This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e35332e302f32342d3234203d3e20313334373632.roa
File:                     34332e3232362e35332e302f32342d3234203d3e20313334373632.roa (raw, json)
Hash identifier:          /H/QELj8D79Edjy+iwlVUXEOh5NMYm9O9vM8ysBQN6w=
Subject key identifier:   0B:03:92:9E:14:4B:68:F6:9A:F4:8D:17:17:21:B0:10:E5:EE:89:DB
Certificate issuer:       /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Certificate serial:       7E2C659614F4B04C3FD5572202B7752BBF41CF1F
Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e35332e302f32342d3234203d3e20313334373632.roa
Signing time:             Tue 20 Jan 2026 02:07:14 +0000
ROA not before:           Tue 20 Jan 2026 02:02:14 +0000
ROA not after:            Tue 19 Jan 2027 02:07:14 +0000
asID:                     134762
IP address blocks:        43.226.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 18:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2c:65:96:14:f4:b0:4c:3f:d5:57:22:02:b7:75:2b:bf:41:cf:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
        Validity
            Not Before: Jan 20 02:02:14 2026 GMT
            Not After : Jan 19 02:07:14 2027 GMT
        Subject: CN=0B03929E144B68F69AF48D171721B010E5EE89DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:fd:6c:9c:b9:06:17:80:1a:4a:93:a4:6a:
                    f3:d0:74:65:b4:e7:51:7a:eb:90:ca:0b:54:8a:da:
                    82:04:53:2b:69:66:8b:5b:c2:0f:22:22:b2:be:50:
                    fb:54:15:ad:0a:3d:c1:22:47:0d:be:c2:ed:c0:fc:
                    56:43:58:5e:77:e0:62:d3:5c:39:74:92:f4:34:8a:
                    b4:53:7f:19:f7:bb:f4:1d:db:af:5f:ff:89:26:ed:
                    6a:e0:1e:33:cd:38:1e:90:cc:a0:f7:a5:63:7f:7e:
                    fa:70:34:21:c7:63:20:dc:79:54:bf:4d:65:21:22:
                    be:f7:11:fe:6a:94:c2:c9:0c:28:72:09:f3:21:08:
                    ce:c0:e9:99:31:83:be:76:4e:29:2a:39:c6:1e:ca:
                    17:39:2f:19:18:ad:36:f8:73:d1:0c:56:20:d3:10:
                    ba:58:21:42:a8:b7:46:ca:4f:d9:6c:44:8c:f3:83:
                    b7:29:6a:fd:11:ba:b9:3b:de:de:9c:e1:74:c6:46:
                    87:53:05:60:3b:3e:bf:40:51:c7:e3:45:29:2e:41:
                    d3:ef:89:4f:28:23:99:61:f6:cf:a5:97:af:4c:6a:
                    e3:b2:1b:b2:c3:23:27:c5:f7:d8:ab:9f:3c:ae:c6:
                    18:44:11:be:6f:91:ec:2a:ac:9a:ba:55:89:2b:d8:
                    57:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:03:92:9E:14:4B:68:F6:9A:F4:8D:17:17:21:B0:10:E5:EE:89:DB
            X509v3 Authority Key Identifier:
                keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/34332e3232362e35332e302f32342d3234203d3e20313334373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:f2:3b:ea:c3:62:98:aa:ce:3d:3f:11:ff:63:d3:84:23:92:
         f7:2a:e6:90:cc:68:cf:0d:d3:97:ed:a4:94:ed:4e:58:da:2e:
         4c:6e:a9:65:d8:16:dd:0f:2f:43:aa:ad:77:fc:cd:57:3a:ff:
         fa:d4:d4:3a:2a:29:5d:d6:f0:db:6d:10:6c:b5:1b:16:88:17:
         3c:17:7d:09:fa:37:5c:7b:c7:fb:6d:ef:6e:b0:4f:b5:4c:1b:
         7f:67:a4:26:3f:1d:41:75:ce:2e:a0:e4:f3:8d:22:c9:c1:74:
         6d:13:f3:ad:4e:5a:90:61:8e:99:84:c3:cc:c5:a7:9f:cf:86:
         8d:4d:9a:b1:5c:43:bc:71:f4:90:34:fa:1b:ce:99:30:e8:27:
         7a:f6:b8:0a:5b:c9:06:7d:ec:4b:22:15:65:1e:5f:da:d3:8c:
         98:59:ed:ab:58:06:b0:6c:ef:9f:c7:40:68:70:52:d3:7a:fd:
         d9:37:64:bf:cb:1e:29:ea:46:10:fa:e1:ee:0c:10:f9:e5:47:
         5f:2e:e7:c0:2e:89:bc:c5:54:89:43:2c:23:61:db:05:67:9f:
         c9:78:34:6f:50:60:d3:7c:3f:d2:c4:9b:93:15:05:47:65:39:
         6b:cb:d0:0e:73:81:29:e5:c5:9a:35:17:51:9f:60:2c:46:c8:
         82:d8:ae:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:54 2026 by rpki-client