This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e32342e302f32312d3234203d3e203233373234.roa
File:                     3138302e3138342e32342e302f32312d3234203d3e203233373234.roa (raw, json)
Hash identifier:          et5nO8uuMCO2g76G3g4NhN2nh/hGolQefwtViYhrkdg=
Subject key identifier:   90:76:40:36:EC:C9:E3:3E:07:DB:03:BC:A9:75:1A:51:CF:69:D4:46
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       3411A98BAD96261F32EAA99F35846A7595C73967
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e32342e302f32312d3234203d3e203233373234.roa
Signing time:             Tue 20 Jan 2026 02:09:45 +0000
ROA not before:           Tue 20 Jan 2026 02:04:45 +0000
ROA not after:            Tue 19 Jan 2027 02:09:45 +0000
asID:                     23724
IP address blocks:        180.184.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:11:a9:8b:ad:96:26:1f:32:ea:a9:9f:35:84:6a:75:95:c7:39:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jan 20 02:04:45 2026 GMT
            Not After : Jan 19 02:09:45 2027 GMT
        Subject: CN=90764036ECC9E33E07DB03BCA9751A51CF69D446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:dd:b6:e1:67:12:2d:d3:03:2e:1b:e7:ff:bf:
                    b1:bc:00:34:e5:bd:02:f8:c4:7a:bd:12:37:d8:54:
                    eb:ea:42:7c:0d:d1:e4:15:99:74:87:35:f7:17:22:
                    52:a9:1b:71:94:31:a3:73:de:1c:cd:66:ff:52:18:
                    76:e0:a3:06:65:e0:de:26:66:39:05:ef:55:46:0b:
                    52:b6:40:fa:31:b0:b1:21:4f:2c:a8:ec:22:38:59:
                    88:ac:81:0e:e5:38:de:ae:b3:70:1b:54:1e:40:0f:
                    ca:8e:76:37:af:5a:65:26:5f:a0:f5:5d:22:9c:35:
                    eb:49:cf:47:6c:1d:55:78:4b:f1:e8:63:69:28:4e:
                    c0:45:51:e0:71:0d:ab:f2:92:2c:4e:62:40:6a:2a:
                    fa:be:f0:af:fe:c1:b0:a6:b0:83:c3:ca:4e:f3:c5:
                    18:9b:89:dc:79:ed:c0:ee:72:51:1a:98:20:aa:58:
                    ce:eb:9f:66:cd:62:7f:44:68:20:b2:8f:9c:dd:a1:
                    bf:a3:81:2e:11:a5:67:5e:da:e8:52:0f:72:44:49:
                    f4:42:43:97:da:aa:8f:ae:0e:96:26:d0:02:24:92:
                    0b:ea:61:b0:ab:90:39:88:98:d7:18:14:2c:dd:57:
                    a1:73:5c:70:05:be:02:10:6c:75:3e:48:8d:da:65:
                    17:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:76:40:36:EC:C9:E3:3E:07:DB:03:BC:A9:75:1A:51:CF:69:D4:46
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e32342e302f32312d3234203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.184.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:80:78:27:57:0a:ed:ce:f0:90:2f:8e:91:dc:84:44:53:b9:
         d7:25:bf:58:29:bf:9f:98:bd:69:10:c5:26:fe:ec:48:17:31:
         76:f4:d1:2b:c1:83:37:ca:d2:39:52:cb:96:5e:10:9f:51:1d:
         26:7c:bf:cf:a1:46:8d:67:31:0e:91:cc:a9:e3:a4:37:66:96:
         33:b8:99:9b:1b:ac:12:4f:10:c2:89:2b:5f:90:47:c0:fa:93:
         0e:79:32:15:0f:24:b9:3e:7f:a1:0b:d0:de:5e:3c:36:c1:dd:
         1a:4b:62:f0:73:74:8a:18:36:98:3e:98:da:48:74:2f:eb:95:
         69:de:5c:dc:21:c8:ef:7b:4b:66:f0:19:d1:13:a2:0e:c5:1a:
         3f:3d:9f:95:ea:16:c8:41:10:c8:af:1b:54:48:23:3d:02:d0:
         3b:b3:a2:0f:40:0f:4d:25:20:0d:42:ce:8f:82:6b:cc:4e:dd:
         27:47:53:31:de:82:ae:e0:d6:e3:a9:7f:5b:d5:01:0d:26:b1:
         5a:78:2e:4e:48:c4:9d:db:d3:d8:2a:43:2a:f8:cd:ce:b6:95:
         3a:ef:7a:74:d4:32:3e:cd:35:36:5a:04:63:1c:31:d0:6a:23:
         30:a3:1d:75:79:fc:bf:6b:8f:d2:b1:5a:51:27:8a:34:2b:e4:
         43:02:8e:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:07:17 2026 by rpki-client