This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa
File:                     3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (raw, json)
Hash identifier:          YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=
Subject key identifier:   09:F5:43:EA:FB:B9:87:09:E7:8A:95:AE:40:34:4A:0B:54:BB:23:8D
Certificate issuer:       /CN=BE564B2EFF08B30078A1960732464840B104EF35
Certificate serial:       28F6E31BB84A3DE7539466352854C1C94212517A
Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa
Signing time:             Tue 20 Jan 2026 01:19:11 +0000
ROA not before:           Tue 20 Jan 2026 01:14:11 +0000
ROA not after:            Tue 19 Jan 2027 01:19:11 +0000
asID:                     151277
IP address blocks:        160.30.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f6:e3:1b:b8:4a:3d:e7:53:94:66:35:28:54:c1:c9:42:12:51:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35
        Validity
            Not Before: Jan 20 01:14:11 2026 GMT
            Not After : Jan 19 01:19:11 2027 GMT
        Subject: CN=09F543EAFBB98709E78A95AE40344A0B54BB238D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4e:c6:53:93:8a:b9:c7:33:96:e4:0c:2f:85:
                    bf:41:a5:25:ff:ff:6d:80:e5:99:ec:fb:31:b6:a1:
                    dd:df:96:70:c1:62:f6:21:f7:9a:5b:41:bc:4d:1d:
                    28:ed:be:9b:11:e8:27:e3:a2:c6:40:6e:2e:17:12:
                    c1:f1:59:5a:72:8b:38:0e:2e:84:91:ac:a4:14:e0:
                    e4:17:1c:61:37:49:00:e3:54:73:74:61:81:94:93:
                    42:50:3b:88:c6:04:2d:96:ce:30:5e:be:0a:7b:61:
                    03:c4:3a:4f:51:1b:98:ac:54:46:b5:39:21:ec:cf:
                    c6:8d:06:3e:71:d1:d4:3e:12:47:42:14:0b:aa:cd:
                    84:5d:59:be:02:cb:25:7e:12:70:a5:6f:08:1b:5a:
                    d8:2d:0b:55:5a:af:65:cc:e0:e5:73:d8:3e:04:ae:
                    54:7e:48:d1:28:47:c4:fb:35:45:04:d4:1c:89:40:
                    9b:37:0e:7a:01:23:05:86:62:5c:9e:1c:20:40:2f:
                    56:9d:21:4b:54:7f:b2:ad:3b:7b:a2:37:b2:5f:7d:
                    f1:1a:26:78:51:1b:9e:0f:78:bc:be:07:5e:71:31:
                    d9:7e:c8:6c:8b:a0:59:44:aa:a3:b2:7d:1f:5f:e8:
                    cf:03:51:ea:31:c3:d2:e5:e1:12:29:85:6a:d9:2a:
                    0d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F5:43:EA:FB:B9:87:09:E7:8A:95:AE:40:34:4A:0B:54:BB:23:8D
            X509v3 Authority Key Identifier:
                keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:a8:ee:5d:b5:c8:a0:d8:d9:1b:45:94:d0:fa:d0:b3:8b:ec:
         07:8d:1f:fc:66:ea:2c:2a:6e:33:da:56:75:4a:55:f0:c1:9b:
         ed:ff:72:2c:c8:52:5e:cb:2a:96:a6:1a:20:60:c9:a0:c9:36:
         15:06:5f:2e:05:28:3b:9a:fe:7a:28:ea:4e:29:20:57:0e:88:
         89:23:8c:1f:49:b3:73:e7:4a:5e:74:21:25:8a:c9:9e:00:8e:
         d7:ff:c5:78:4c:b7:e0:04:8a:fe:65:a7:53:b9:0e:92:e5:65:
         21:a1:44:86:48:09:ef:ea:20:29:6e:93:c7:f9:55:c9:38:6f:
         c8:ae:e9:25:67:18:51:ba:f9:e6:37:e4:ee:4f:b9:a6:02:f5:
         81:83:85:ef:a6:36:c1:46:0c:01:b8:91:f0:78:16:36:63:20:
         a0:34:fe:8c:41:3b:ae:f0:a3:03:26:8c:d7:bb:89:5b:c9:c4:
         6e:f4:f4:c3:4f:04:3b:2f:89:b1:62:80:56:8c:90:6b:d3:9d:
         45:b0:09:4a:93:ec:28:5e:f0:33:aa:8c:ec:f3:a2:34:08:28:
         d0:fa:5a:ee:48:d3:47:59:49:f2:91:71:94:ed:b8:58:6f:e3:
         05:62:4d:c3:fb:81:2d:18:9a:3a:f4:52:20:31:25:40:61:76:
         17:ae:1c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:55:32 2026 by rpki-client