This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa
File:                     3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa (raw, json)
Hash identifier:          SqYoFh9M/RF4hCcPqm6MB7F49di/2cutG0x9fForwa0=
Subject key identifier:   35:58:71:E3:DB:CD:E3:93:EB:48:EC:08:12:67:CA:1E:14:FD:A7:B0
Certificate issuer:       /CN=BE564B2EFF08B30078A1960732464840B104EF35
Certificate serial:       1ED184092EA9ABA17A6B06562D52FA92211D2213
Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa
Signing time:             Tue 20 Jan 2026 01:19:11 +0000
ROA not before:           Tue 20 Jan 2026 01:14:11 +0000
ROA not after:            Tue 19 Jan 2027 01:19:11 +0000
asID:                     151277
IP address blocks:        160.30.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d1:84:09:2e:a9:ab:a1:7a:6b:06:56:2d:52:fa:92:21:1d:22:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35
        Validity
            Not Before: Jan 20 01:14:11 2026 GMT
            Not After : Jan 19 01:19:11 2027 GMT
        Subject: CN=355871E3DBCDE393EB48EC081267CA1E14FDA7B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1b:05:95:70:c8:3b:43:28:e2:a0:99:ea:6a:
                    2c:25:1f:13:ad:59:de:35:b9:11:d1:bf:1e:06:68:
                    fe:63:79:f5:c2:f5:0d:a6:91:7f:1f:ed:14:ad:93:
                    9a:7c:2c:71:cd:57:06:df:8d:0a:22:2f:84:0e:ff:
                    61:b0:48:46:9b:89:e5:98:50:e4:ef:cf:ca:f9:33:
                    09:c8:88:0d:6e:6c:c6:50:e4:ec:e3:4d:7d:65:58:
                    3e:e4:2f:19:a6:fe:22:c3:27:2f:67:0e:15:48:94:
                    0f:4b:18:c8:51:92:1d:64:5e:90:5f:6b:b1:cb:2d:
                    49:4d:3b:b5:c5:73:d5:95:50:bf:35:fb:c3:33:2f:
                    aa:8d:c8:df:33:81:8b:1d:3c:00:de:4f:b7:60:11:
                    c0:04:d4:5e:36:8f:df:1c:ef:1b:1f:d5:1f:98:be:
                    ba:aa:b7:95:3c:25:db:61:e2:2e:77:e4:20:4b:68:
                    6f:60:1b:d1:36:f4:8d:0f:4d:92:92:43:a5:43:5a:
                    2a:06:81:33:90:c8:a1:2b:00:a1:89:94:ed:5c:6f:
                    26:c5:25:77:e3:43:ab:56:6c:9f:bf:7e:24:7b:0f:
                    61:6e:4f:c5:b6:6b:bc:4e:8c:a6:88:de:e4:75:90:
                    23:d3:c2:5d:f3:d1:80:0e:87:c5:78:68:67:1a:f9:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:58:71:E3:DB:CD:E3:93:EB:48:EC:08:12:67:CA:1E:14:FD:A7:B0
            X509v3 Authority Key Identifier:
                keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:34:da:6c:fa:f1:c0:e0:43:a8:14:40:d0:f3:9b:85:94:25:
         4a:80:87:50:c5:11:09:43:92:db:81:65:e9:83:cf:a4:35:61:
         f8:7a:12:41:55:ea:c4:5f:1a:49:06:a8:e7:b7:7e:14:8a:3f:
         83:9d:78:65:ac:70:e1:5d:1c:2b:cc:e6:09:a9:3e:23:b4:95:
         df:ce:73:cc:49:76:e4:11:ec:56:0f:6a:c9:80:d6:fc:2c:2f:
         a9:9c:f8:a4:bb:9d:16:bb:4c:42:5e:16:52:07:d9:e8:36:cd:
         2c:18:52:c9:9a:94:cf:18:47:97:fe:85:40:09:47:4a:ae:37:
         00:b5:de:3f:9c:1c:fb:a3:af:c0:69:7d:30:5b:9d:11:0d:b8:
         76:bb:df:b3:17:6a:c8:eb:4e:db:7c:e1:5f:63:3d:01:62:fe:
         4e:7a:86:a3:e3:2c:f5:ec:74:3d:d4:f3:f3:e9:7b:c6:67:22:
         84:d6:53:eb:62:3f:96:e6:3a:95:61:92:40:3f:ea:be:aa:c2:
         9b:f9:d7:83:37:b9:fe:3e:a8:40:f7:6f:b8:ca:a9:41:98:68:
         f3:17:39:78:c6:55:55:8d:7b:a6:b8:16:f5:ae:05:58:c4:c6:
         7a:92:9d:e5:fb:e2:6f:73:1d:64:2e:71:1a:f9:63:6f:fb:4c:
         71:23:86:3c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUHtGECS6pq6F6awZWLVL6kiEdIhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBC
MTA0RUYzNTAeFw0yNjAxMjAwMTE0MTFaFw0yNzAxMTkwMTE5MTFaMDMxMTAvBgNV
BAMTKDM1NTg3MUUzREJDREUzOTNFQjQ4RUMwODEyNjdDQTFFMTRGREE3QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGwWVcMg7QyjioJnqaiwlHxOt
Wd41uRHRvx4GaP5jefXC9Q2mkX8f7RStk5p8LHHNVwbfjQoiL4QO/2GwSEabieWY
UOTvz8r5MwnIiA1ubMZQ5OzjTX1lWD7kLxmm/iLDJy9nDhVIlA9LGMhRkh1kXpBf
a7HLLUlNO7XFc9WVUL81+8MzL6qNyN8zgYsdPADeT7dgEcAE1F42j98c7xsf1R+Y
vrqqt5U8Jdth4i535CBLaG9gG9E29I0PTZKSQ6VDWioGgTOQyKErAKGJlO1cbybF
JXfjQ6tWbJ+/fiR7D2FuT8W2a7xOjKaI3uR1kCPTwl3z0YAOh8V4aGca+UH9AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUNVhx49vN45PrSOwIEmfKHhT9p7AwHwYDVR0j
BBgwFoAUvlZLLv8IswB4oZYHMkZIQLEE7zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzM4OTU3MS8xL0JFNTY0QjJFRkYwOEIzMDA3OEExOTYwNzMyNDY0
ODQwQjEwNEVGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBCMTA0RUYzNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMS8zMTM2MzAyZTMz
MzAyZTMxMzUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzUzMTMyMzczNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAeljANBgkqhkiG9w0BAQsFAAOCAQEAJjTabPrxwOBDqBRA0POb
hZQlSoCHUMURCUOS24Fl6YPPpDVh+HoSQVXqxF8aSQao57d+FIo/g514Zaxw4V0c
K8zmCak+I7SV385zzEl25BHsVg9qyYDW/CwvqZz4pLudFrtMQl4WUgfZ6DbNLBhS
yZqUzxhHl/6FQAlHSq43ALXeP5wc+6OvwGl9MFudEQ24drvfsxdqyOtO23zhX2M9
AWL+TnqGo+Ms9ex0PdTz8+l7xmcihNZT62I/luY6lWGSQD/qvqrCm/nXgze5/j6o
QPdvuMqpQZho8xc5eMZVVY17prgW9a4FWMTGepKd5fvib3MdZC5xGvljb/tMcSOG
PA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:01 2026 by rpki-client