This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32332d3233203d3e20313436383036.roa
File:                     3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (raw, json)
Hash identifier:          TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=
Subject key identifier:   26:40:DB:08:81:FD:BA:F0:D5:FF:21:36:11:0E:B0:44:8E:82:C5:D5
Certificate issuer:       /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial:       6AC6E6C0376B1EAB3E30FC6F53F64DA752ED8973
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32332d3233203d3e20313436383036.roa
Signing time:             Tue 20 Jan 2026 02:09:29 +0000
ROA not before:           Tue 20 Jan 2026 02:04:29 +0000
ROA not after:            Tue 19 Jan 2027 02:09:29 +0000
asID:                     146806
IP address blocks:        157.66.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 06:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c6:e6:c0:37:6b:1e:ab:3e:30:fc:6f:53:f6:4d:a7:52:ed:89:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
        Validity
            Not Before: Jan 20 02:04:29 2026 GMT
            Not After : Jan 19 02:09:29 2027 GMT
        Subject: CN=2640DB0881FDBAF0D5FF2136110EB0448E82C5D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:51:2e:78:82:61:11:d3:e0:24:9d:9a:bb:e4:
                    b6:f7:05:0a:47:19:ab:5f:ad:31:01:df:05:ed:9e:
                    a1:0c:25:3e:b9:2a:27:b0:19:25:01:ac:09:8e:fe:
                    b0:54:0a:3e:ae:49:63:6d:da:ac:cf:60:1e:3a:93:
                    17:c2:93:9d:6f:05:35:d7:81:ce:95:48:3a:d6:c6:
                    e5:f5:0b:57:ea:9f:48:54:d7:03:28:e0:06:8e:83:
                    a9:0d:3e:62:a7:2f:77:94:cf:5c:9b:15:04:28:91:
                    42:66:88:3e:b8:77:9d:f3:20:62:3e:72:1d:a7:97:
                    f1:a1:d8:2c:b6:72:45:ec:59:c8:77:8f:f6:f9:7e:
                    5d:1b:07:02:0a:7f:b2:a0:c9:1d:bd:9e:1a:ba:8c:
                    de:18:56:c7:f8:02:a4:bc:6c:cf:bd:99:f6:ad:db:
                    9e:71:68:8f:0f:df:cc:0f:b2:0c:1a:ca:e1:7b:ab:
                    d3:5e:fd:36:11:a5:1c:95:7a:5e:65:36:72:f5:66:
                    d3:1c:53:93:ce:75:38:3e:1c:f9:f2:31:f8:e6:06:
                    ae:79:dd:51:81:c9:ca:a1:15:b9:80:12:55:43:bd:
                    f9:a0:8e:9d:44:e2:86:d1:3d:bf:a7:6d:0e:0b:b3:
                    36:93:ce:ea:1c:fa:a9:db:c9:e4:cb:9a:04:bc:cb:
                    96:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:40:DB:08:81:FD:BA:F0:D5:FF:21:36:11:0E:B0:44:8E:82:C5:D5
            X509v3 Authority Key Identifier:
                keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32332d3233203d3e20313436383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:53:78:c2:dd:21:47:d6:5c:98:81:25:f4:db:2d:c0:65:8c:
         dd:42:e5:91:d0:7c:27:65:58:6a:93:53:b4:24:67:8c:03:f0:
         62:47:cf:c4:4f:07:87:a4:de:52:d2:56:f9:14:f5:5c:4a:02:
         43:b3:33:06:8e:6f:20:32:3b:50:87:e3:db:1a:16:cb:89:4a:
         06:4a:07:27:d1:39:a7:71:ca:21:d7:3e:46:08:20:8d:39:6a:
         b5:e9:44:95:8b:7a:26:66:84:76:ad:ab:8d:1b:25:10:c2:00:
         d3:95:ed:37:a2:ed:66:c5:4a:81:b9:2d:ce:25:7c:96:93:68:
         93:38:cd:31:e1:40:bb:20:30:2f:13:82:02:37:33:ec:28:ff:
         65:eb:b7:4f:4a:ab:49:2e:d7:b8:8f:d8:08:f6:60:24:8e:41:
         3d:30:7b:f7:ad:b3:fa:89:4f:5d:5e:cf:6a:e5:5c:a4:53:9f:
         1d:d8:4a:b0:11:48:c4:1f:da:c9:20:4c:67:69:a8:b7:e1:6d:
         b5:9b:5e:19:93:48:7b:8c:d4:1b:e4:b0:83:d2:45:33:6b:68:
         1f:b8:b3:38:31:b3:62:3e:04:05:c7:bd:52:f9:57:e4:d9:19:
         3b:21:b9:fe:0f:56:a1:ae:9c:d3:4d:15:59:2a:7b:bf:c2:19:
         8a:7c:63:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:19 2026 by rpki-client