This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/1/3135372e31352e37342e302f32332d3236203d3e20313436373837.roa
File:                     3135372e31352e37342e302f32332d3236203d3e20313436373837.roa (raw, json)
Hash identifier:          2XzrUWYx7D4ETPvy+LhQ2cT4hHATIRgjJWZ0TgYr+PY=
Subject key identifier:   FE:FC:44:53:D5:BB:74:6C:EB:7D:F6:90:03:4F:AF:3C:80:B0:A4:E3
Certificate issuer:       /CN=E9EED0187DAE9147812C7B516912D58FD976B964
Certificate serial:       4E9A459C3F8B921C5A6E821F97F69CCA2C57DC23
Authority key identifier: E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/3135372e31352e37342e302f32332d3236203d3e20313436373837.roa
Signing time:             Tue 20 Jan 2026 02:22:44 +0000
ROA not before:           Tue 20 Jan 2026 02:17:44 +0000
ROA not after:            Tue 19 Jan 2027 02:22:44 +0000
asID:                     146787
IP address blocks:        157.15.74.0/23 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9a:45:9c:3f:8b:92:1c:5a:6e:82:1f:97:f6:9c:ca:2c:57:dc:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9EED0187DAE9147812C7B516912D58FD976B964
        Validity
            Not Before: Jan 20 02:17:44 2026 GMT
            Not After : Jan 19 02:22:44 2027 GMT
        Subject: CN=FEFC4453D5BB746CEB7DF690034FAF3C80B0A4E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c2:82:c4:80:9a:9a:3f:f3:a6:e5:e5:9e:f8:
                    45:ab:d4:ce:bc:16:7f:5a:ed:40:c2:49:25:c9:8f:
                    2d:33:ea:06:8a:7d:e0:8f:5e:e9:00:0c:4e:61:d2:
                    40:20:45:70:e2:8e:19:d9:26:18:ff:aa:26:ef:94:
                    3d:7c:26:2d:8d:52:7f:2e:7d:cf:90:9f:3b:60:a1:
                    b3:f8:dd:97:3a:e7:18:50:d5:51:16:c4:9c:af:2f:
                    da:ca:4d:b1:3a:c7:53:f4:20:f4:06:ab:38:4a:09:
                    47:14:e6:e5:68:5b:14:1c:52:48:61:1e:8b:a4:31:
                    b2:22:06:07:7d:43:77:dc:92:72:36:d2:5d:63:37:
                    9c:76:ef:00:dc:d0:a2:f2:bf:dd:45:be:3b:e8:20:
                    b6:82:23:ab:de:cf:5a:fa:4a:71:95:f2:94:83:4d:
                    5b:e1:40:f8:e8:e9:a0:b0:50:18:a2:0d:8e:93:19:
                    c7:57:b1:2f:33:8d:14:11:0e:e3:6e:dc:3a:13:9f:
                    b2:c2:55:d2:af:f7:3a:71:5b:95:3a:7e:aa:94:e3:
                    20:69:56:a5:f4:c0:57:7b:9e:c4:03:a5:0b:b3:28:
                    fe:6c:c7:5f:f8:fa:fa:8e:1b:94:7c:86:9f:5e:90:
                    33:af:8d:2a:3b:91:e3:83:a8:ff:47:28:39:ea:2a:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FC:44:53:D5:BB:74:6C:EB:7D:F6:90:03:4F:AF:3C:80:B0:A4:E3
            X509v3 Authority Key Identifier:
                keyid:E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/3135372e31352e37342e302f32332d3236203d3e20313436373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:f1:e5:44:1d:e9:8e:5f:57:05:86:f0:4a:91:c5:ba:4b:16:
         0d:47:f5:c7:3b:bc:29:7e:b3:f4:66:81:83:56:3c:97:fb:74:
         b2:60:69:4f:38:b8:e6:fd:1d:1a:28:dc:90:81:c6:10:a6:d7:
         4d:14:31:0a:52:dc:2b:aa:24:ea:fc:42:1d:20:c7:9b:eb:14:
         66:64:d7:4b:92:e2:cd:bd:a3:a6:d7:ff:67:fe:39:f7:bd:36:
         46:ff:1d:6d:17:df:f4:be:9b:b2:5d:19:82:d4:9e:7d:dc:53:
         35:68:8c:d1:70:df:a6:12:32:64:c3:ce:f3:1b:9c:6d:ff:0a:
         5a:b1:78:a3:99:61:70:f2:5b:f7:83:8e:b7:df:c2:66:53:aa:
         5f:3a:39:6a:19:2b:b9:a5:0b:90:26:17:4f:fd:90:95:43:a4:
         ec:d0:e2:77:1f:6c:9e:03:40:56:68:74:82:ca:50:81:eb:f6:
         45:4d:0c:e5:4c:fc:3d:e3:16:cb:a5:e5:e4:af:c7:6b:fb:9c:
         f6:8f:bd:cb:8a:ac:17:4d:4a:2a:e6:2c:5a:b5:7f:4a:90:7f:
         ea:0f:b9:a8:26:4d:15:bf:9c:46:2a:a6:ae:e2:0c:a5:17:fa:
         46:49:f7:c4:9d:e2:ea:bc:ea:23:09:1d:8c:fb:55:35:87:89:
         5c:b0:19:17
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:25 2026 by rpki-client