55:c7:26:42:
                    e2:27:93:56:25:98:35:37:c4:69:1a:52:2b:42:74:
                    a2:da:73:cb:f1:dd:fe:05:5c:6f:86:04:a9:9e:39:
                    c8:13:ae:29:f7:9b:16:4e:04:12:50:cb:94:2d:f4:
                    42:fe:22:ab:af:4b:12:ba:f0:36:09:a3:54:1c:aa:
                    08:7d:2e:b1:8f:bf:22:5f:c2:b9:8c:5c:0a:f5:0c:
                    32:de:66:30:b7:33:7a:7f:7e:ad:07:aa:b6:17:cd:
                    d6:2b:e6:8c:3d:ec:6f:da:8d:aa:b3:6e:80:1d:32:
                    bd:eb:5e:06:ee:6e:b9:8b:31:74:c9:0c:56:0b:0a:
                    18:a0:a8:07:c3:43:7c:33:47:03:3a:5f:fc:e2:3f:
                    17:ba:b3:3e:d6:1c:c6:70:f0:dd:25:3d:47:06:7e:
                    65:9d:5a:7f:8a:52:a6:44:6b:52:59:3a:26:41:62:
                    b4:92:9c:5b:54:78:02:43:22:b8:f7:13:33:62:0d:
                    dc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:87:F2:41:AC:C0:66:26:7C:C2:B6:0E:64:07:55:7D:F8:46:81:51
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e3138342e302f32322d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.184.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:1b:b6:3f:a0:11:6d:84:69:3c:f3:38:5f:39:59:76:66:61:
         15:7d:1c:45:fc:ee:39:62:fc:1a:1e:4b:ef:09:cb:8a:27:7c:
         2c:f9:f6:96:ba:9c:4f:e3:47:0e:36:f2:68:fa:15:51:b0:86:
         58:3f:6b:b3:ce:d2:fb:37:95:ec:1d:52:eb:dd:73:4a:1e:e9:
         3b:03:e7:0b:b7:40:f1:37:46:31:37:82:69:31:b9:69:15:4e:
         ba:ce:1f:55:e6:46:26:9e:44:c2:f2:4d:3b:b6:e6:01:0a:7e:
         6c:a9:8e:df:5a:43:17:84:7f:b0:a5:ae:51:09:cd:6c:8f:f4:
         df:0f:4f:44:01:18:39:c3:a2:c5:b9:51:49:b1:8f:60:c1:f5:
         e4:2b:be:eb:be:f2:ff:5e:c0:f0:7f:6e:09:d6:72:aa:5c:78:
         95:38:42:0e:01:34:f2:59:30:34:c5:20:86:2b:66:4b:6c:b7:
         b2:c7:70:2c:a3:8b:6a:3e:40:94:d1:2e:ac:9f:00:29:c5:29:
         c0:8c:e6:54:ca:b5:26:a6:40:d8:54:85:e6:c1:50:a9:4b:8f:
         ad:ad:17:a9:6a:70:02:c2:d3:ee:92:93:10:c4:3c:6c:d6:cf:
         3b:e9:f4:5a:57:d7:11:45:ba:51:49:d0:7d:ad:db:9f:c9:0d:
         61:6b:7d:e5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:08:21 2026 by rpki-client