This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3131352e3232382e302f32322d3234203d3e20313332333639.roa
File:                     34352e3131352e3232382e302f32322d3234203d3e20313332333639.roa (raw, json)
Hash identifier:          Pg8t0dpy+alNQ7GNJZSlH3B+oaIcPpb23mHndUI5HFM=
Subject key identifier:   4A:DE:8F:9C:2D:79:31:F2:0D:93:68:F6:BB:BC:9B:1E:A9:48:8A:33
Certificate issuer:       /CN=7BE06B4744FCF211D039415BB8B17941EC767358
Certificate serial:       17045A8D1B3511EA1C70A794CC06B9FA5EC15C7E
Authority key identifier: 7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3131352e3232382e302f32322d3234203d3e20313332333639.roa
Signing time:             Tue 20 Jan 2026 02:25:02 +0000
ROA not before:           Tue 20 Jan 2026 02:20:02 +0000
ROA not after:            Tue 19 Jan 2027 02:25:02 +0000
asID:                     132369
IP address blocks:        45.115.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:04:5a:8d:1b:35:11:ea:1c:70:a7:94:cc:06:b9:fa:5e:c1:5c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE06B4744FCF211D039415BB8B17941EC767358
        Validity
            Not Before: Jan 20 02:20:02 2026 GMT
            Not After : Jan 19 02:25:02 2027 GMT
        Subject: CN=4ADE8F9C2D7931F20D9368F6BBBC9B1EA9488A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8f:7b:fb:79:22:73:31:46:37:77:52:72:77:
                    92:ad:2b:87:46:ba:ad:f8:ac:35:43:a8:86:8d:b7:
                    37:6f:e3:c9:58:e6:59:64:b7:48:03:13:29:d5:3c:
                    a3:db:d0:1f:08:d4:e9:4b:c7:45:2b:ca:fc:67:e0:
                    50:90:b4:8d:27:61:00:14:34:32:66:81:96:8a:15:
                    ec:a5:3e:4a:d7:d0:b4:24:be:0f:33:f7:72:a4:0a:
                    e7:f0:54:39:b4:eb:86:3a:55:7e:fd:57:b2:7b:73:
                    42:1c:1b:f2:e2:2c:bb:63:b7:1c:1b:76:e9:fb:11:
                    dd:cc:7a:5c:9e:f1:0c:9b:8c:e2:30:a9:9e:b9:85:
                    e7:f5:ab:79:a8:6a:d6:b7:12:b4:ed:c9:a6:6e:19:
                    75:3f:a8:5f:a2:59:8a:b6:30:3e:46:de:83:f8:e2:
                    c2:29:f7:6f:fa:7b:b4:6e:97:63:be:47:92:b3:85:
                    25:25:4b:4d:0a:2b:fd:91:96:3d:a8:65:07:01:37:
                    0e:86:dd:12:f7:73:8c:11:79:63:e9:d7:98:b3:91:
                    d7:9c:0d:b7:d5:b6:82:31:b5:de:72:7d:12:58:2e:
                    ab:73:1c:0c:9f:87:38:3d:fc:9d:58:17:5f:83:57:
                    1c:c0:a9:24:89:b5:69:49:b6:67:ca:3e:70:c2:26:
                    b1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DE:8F:9C:2D:79:31:F2:0D:93:68:F6:BB:BC:9B:1E:A9:48:8A:33
            X509v3 Authority Key Identifier:
                keyid:7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3131352e3232382e302f32322d3234203d3e20313332333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:f2:8d:a3:fa:2c:cc:72:b6:a3:c4:bb:c4:7d:00:8a:17:9c:
         fb:ed:b2:0f:fa:c4:42:b6:e0:3e:52:17:f1:3a:c8:67:30:1c:
         07:63:f4:e4:a0:f0:25:fd:a4:d8:0a:e3:d5:9b:49:3f:63:99:
         ec:90:8f:20:76:f6:03:ef:3f:29:a8:cd:53:35:e7:e9:79:33:
         29:fd:0f:84:fb:1b:0e:8d:a5:25:79:bc:1b:11:d7:76:0d:cf:
         6e:19:3a:97:fa:af:aa:46:e2:2d:13:60:c8:9e:8f:d4:b1:83:
         bb:5a:68:a3:7f:15:06:5c:b9:f8:0c:86:82:ef:6d:65:e7:05:
         5a:ac:c7:ab:9d:6b:1c:ef:70:48:d6:b8:37:9c:f9:0f:3d:91:
         a7:8e:a1:85:47:53:8d:21:61:48:8a:7b:87:ea:c4:de:6a:45:
         a8:18:49:cf:58:8b:ac:13:bd:d3:10:10:39:5b:a3:b0:ec:ce:
         fc:8f:43:58:fe:7f:f9:8a:4c:d6:0d:04:ab:3d:a7:d8:fb:c9:
         87:f9:b8:d6:7c:d5:be:34:a2:74:df:6d:95:9f:2c:7e:71:42:
         a4:55:82:b7:94:40:e8:e0:89:4c:c2:43:3a:1d:49:eb:d9:69:
         d9:25:11:91:92:9e:07:62:3b:d6:5a:19:d9:98:12:84:b6:5d:
         aa:79:dc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:08 2026 by rpki-client