This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e35312e302f32342d3234203d3e203633313939.roa
File:                     3133392e3135392e35312e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier:          PVEHr3xLjN/Y+XWHbs6wuYStrC2CXu3JSGQ3cVReSGE=
Subject key identifier:   7A:95:0D:3D:EC:C2:EB:F9:17:25:1B:90:D1:D4:B8:5C:46:40:4F:90
Certificate issuer:       /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial:       30B1E187D95CD5F843A608BB1FADE4D9C29CF8CE
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e35312e302f32342d3234203d3e203633313939.roa
Signing time:             Tue 20 Jan 2026 02:23:49 +0000
ROA not before:           Tue 20 Jan 2026 02:18:49 +0000
ROA not after:            Tue 19 Jan 2027 02:23:49 +0000
asID:                     63199
IP address blocks:        139.159.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 16:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b1:e1:87:d9:5c:d5:f8:43:a6:08:bb:1f:ad:e4:d9:c2:9c:f8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
        Validity
            Not Before: Jan 20 02:18:49 2026 GMT
            Not After : Jan 19 02:23:49 2027 GMT
        Subject: CN=7A950D3DECC2EBF917251B90D1D4B85C46404F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:f0:56:f1:72:d1:e5:90:eb:b9:34:4c:25:
                    8b:30:1a:ce:a3:89:73:92:d2:a6:b3:69:ba:22:b3:
                    0b:ae:82:c2:1c:ff:c6:74:c8:e0:a8:b8:2f:00:11:
                    94:bc:79:e1:59:51:41:d9:87:97:87:b5:ef:c9:5b:
                    54:c2:cd:10:d9:27:37:65:4a:7c:32:97:7f:45:68:
                    19:d4:52:68:fd:4c:bd:58:63:bf:a9:d1:c5:55:3a:
                    1c:42:0d:85:03:0d:da:e7:df:66:46:97:ef:96:c2:
                    4b:29:ec:8c:57:1b:8c:6a:c1:dd:3d:16:e7:85:2b:
                    db:73:cb:b2:ca:a3:eb:13:9d:0b:4e:2a:e8:51:26:
                    cf:8e:48:ff:b1:8d:cc:b4:a6:13:c5:e1:62:5c:18:
                    f5:d8:ca:9a:f5:b7:8c:cf:b5:7f:37:93:ad:75:5e:
                    85:37:32:09:26:df:02:6e:a5:99:f3:68:a5:99:a4:
                    c8:0d:0e:69:b1:04:1a:da:83:ef:c2:36:9b:38:cd:
                    63:0f:15:51:97:38:4e:00:54:21:a0:96:4a:dd:67:
                    3f:36:e5:99:b3:5f:06:94:77:a5:03:09:fd:4a:d9:
                    96:1e:bb:9c:f8:db:88:68:41:54:24:31:67:04:4e:
                    da:d4:9a:1b:5b:80:17:05:eb:01:5c:f3:c8:42:20:
                    a7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:95:0D:3D:EC:C2:EB:F9:17:25:1B:90:D1:D4:B8:5C:46:40:4F:90
            X509v3 Authority Key Identifier:
                keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e35312e302f32342d3234203d3e203633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.159.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:31:2e:a0:cb:bb:d4:3d:65:2b:1a:8a:10:b2:6f:5a:9d:d5:
         e8:c0:ad:24:6f:b1:65:e2:21:c4:ab:36:aa:7a:c2:86:6f:86:
         c6:0f:03:d8:21:4b:f1:4b:22:2b:a4:b5:ca:cf:ca:31:ea:d3:
         77:e3:dc:41:cb:41:0f:de:58:b1:73:56:2e:2a:57:31:4b:75:
         73:d3:80:7c:3f:d1:3d:66:7c:a9:33:90:58:7c:b3:92:a1:2b:
         55:bb:d8:9b:7f:4b:6e:b6:28:a2:60:36:88:d8:a5:6b:9a:8a:
         da:f3:ef:a7:61:3c:11:f3:02:34:9d:2b:ba:b1:33:cd:3a:9d:
         9b:18:ba:06:c6:a6:ac:37:f6:3b:57:e0:98:55:ef:52:2b:81:
         3a:1d:41:5e:f5:98:fd:3f:61:1b:56:8f:c7:43:fa:5d:2a:64:
         83:ce:a0:b0:a9:00:9e:1f:4a:45:22:71:99:d6:c9:87:75:79:
         14:b4:0e:c1:ed:e8:51:6d:fd:6d:6c:58:78:df:cb:5a:d6:af:
         05:c3:2e:89:f9:e2:96:46:06:f4:7c:66:75:ab:2a:83:e4:51:
         7c:3d:7b:62:94:b2:74:14:b0:15:f6:f0:6e:95:71:97:a2:eb:
         8f:49:43:7b:0a:73:66:c7:19:95:d8:ac:c3:2b:c1:5e:ed:28:
         a9:28:72:af
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUMLHhh9lc1fhDpgi7H63k2cKc+M4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE
RUYwMERCQTAeFw0yNjAxMjAwMjE4NDlaFw0yNzAxMTkwMjIzNDlaMDMxMTAvBgNV
BAMTKDdBOTUwRDNERUNDMkVCRjkxNzI1MUI5MEQxRDRCODVDNDY0MDRGOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXfvBW8XLR5ZDruTRMJYswGs6j
iXOS0qazaboiswuugsIc/8Z0yOCouC8AEZS8eeFZUUHZh5eHte/JW1TCzRDZJzdl
Snwyl39FaBnUUmj9TL1YY7+p0cVVOhxCDYUDDdrn32ZGl++Wwksp7IxXG4xqwd09
FueFK9tzy7LKo+sTnQtOKuhRJs+OSP+xjcy0phPF4WJcGPXYypr1t4zPtX83k611
XoU3Mgkm3wJupZnzaKWZpMgNDmmxBBrag+/CNps4zWMPFVGXOE4AVCGglkrdZz82
5ZmzXwaUd6UDCf1K2ZYeu5z424hoQVQkMWcETtrUmhtbgBcF6wFc88hCIKd9AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUepUNPezC6/kXJRuQ0dS4XEZAT5AwHwYDVR0j
BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx
ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODE1NjkzMC8xLzMxMzMzOTJlMzEz
NTM5MmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzMxMzkzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAIufMzANBgkqhkiG9w0BAQsFAAOCAQEAIzEuoMu71D1lKxqKELJvWp3V
6MCtJG+xZeIhxKs2qnrChm+Gxg8D2CFL8UsiK6S1ys/KMerTd+PcQctBD95YsXNW
LipXMUt1c9OAfD/RPWZ8qTOQWHyzkqErVbvYm39LbrYoomA2iNila5qK2vPvp2E8
EfMCNJ0rurEzzTqdmxi6BsamrDf2O1fgmFXvUiuBOh1BXvWY/T9hG1aPx0P6XSpk
g86gsKkAnh9KRSJxmdbJh3V5FLQOwe3oUW39bWxYeN/LWtavBcMuifnilkYG9Hxm
dasqg+RRfD17YpSydBSwFfbwbpVxl6Lrj0lDewpzZscZldiswyvBXu0oqShyrw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:11:16 2026 by rpki-client