This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa
File:                     3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (raw, json)
Hash identifier:          nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=
Subject key identifier:   FB:64:D5:41:9D:8D:BB:C5:18:FF:69:EF:26:47:87:38:D6:31:EA:F9
Certificate issuer:       /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Certificate serial:       266C8E7E1B0FD28E999254BEF9D8DEED0A4C9CDF
Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa
Signing time:             Tue 20 Jan 2026 02:07:17 +0000
ROA not before:           Tue 20 Jan 2026 02:02:17 +0000
ROA not after:            Tue 19 Jan 2027 02:07:17 +0000
asID:                     139187
IP address blocks:        165.101.71.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6c:8e:7e:1b:0f:d2:8e:99:92:54:be:f9:d8:de:ed:0a:4c:9c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
        Validity
            Not Before: Jan 20 02:02:17 2026 GMT
            Not After : Jan 19 02:07:17 2027 GMT
        Subject: CN=FB64D5419D8DBBC518FF69EF26478738D631EAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:76:37:04:4f:a5:fe:73:34:bf:81:63:98:
                    e2:b2:6e:b1:25:0f:6e:f4:ab:ba:4b:e8:c1:e1:37:
                    e4:ee:f0:b1:ec:41:75:68:9b:dc:35:11:93:a6:2b:
                    6d:9a:0a:9f:7b:25:0a:47:09:f5:a3:cb:c5:4e:52:
                    24:5c:78:da:df:a5:67:06:79:ac:89:21:28:23:9e:
                    d9:5f:d0:ed:bd:51:58:01:26:c3:25:bb:d4:e7:bf:
                    dc:11:dc:70:f1:c5:7d:2b:47:ae:6d:8a:48:d8:f6:
                    8c:a3:1f:d0:b2:8f:a4:fa:4a:e3:fc:ee:69:32:cd:
                    6a:f2:7c:e7:7a:13:c6:8d:c0:c3:31:d9:00:a9:49:
                    bc:72:92:27:d8:c3:35:d6:dc:93:34:ae:df:fa:b0:
                    53:0c:49:47:e5:82:17:14:0d:eb:14:db:1a:84:9e:
                    ff:1b:38:bf:59:79:f0:aa:0b:98:48:7a:ed:94:15:
                    5b:e6:aa:ac:a6:c5:55:5b:0c:7f:04:12:7c:9f:b1:
                    e3:dd:54:8e:92:11:d6:d9:6a:17:3f:b4:9e:d0:88:
                    c5:61:96:ae:5b:99:1c:2e:39:d3:56:18:ce:43:df:
                    3b:fe:2e:ea:1f:1f:67:d9:e2:44:06:67:1e:08:24:
                    0f:91:f8:a7:8d:66:8f:88:3f:ef:f1:a8:ec:f3:59:
                    21:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:64:D5:41:9D:8D:BB:C5:18:FF:69:EF:26:47:87:38:D6:31:EA:F9
            X509v3 Authority Key Identifier:
                keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:2c:64:8c:9e:54:6e:ed:a2:23:b6:01:a4:1c:da:8f:97:b4:
         a7:a7:0f:2b:e1:0a:b1:62:13:d3:0d:b2:39:3c:18:7e:92:7d:
         48:96:e9:a6:0d:dc:d4:b5:85:81:6a:9f:50:f2:f1:2d:b2:33:
         8a:2c:be:6d:4b:25:5f:76:35:83:52:65:a5:39:34:1a:6b:c5:
         88:cd:02:f3:bf:1c:6c:e3:55:48:1a:94:4f:8a:a9:09:53:8a:
         a1:ae:71:7c:a2:8c:43:ee:d0:54:5d:81:35:f4:b5:e1:0b:06:
         23:ff:23:fe:12:12:85:e3:23:f5:31:ef:04:26:ad:09:5e:f6:
         a1:8c:b6:ba:65:40:39:df:3f:25:e7:f6:98:65:19:88:6c:bb:
         3a:14:c0:07:41:d0:44:0a:b0:cc:3b:93:e8:c7:3e:8c:d7:66:
         99:a2:4b:03:8b:b5:94:8e:12:06:48:59:85:4f:0f:7c:bc:a3:
         0e:4a:01:0d:6d:d9:87:13:d3:57:d0:28:18:a2:c6:2a:ef:11:
         a6:f5:53:ac:05:ef:c8:3b:c5:8a:97:40:11:82:e5:f3:28:d0:
         25:23:e1:b0:6b:bd:9f:4a:0f:39:9c:1f:76:f8:c3:6d:10:e1:
         eb:ef:5a:31:c3:36:95:41:2b:f6:99:f7:7b:9a:9c:e3:4e:64:
         f2:ce:cf:91
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUJmyOfhsP0o6ZklS++dje7QpMnN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB
MkQ4Qjg1MjAeFw0yNjAxMjAwMjAyMTdaFw0yNzAxMTkwMjA3MTdaMDMxMTAvBgNV
BAMTKEZCNjRENTQxOUQ4REJCQzUxOEZGNjlFRjI2NDc4NzM4RDYzMUVBRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqXY3BE+l/nM0v4FjmOKybrEl
D270q7pL6MHhN+Tu8LHsQXVom9w1EZOmK22aCp97JQpHCfWjy8VOUiRceNrfpWcG
eayJISgjntlf0O29UVgBJsMlu9Tnv9wR3HDxxX0rR65tikjY9oyjH9Cyj6T6SuP8
7mkyzWryfOd6E8aNwMMx2QCpSbxykifYwzXW3JM0rt/6sFMMSUflghcUDesU2xqE
nv8bOL9ZefCqC5hIeu2UFVvmqqymxVVbDH8EEnyfsePdVI6SEdbZahc/tJ7QiMVh
lq5bmRwuOdNWGM5D3zv+LuofH2fZ4kQGZx4IJA+R+KeNZo+IP+/xqOzzWSEzAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU+2TVQZ2Nu8UY/2nvJkeHONYx6vkwHwYDVR0j
BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2
RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMS8zMTM2MzUyZTMx
MzAzMTJlMzczMTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzOTMxMzgzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKVlRzANBgkqhkiG9w0BAQsFAAOCAQEAoixkjJ5Ubu2iI7YBpBza
j5e0p6cPK+EKsWIT0w2yOTwYfpJ9SJbppg3c1LWFgWqfUPLxLbIziiy+bUslX3Y1
g1JlpTk0GmvFiM0C878cbONVSBqUT4qpCVOKoa5xfKKMQ+7QVF2BNfS14QsGI/8j
/hISheMj9THvBCatCV72oYy2umVAOd8/Jef2mGUZiGy7OhTAB0HQRAqwzDuT6Mc+
jNdmmaJLA4u1lI4SBkhZhU8PfLyjDkoBDW3ZhxPTV9AoGKLGKu8RpvVTrAXvyDvF
ipdAEYLl8yjQJSPhsGu9n0oPOZwfdvjDbRDh6+9aMcM2lUEr9pn3e5qc405k8s7P
kQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:52:53 2026 by rpki-client