This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721662465/0/3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa
File:                     3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa (raw, json)
Hash identifier:          zBALkojrGEY7SR5/7+fqt3Odg1/G/Zmmn1B3936v+KM=
Subject key identifier:   C6:EB:70:98:DD:14:E2:0F:82:90:A5:DA:EF:A1:8C:4B:C2:94:6D:04
Certificate issuer:       /CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
Certificate serial:       6D391FD32F4E01D1A1001AC943A961ED9BDCA329
Authority key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa
Signing time:             Tue 20 Jan 2026 02:23:47 +0000
ROA not before:           Tue 20 Jan 2026 02:18:47 +0000
ROA not after:            Tue 19 Jan 2027 02:23:47 +0000
asID:                     135542
IP address blocks:        144.79.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:39:1f:d3:2f:4e:01:d1:a1:00:1a:c9:43:a9:61:ed:9b:dc:a3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
        Validity
            Not Before: Jan 20 02:18:47 2026 GMT
            Not After : Jan 19 02:23:47 2027 GMT
        Subject: CN=C6EB7098DD14E20F8290A5DAEFA18C4BC2946D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:f5:c0:55:03:06:43:41:f9:40:0c:c0:61:
                    72:37:23:0c:5a:cb:fd:f8:31:54:db:60:06:2b:10:
                    ca:c1:c6:57:56:f3:72:99:45:ed:7a:19:91:8d:e7:
                    d2:f9:77:63:a7:20:e8:38:62:ab:f7:da:34:b8:76:
                    1b:a5:1a:e8:a7:2e:bd:0a:87:2a:aa:a2:26:54:30:
                    d6:bd:83:56:56:37:8b:a3:09:4a:9a:5d:dc:4f:d1:
                    ec:72:ff:24:b7:0c:f4:c3:8c:96:cc:38:5a:d9:13:
                    ab:8b:df:ad:45:2e:f9:e0:5e:3e:35:09:b0:cb:d6:
                    01:7a:11:a3:34:eb:d4:cb:f6:c1:08:f0:6b:26:b3:
                    ab:b9:a3:45:0c:0a:ea:ac:ad:a5:10:26:00:5b:5b:
                    5e:97:86:11:8d:a0:49:21:0c:ad:ec:f3:e6:4b:af:
                    15:60:7f:d5:e3:d9:50:d9:63:9d:a4:b1:a6:06:54:
                    73:db:5a:c2:7c:63:c8:a1:1f:77:16:e5:a7:f6:9e:
                    f4:c3:56:43:ad:6b:c3:f8:1f:ad:83:c7:4a:59:44:
                    49:4a:de:75:48:bf:75:03:6c:19:ca:f9:93:22:75:
                    4c:bc:24:7f:cf:f8:b1:fd:c3:1e:55:1d:68:21:34:
                    e2:f4:33:5b:39:f1:65:e6:60:4e:8b:df:42:95:eb:
                    aa:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EB:70:98:DD:14:E2:0F:82:90:A5:DA:EF:A1:8C:4B:C2:94:6D:04
            X509v3 Authority Key Identifier:
                keyid:12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:f2:3b:68:a3:ae:c7:ac:76:74:e5:75:fe:8d:07:fe:8b:55:
         bf:fb:e6:6a:04:d6:52:99:1c:ef:93:37:f4:ef:69:bf:6c:ee:
         3d:b5:e8:04:75:da:af:b1:8b:95:4e:f4:1a:ee:5c:dc:cc:8c:
         df:f9:ff:44:00:41:bd:e7:7e:88:f4:a7:3e:92:e8:75:c9:90:
         63:87:22:f8:1d:b3:79:eb:71:68:fb:7b:f9:ec:17:ca:fc:50:
         9c:14:1b:f3:ea:15:7e:63:12:f3:9a:fb:89:69:56:96:8f:b2:
         21:40:71:38:be:f0:49:59:91:6e:37:5d:34:c3:31:42:1c:6b:
         9d:ec:69:a8:85:87:12:9e:22:1d:99:6c:29:bc:4c:5a:e4:56:
         94:f2:fa:0e:d6:a0:3d:a5:b4:63:79:11:5a:a7:7d:cc:7a:6d:
         b1:76:c5:c4:e7:c9:71:aa:d2:ef:02:b4:99:b4:cc:af:37:a4:
         43:7f:8f:77:96:bb:41:ab:9a:27:9d:38:c5:95:8e:ec:e8:1d:
         f7:8a:e3:4a:26:e2:8c:34:ce:c9:75:bd:ac:d0:bf:c3:07:f4:
         28:b5:da:f6:a6:81:78:a3:d1:b5:fe:7a:e7:3a:0b:58:b4:67:
         8c:74:c7:b3:b0:3f:d8:82:06:75:84:e3:f2:e6:44:9b:d9:86:
         b0:c0:e6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:26 2026 by rpki-client