This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e3134342e302f32302d3230203d3e20313334373632.roa
File:                     34332e3232362e3134342e302f32302d3230203d3e20313334373632.roa (raw, json)
Hash identifier:          TEmvnV0em0Malf//5tBhQBS08ooO1J9DkWsbmMXss94=
Subject key identifier:   15:35:D1:48:ED:20:FC:A5:84:E3:E3:6E:E9:C2:BA:5F:65:04:D3:37
Certificate issuer:       /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Certificate serial:       490119AA3EED71E7C9148BEC7D501318A6637053
Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e3134342e302f32302d3230203d3e20313334373632.roa
Signing time:             Tue 20 Jan 2026 02:07:14 +0000
ROA not before:           Tue 20 Jan 2026 02:02:14 +0000
ROA not after:            Tue 19 Jan 2027 02:07:14 +0000
asID:                     134762
IP address blocks:        43.226.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 18:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:01:19:aa:3e:ed:71:e7:c9:14:8b:ec:7d:50:13:18:a6:63:70:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
        Validity
            Not Before: Jan 20 02:02:14 2026 GMT
            Not After : Jan 19 02:07:14 2027 GMT
        Subject: CN=1535D148ED20FCA584E3E36EE9C2BA5F6504D337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:c1:88:cf:70:92:d6:fc:50:3f:cd:f4:4f:
                    22:9e:e8:9a:72:32:e9:18:a7:dc:4d:ee:92:fb:07:
                    98:0a:18:89:05:17:73:2c:16:7c:8b:82:de:e3:20:
                    9a:28:24:7e:4c:71:32:9a:26:67:01:7c:f6:64:09:
                    9a:71:69:59:55:db:8d:3f:fe:85:ce:2a:b8:ad:50:
                    52:45:45:58:88:c6:e4:de:f2:45:d7:7e:76:ee:c8:
                    59:05:a8:30:59:61:cd:a1:db:c7:cc:59:2e:e5:ec:
                    a6:8d:ff:68:06:97:ed:f8:bf:b3:e0:fa:d7:46:31:
                    a8:6c:a5:9f:79:8e:ba:b2:67:e2:bf:15:80:5a:ee:
                    42:b2:aa:d4:f6:29:ff:fb:c9:8c:9e:3e:1a:a4:ed:
                    9e:bc:f2:8a:14:75:0f:11:60:58:7c:a9:fa:3d:36:
                    c4:dc:c1:29:9f:79:36:37:8f:be:e0:a0:45:e3:39:
                    24:e4:1e:d3:74:d8:46:c9:ae:61:10:ec:69:ff:3f:
                    c3:67:d9:e3:c9:e2:9c:b0:e0:f0:97:90:8b:fc:af:
                    15:ee:c8:84:a1:97:30:45:b9:98:01:da:01:bb:c6:
                    59:64:a3:98:b9:3b:04:90:1b:8b:ba:30:ab:f1:9b:
                    3d:47:52:99:9e:88:bc:4a:82:1a:41:7c:4f:4e:5b:
                    dd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:35:D1:48:ED:20:FC:A5:84:E3:E3:6E:E9:C2:BA:5F:65:04:D3:37
            X509v3 Authority Key Identifier:
                keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e3134342e302f32302d3230203d3e20313334373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:20:d5:9f:8e:0f:63:19:15:b6:f1:1d:f1:95:dc:be:47:
         46:20:ad:6c:40:16:d9:23:98:19:d1:ff:36:7a:fb:ce:b3:68:
         69:b7:2e:e4:f1:20:33:77:c4:cc:5d:c3:19:dd:5e:61:fb:98:
         e4:58:8a:2f:9c:7e:5f:40:d8:d8:75:17:1f:2f:0b:2b:33:af:
         06:1b:f1:46:04:67:2c:de:21:b1:25:64:e9:13:dc:32:71:ee:
         23:f3:89:2f:80:a0:b9:77:b9:af:91:88:f5:e8:45:9d:fb:55:
         26:7b:14:dc:f1:0a:69:cb:95:57:a3:6f:5e:5f:ab:34:f2:81:
         4f:88:7b:1b:89:48:59:c6:7b:6e:4f:b7:b2:b6:8a:a7:4f:2b:
         bb:f5:54:3a:da:3e:0c:9f:81:a2:99:1f:69:9a:f9:b5:86:91:
         c2:21:b1:12:82:c5:2c:f3:0d:bd:fa:9b:7a:aa:02:c2:8b:aa:
         35:57:14:0d:31:2c:9e:b1:6c:2d:bb:78:41:e6:90:0d:14:3d:
         37:aa:40:c6:67:30:c1:1b:3f:34:57:a4:f5:d5:82:6c:a9:9c:
         20:41:c6:54:11:eb:33:06:87:51:a1:f8:a0:e6:37:8f:d1:3b:
         d0:16:10:5d:a8:6d:ab:d6:2f:47:93:ee:fb:d9:09:e3:e1:f7:
         66:4b:fb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:14:08 2026 by rpki-client