This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3131352e3232382e302f32322d3234203d3e203331393732.roa
File:                     34352e3131352e3232382e302f32322d3234203d3e203331393732.roa (raw, json)
Hash identifier:          AaO+tyC9M3MuUqgo9VYx7I1zEmKXUItDpbRLEplpDsM=
Subject key identifier:   7A:28:D4:81:A3:29:88:F7:4F:AB:8E:DA:E5:AC:23:E6:8D:69:F5:AE
Certificate issuer:       /CN=7BE06B4744FCF211D039415BB8B17941EC767358
Certificate serial:       6510109294C9CEEFC80FC466C1A57F542284C423
Authority key identifier: 7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3131352e3232382e302f32322d3234203d3e203331393732.roa
Signing time:             Tue 20 Jan 2026 02:25:03 +0000
ROA not before:           Tue 20 Jan 2026 02:20:03 +0000
ROA not after:            Tue 19 Jan 2027 02:25:03 +0000
asID:                     31972
IP address blocks:        45.115.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:10:10:92:94:c9:ce:ef:c8:0f:c4:66:c1:a5:7f:54:22:84:c4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE06B4744FCF211D039415BB8B17941EC767358
        Validity
            Not Before: Jan 20 02:20:03 2026 GMT
            Not After : Jan 19 02:25:03 2027 GMT
        Subject: CN=7A28D481A32988F74FAB8EDAE5AC23E68D69F5AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:82:10:66:a3:ad:22:08:87:40:e0:5b:ec:
                    8a:4e:55:d8:1b:fe:7a:f4:8d:70:e3:61:fe:e3:9c:
                    69:9c:b8:85:4d:48:48:66:a4:da:7b:d7:d4:ac:63:
                    a3:fd:30:74:7e:5d:b0:f6:f5:f4:a5:ec:77:c3:57:
                    ba:0f:4a:58:b0:d5:a6:ef:ae:9c:0e:1e:46:74:da:
                    a4:2f:b3:8d:26:53:55:8c:ac:7d:d0:7c:be:9f:4a:
                    4c:53:92:8e:51:2b:f4:83:90:c6:b4:47:24:87:f3:
                    fd:89:d3:a4:97:c3:75:40:e4:50:ff:c1:ec:7e:1e:
                    94:a4:84:0f:3f:ae:4a:1a:9a:c7:77:3f:12:93:0c:
                    3d:37:7a:d7:2f:b4:e0:cd:f9:08:1b:2e:49:bb:6d:
                    4f:96:d1:a2:80:35:8f:3b:e0:04:6c:68:03:82:57:
                    b4:e3:5d:48:c7:96:29:69:6e:2b:19:a3:4f:5a:fd:
                    f1:b1:94:cd:9b:ab:7f:ff:34:1e:36:7c:e3:2f:f5:
                    79:88:01:b9:64:96:ca:fa:40:37:b9:e4:96:3d:05:
                    46:50:1f:db:69:80:d8:b0:53:4c:ae:11:19:0c:ff:
                    09:7e:c5:9f:ef:21:66:82:de:52:84:9b:e9:65:2f:
                    b6:8e:f2:c7:8e:c0:9c:b2:44:be:78:ad:9b:81:10:
                    0b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:28:D4:81:A3:29:88:F7:4F:AB:8E:DA:E5:AC:23:E6:8D:69:F5:AE
            X509v3 Authority Key Identifier:
                keyid:7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/34352e3131352e3232382e302f32322d3234203d3e203331393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:ff:47:e4:af:6c:64:7c:7b:c5:5c:73:0f:e7:c5:6d:68:bc:
         33:df:43:75:a7:47:4d:9a:f6:37:7c:b0:cd:33:28:ae:60:81:
         fc:a3:5a:7b:9e:e5:6d:34:5f:a6:60:08:48:e4:a0:06:a0:a1:
         a5:e8:c1:ed:42:a1:33:99:93:cb:0d:17:2c:ca:51:8f:b2:a0:
         7c:25:9c:8a:25:a2:c8:f5:af:00:cd:57:8b:d2:f5:e0:5d:13:
         c3:76:bc:6c:a9:6e:ca:7c:81:ce:c2:b1:61:80:ff:2b:60:2f:
         a0:a3:a3:57:01:57:aa:26:ae:b5:db:b2:ad:a0:78:ab:ea:3c:
         a0:59:d9:7e:e6:8f:cd:d3:0a:29:d2:90:d1:a9:02:29:62:29:
         32:5a:1a:f7:47:92:b1:86:4f:9f:90:2a:02:56:17:63:ae:9a:
         dc:fa:45:e8:3e:ff:fc:16:0a:55:85:90:d1:be:19:cf:65:6a:
         ee:c8:98:22:d2:d0:e6:d7:01:fe:ee:0a:c4:1d:70:76:45:06:
         e2:87:42:61:a7:1a:d4:14:7c:51:6b:d3:3c:89:37:ee:5c:6d:
         56:67:c2:c1:88:6c:47:ed:a8:b1:71:4d:21:f7:3e:fc:4f:a6:
         37:09:fd:ea:38:46:17:b8:a6:2e:27:a3:5e:1d:29:b0:bd:b8:
         56:0f:c3:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:31 2026 by rpki-client