This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa
File:                     3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (raw, json)
Hash identifier:          OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=
Subject key identifier:   EC:F6:E9:66:1F:C9:1A:D6:33:F9:C2:89:12:1C:82:BA:DD:FE:91:1E
Certificate issuer:       /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Certificate serial:       64EFA65139CDB00879D67772D0EFE0879A40C5CA
Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa
Signing time:             Tue 20 Jan 2026 02:07:16 +0000
ROA not before:           Tue 20 Jan 2026 02:02:16 +0000
ROA not after:            Tue 19 Jan 2027 02:07:16 +0000
asID:                     137264
IP address blocks:        165.101.70.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 20:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ef:a6:51:39:cd:b0:08:79:d6:77:72:d0:ef:e0:87:9a:40:c5:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
        Validity
            Not Before: Jan 20 02:02:16 2026 GMT
            Not After : Jan 19 02:07:16 2027 GMT
        Subject: CN=ECF6E9661FC91AD633F9C289121C82BADDFE911E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:08:b6:23:45:cd:3f:19:22:fe:46:ff:20:
                    ad:8e:19:46:86:dd:c8:24:1b:36:8d:92:a8:b0:fb:
                    fb:bf:c4:7d:01:4e:46:b2:de:f5:8e:c4:d7:c7:c3:
                    11:46:17:34:da:2c:1c:59:d6:06:55:f8:f0:2c:0a:
                    c7:6f:69:a8:0c:80:c1:cc:74:0c:a0:4f:24:4d:43:
                    c7:c3:39:96:11:97:e9:46:e4:46:92:68:36:64:69:
                    b9:e7:94:73:b3:9d:71:01:42:47:6d:06:07:29:db:
                    a9:57:f7:90:f6:16:0b:05:c2:aa:f5:c7:f2:79:63:
                    f3:18:c8:82:d1:eb:b9:cc:5f:28:3b:16:07:72:e6:
                    ed:11:0d:8b:0b:96:b3:37:9f:77:8b:da:1b:1f:04:
                    67:e1:71:44:41:0e:e0:f6:1e:3b:5b:47:d7:fb:97:
                    04:ff:fd:df:30:92:09:7d:ba:5a:3d:33:61:a6:bd:
                    56:66:20:7c:93:ad:f2:4c:a2:53:65:09:b4:1e:87:
                    e1:a7:6d:13:26:3e:a6:b7:50:04:63:8d:8e:49:59:
                    3a:aa:4c:ff:94:d2:7f:12:3f:b6:04:64:2e:60:fc:
                    a8:57:0e:1b:88:1b:85:da:a1:d1:ca:af:42:8d:e4:
                    e6:bd:34:d9:b2:01:30:db:7a:1c:34:70:91:03:31:
                    a4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F6:E9:66:1F:C9:1A:D6:33:F9:C2:89:12:1C:82:BA:DD:FE:91:1E
            X509v3 Authority Key Identifier:
                keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:b0:f5:cc:2e:ca:4a:0d:50:f1:aa:47:4a:05:d5:7f:5c:61:
         1d:dc:c4:b9:d1:43:b9:8e:58:30:74:88:2e:53:4f:47:11:cc:
         e7:d5:f9:93:b4:01:f0:78:eb:6b:f2:f2:39:04:80:db:01:6e:
         05:be:ab:56:f4:56:ba:55:56:54:59:b5:19:c4:68:63:ae:e5:
         8c:1c:85:07:d9:72:de:46:04:0b:de:5b:da:99:3c:3a:53:7d:
         d6:3c:0c:ff:53:de:6f:46:b9:fb:fd:56:2d:87:4e:ab:c0:e0:
         b9:5e:c6:d3:b0:e2:78:03:f9:bc:9a:70:f2:ea:23:ea:16:04:
         3f:09:9a:86:c0:79:3f:fb:e2:7a:05:ea:99:46:5d:ea:0a:62:
         84:bc:94:ae:27:72:85:ce:a7:71:6b:7e:1f:35:bd:9b:55:55:
         db:36:37:84:fe:db:7e:4d:84:ce:d6:59:34:c2:80:0f:00:3c:
         e4:2d:69:de:b1:a1:0a:ad:96:87:2d:df:1f:3a:b8:2a:af:06:
         4f:91:20:e5:53:df:f3:8a:4b:c0:d5:80:1c:d6:b3:85:af:33:
         8a:f3:10:74:db:08:6c:b2:ff:1c:e2:7f:8d:5c:fc:ce:3f:25:
         48:20:0b:8e:6f:2c:d0:0a:96:77:a7:e3:ff:2a:fe:04:83:c8:
         02:ed:4d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:20:43 2026 by rpki-client