This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/3134302e3231302e302e302f32322d3234203d3e20313531323332.roa
File:                     3134302e3231302e302e302f32322d3234203d3e20313531323332.roa (raw, json)
Hash identifier:          /CEV50uKSA8t4vUJn4iuZuu4DI9s5CpeqMgXUGQHvKw=
Subject key identifier:   A4:18:C9:D7:CE:CB:A2:04:6A:A4:1E:FB:53:28:BC:E1:73:F8:43:AB
Certificate issuer:       /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76
Certificate serial:       7636CC81F0D5F120A36FA9594CBEDF500FE48CD8
Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/3134302e3231302e302e302f32322d3234203d3e20313531323332.roa
Signing time:             Tue 20 Jan 2026 02:26:06 +0000
ROA not before:           Tue 20 Jan 2026 02:21:06 +0000
ROA not after:            Tue 19 Jan 2027 02:26:06 +0000
asID:                     151232
IP address blocks:        140.210.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:36:cc:81:f0:d5:f1:20:a3:6f:a9:59:4c:be:df:50:0f:e4:8c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76
        Validity
            Not Before: Jan 20 02:21:06 2026 GMT
            Not After : Jan 19 02:26:06 2027 GMT
        Subject: CN=A418C9D7CECBA2046AA41EFB5328BCE173F843AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:80:e5:98:e9:b8:15:91:8a:ea:41:63:1b:ba:
                    52:92:11:c8:31:db:f8:f1:50:55:b6:ee:2e:90:13:
                    7e:99:0e:f3:b3:d1:2a:2e:b7:05:14:1b:9a:f9:8b:
                    ac:ab:59:9e:bc:81:d7:45:5e:7e:7a:e1:db:e7:e0:
                    e4:35:28:4d:b8:ad:ea:15:7f:da:d9:6d:fb:94:66:
                    fd:58:60:97:c7:fb:2f:43:21:b4:66:92:83:55:89:
                    5f:33:58:ef:37:22:ab:2c:47:15:6c:3b:a6:fd:3f:
                    32:81:b5:20:d4:2b:09:f6:19:48:50:53:a9:ee:5e:
                    b1:58:6e:eb:25:f0:99:b3:78:03:89:7b:56:36:75:
                    39:03:e0:df:83:f2:2d:42:b0:5d:85:37:93:2d:03:
                    5c:8a:bb:cb:31:ce:ae:fe:cd:f3:76:e0:a9:ac:79:
                    c7:e8:d2:d0:47:77:57:74:a1:87:43:df:8e:66:17:
                    eb:5d:dd:d9:3f:36:2e:90:b9:78:27:70:4b:8a:ab:
                    6f:87:a8:76:d6:54:f2:86:79:e8:a8:49:bc:7f:59:
                    07:96:da:58:24:f1:ff:6d:96:94:20:c7:bf:9e:13:
                    7a:99:52:65:33:45:60:f6:cc:f5:af:7c:f6:0d:ee:
                    bf:a4:7e:f1:92:a9:b5:ac:9d:00:cd:e9:0e:86:70:
                    ac:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:18:C9:D7:CE:CB:A2:04:6A:A4:1E:FB:53:28:BC:E1:73:F8:43:AB
            X509v3 Authority Key Identifier:
                keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/3134302e3231302e302e302f32322d3234203d3e20313531323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:41:54:23:24:8d:0e:c1:72:ce:98:08:68:3b:30:5e:cc:82:
         19:2b:91:ea:f9:55:a9:59:4c:07:10:7f:6f:96:63:54:c6:d9:
         e9:a8:c1:15:f9:92:ff:4c:28:69:5a:7b:81:57:eb:21:53:06:
         83:9f:74:ec:ca:25:45:af:a2:18:75:42:9c:60:78:c0:5e:63:
         6e:fe:3f:91:ea:e5:7f:66:77:47:7c:32:8c:87:dc:ee:fb:6a:
         54:97:0f:d5:80:6f:8d:85:e2:4f:90:55:2f:ba:ba:68:36:0f:
         20:55:f8:eb:90:cb:f9:a6:6a:b8:27:be:48:96:ca:d8:24:29:
         41:5b:c9:b8:d2:c6:2b:9a:7b:a0:d9:e6:38:ce:59:ac:8f:a3:
         a5:8b:b9:f8:d9:87:4a:1e:03:57:66:d7:22:88:e5:ac:03:24:
         c1:48:0e:da:0e:43:08:7e:68:12:a1:51:8f:2f:f4:cd:f7:76:
         24:b2:a2:41:97:74:f0:bf:bc:67:7d:04:2f:e0:59:d2:c5:72:
         22:86:1d:35:26:6d:3d:1f:a8:e2:77:7a:60:83:26:7b:e4:f5:
         9b:28:25:a2:16:61:78:a2:cc:45:05:5b:29:73:49:9b:ee:5e:
         bb:6b:74:ff:78:c7:a4:8f:ad:61:35:50:16:96:9e:bc:d5:de:
         e9:a5:58:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:00:20 2026 by rpki-client