This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721662465/0/3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa
File:                     3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa (raw, json)
Hash identifier:          POleG0l4wno//ZX5b+0oZBB9yM8f+wy3+HMPXea5rYs=
Subject key identifier:   57:42:47:29:06:97:3B:31:3D:8E:C9:BA:E8:93:14:F2:DF:61:34:78
Certificate issuer:       /CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
Certificate serial:       1962431B5D8CB7B3D775B6711FF9A2F6E7E7096E
Authority key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa
Signing time:             Tue 20 Jan 2026 02:23:46 +0000
ROA not before:           Tue 20 Jan 2026 02:18:46 +0000
ROA not after:            Tue 19 Jan 2027 02:23:46 +0000
asID:                     135542
IP address blocks:        144.79.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:62:43:1b:5d:8c:b7:b3:d7:75:b6:71:1f:f9:a2:f6:e7:e7:09:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
        Validity
            Not Before: Jan 20 02:18:46 2026 GMT
            Not After : Jan 19 02:23:46 2027 GMT
        Subject: CN=5742472906973B313D8EC9BAE89314F2DF613478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:6c:e3:7e:d3:cc:51:7b:dc:8e:26:26:e8:
                    ca:22:7e:0f:b0:27:c8:83:06:ad:dc:e9:f3:58:5d:
                    2d:16:bb:59:08:39:ba:da:62:39:24:d5:62:a0:fa:
                    66:dc:30:01:28:36:36:d6:cd:da:7f:8f:90:df:04:
                    1d:11:91:87:7c:28:fd:58:48:b3:30:ec:c8:7f:f9:
                    a5:cd:74:c5:99:3e:3a:48:c6:21:e8:09:ec:38:b9:
                    0b:2f:3d:78:7d:f4:83:fc:51:75:6e:4d:f3:81:eb:
                    ee:96:55:e8:db:45:4a:15:22:4b:86:0d:21:7c:6e:
                    b3:7f:df:b5:d4:e1:4c:23:f4:9e:ec:a5:31:4a:ae:
                    65:91:e0:1e:93:19:e6:72:0e:c3:dc:c7:57:8c:db:
                    59:9b:3b:c5:79:84:bb:d3:61:59:43:aa:a3:be:45:
                    fd:d8:75:5c:c6:8f:a9:c6:51:5a:aa:a0:de:fc:0d:
                    a0:7f:fd:01:28:3b:aa:8e:24:94:f2:76:2e:3d:ff:
                    3a:69:b7:a8:b6:51:8d:8e:68:ab:5e:51:ec:9d:94:
                    27:45:a5:54:7f:46:d6:20:7d:5c:10:f4:7e:f6:57:
                    43:64:de:5e:bb:35:5b:b6:f6:5b:48:0c:88:5b:e0:
                    ad:9e:69:eb:9f:e2:c9:2c:84:4e:21:36:57:fc:40:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:42:47:29:06:97:3B:31:3D:8E:C9:BA:E8:93:14:F2:DF:61:34:78
            X509v3 Authority Key Identifier:
                keyid:12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:04:c9:fb:56:7d:a0:42:d0:7d:73:18:9b:cf:b3:c9:36:15:
         f1:af:b4:48:d4:93:e0:f6:e4:34:b6:3f:83:a6:90:1c:5d:77:
         87:e7:b7:75:21:a4:3b:f0:8d:79:91:cd:8e:e5:f0:d5:3a:87:
         07:b5:da:45:d2:7a:ea:54:9f:44:7c:2c:87:d9:31:87:f6:e7:
         3f:c0:9a:44:6d:d5:e5:e5:9f:17:8d:a7:67:cb:30:e4:87:9e:
         0f:78:14:c4:b8:a1:61:66:4e:89:36:d2:8d:76:55:83:12:59:
         d2:bc:34:31:3f:d3:69:7b:6c:84:e7:3c:65:cf:9b:cd:cd:a1:
         20:35:e7:33:a6:ca:33:04:a5:da:70:f0:2b:0e:1f:6e:69:7f:
         93:c8:1d:6b:66:5b:50:08:f3:8d:4c:36:3f:44:b8:4b:92:a0:
         70:9d:a7:12:9f:85:17:f9:fc:cc:0d:01:45:7b:04:7f:64:c5:
         4c:0a:f8:7c:77:ce:e2:a2:95:26:43:b1:40:76:af:a2:60:cc:
         ac:43:c9:22:02:c0:f5:79:54:f4:61:6c:cb:de:c3:fa:18:a1:
         b9:5a:b8:f0:eb:38:6d:0c:db:6c:5e:11:cd:f6:55:85:c5:45:
         a8:ce:89:80:6f:a4:71:88:49:88:e5:60:e9:bb:09:b7:00:f2:
         15:84:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:25 2026 by rpki-client