This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa
File:                     3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (raw, json)
Hash identifier:          fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=
Subject key identifier:   1B:42:45:E5:4E:DF:EA:56:EF:7C:5B:55:6D:4E:7D:62:0B:EF:7B:FD
Certificate issuer:       /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88
Certificate serial:       13160ED662C26CEEB3FB0A77B6A269D01008C9D8
Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa
Signing time:             Tue 20 Jan 2026 02:13:11 +0000
ROA not before:           Tue 20 Jan 2026 02:08:11 +0000
ROA not after:            Tue 19 Jan 2027 02:13:11 +0000
asID:                     131511
IP address blocks:        157.10.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:16:0e:d6:62:c2:6c:ee:b3:fb:0a:77:b6:a2:69:d0:10:08:c9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88
        Validity
            Not Before: Jan 20 02:08:11 2026 GMT
            Not After : Jan 19 02:13:11 2027 GMT
        Subject: CN=1B4245E54EDFEA56EF7C5B556D4E7D620BEF7BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2f:d0:4c:ee:6f:9f:67:fe:d4:c1:0e:56:b6:
                    af:d2:46:18:2b:ad:0a:0a:61:f7:30:f0:12:6a:72:
                    9c:51:e8:66:a2:f5:31:da:47:b9:80:55:d3:40:ef:
                    dd:a2:e7:be:28:76:0c:7b:8e:de:c1:57:5c:cc:b4:
                    a2:79:ba:de:15:94:e5:82:35:cd:f7:fe:0b:3b:2d:
                    3c:69:f0:8d:92:d1:19:37:81:59:2a:cb:32:2e:48:
                    25:46:c8:e6:a6:df:d5:11:f7:98:80:ef:92:3f:f0:
                    c3:19:bc:94:7c:e6:af:66:9f:43:ef:d6:90:87:dc:
                    cb:cb:85:22:70:d5:81:14:52:7e:15:ef:33:55:cf:
                    90:2e:11:01:e3:28:cc:36:82:a9:59:72:61:33:6c:
                    c6:51:76:1d:e6:9a:94:9f:ed:a8:b8:0a:96:d5:e0:
                    22:05:e3:8c:ea:71:32:dc:34:ab:43:65:b9:21:c2:
                    db:7b:47:32:df:16:90:1a:d0:95:56:83:27:9a:05:
                    05:3a:3f:63:b3:dd:78:cd:88:8e:5f:ca:fc:18:ca:
                    f6:e3:48:96:d1:6d:3f:06:73:56:2f:47:47:82:7d:
                    5f:20:ad:0e:e1:22:99:3b:1b:74:ff:17:52:61:39:
                    66:25:ae:42:d7:81:ba:fe:f6:99:2c:f1:20:0a:69:
                    ec:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:42:45:E5:4E:DF:EA:56:EF:7C:5B:55:6D:4E:7D:62:0B:EF:7B:FD
            X509v3 Authority Key Identifier:
                keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:e1:c5:d7:db:68:22:23:65:87:90:aa:66:aa:19:50:46:f9:
         57:71:73:88:a7:a2:54:26:99:d4:d7:3d:d8:d1:ca:08:a5:9a:
         37:0f:49:b0:ec:0c:44:2a:ff:a4:fb:3a:d5:2b:ec:4d:f3:f0:
         53:f8:88:fb:b7:d5:d8:9e:cc:94:6d:25:cd:e4:c7:1b:8e:22:
         cd:8f:76:34:2d:58:b1:e1:ac:d4:07:d9:75:e8:e2:9f:3c:8e:
         85:6d:32:1d:c9:48:fb:71:ab:88:59:24:a3:e6:48:1e:d9:f8:
         4b:26:71:5f:de:69:63:e7:29:8c:09:c0:4c:fd:e7:c3:fc:1f:
         c9:0f:5b:12:c1:dc:d7:47:ad:e8:ba:b1:e7:68:ec:45:63:bb:
         cc:62:5c:00:85:2a:4a:98:2b:ec:ed:9a:fb:68:05:96:0f:4d:
         38:f9:12:64:fc:29:d7:e7:a4:ef:8e:4d:58:1f:1f:54:61:4d:
         4d:55:30:f5:c0:1d:f0:93:03:79:20:c9:7b:20:f1:95:c0:88:
         58:74:dd:53:cb:a2:7b:c6:6d:3d:b1:e1:eb:7e:96:c8:c6:78:
         4e:48:c5:9f:a6:d1:4b:1d:5f:aa:eb:fd:7f:9e:6a:84:41:d5:
         76:9c:cd:76:c6:31:f3:a3:70:85:81:a9:14:53:fd:c2:96:05:
         dc:57:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:55:24 2026 by rpki-client