This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32342d3234203d3e20323131333932.roa
File:                     3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (raw, json)
Hash identifier:          kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=
Subject key identifier:   B4:B2:6B:B2:2F:DD:CF:F5:E9:40:B4:83:CD:0A:CA:47:14:BB:18:C2
Certificate issuer:       /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial:       3C9D3A7DF7B6EB4A0904AA328BC7204A2DBC3E1F
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32342d3234203d3e20323131333932.roa
Signing time:             Tue 20 Jan 2026 02:09:29 +0000
ROA not before:           Tue 20 Jan 2026 02:04:29 +0000
ROA not after:            Tue 19 Jan 2027 02:09:29 +0000
asID:                     211392
IP address blocks:        157.66.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 06:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9d:3a:7d:f7:b6:eb:4a:09:04:aa:32:8b:c7:20:4a:2d:bc:3e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
        Validity
            Not Before: Jan 20 02:04:29 2026 GMT
            Not After : Jan 19 02:09:29 2027 GMT
        Subject: CN=B4B26BB22FDDCFF5E940B483CD0ACA4714BB18C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:db:4f:43:39:23:67:a2:84:38:00:88:83:da:
                    9f:87:eb:c9:39:17:ee:33:74:e1:d0:69:aa:76:a8:
                    05:09:7c:d4:19:c7:0b:a3:c5:98:06:b5:cc:cb:9b:
                    8b:80:88:64:ce:4c:c3:35:e2:a3:8a:a6:b4:d9:76:
                    2b:fd:d1:52:54:d1:91:41:69:67:ae:85:da:23:a0:
                    6b:e2:f8:d3:b8:b4:8b:12:34:18:5f:38:30:b1:bc:
                    7c:7f:d5:33:c9:e1:ef:20:db:49:ad:47:61:00:15:
                    dd:5e:4d:91:36:b4:4a:99:c3:7f:77:94:3a:17:43:
                    05:f7:4f:4f:7e:c9:f9:5d:74:87:9a:00:ae:de:90:
                    b8:8f:56:19:04:17:61:f0:57:7e:c3:8a:09:2d:cc:
                    c0:8b:6c:a7:e3:7f:ed:b0:66:ec:42:04:83:9b:61:
                    61:58:b0:af:1e:ca:de:37:34:f9:2b:41:61:ca:6f:
                    fb:91:6f:06:91:b1:d5:1c:df:90:fe:28:8c:37:7d:
                    4a:3a:48:a9:f6:6d:37:21:cc:68:90:0e:9f:3c:65:
                    a0:50:04:eb:42:03:f0:92:fd:07:b9:ce:1e:00:06:
                    1d:1e:b0:af:fa:ac:9b:f2:b5:47:3c:b6:a3:0a:27:
                    d4:29:4d:8b:c8:21:4d:79:76:c4:5b:bf:d3:a7:ac:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B2:6B:B2:2F:DD:CF:F5:E9:40:B4:83:CD:0A:CA:47:14:BB:18:C2
            X509v3 Authority Key Identifier:
                keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/3135372e36362e34322e302f32342d3234203d3e20323131333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:04:8e:9f:44:55:77:46:ff:6a:72:da:05:05:1d:19:c2:93:
         b0:9a:ca:c4:d6:3d:a9:42:83:0b:e6:22:b9:0e:02:11:4b:2f:
         5a:cc:43:59:2f:b1:be:8d:5b:ad:d1:19:8e:69:25:6f:98:87:
         f6:70:64:0e:5b:bd:46:e5:8b:5a:2c:dd:1e:d9:9f:87:dd:d0:
         30:99:d6:cf:59:c3:31:37:53:f3:b9:84:4c:62:e3:5d:e1:74:
         76:f5:83:af:88:d3:5c:97:c3:ce:e6:c3:7d:99:f0:89:68:5c:
         1e:b7:9a:d8:ee:a3:35:74:21:50:d6:df:79:49:c1:af:59:f6:
         16:1f:f3:66:ba:e3:31:fc:b6:e7:2f:f4:e4:25:06:81:44:e1:
         da:1f:39:15:63:49:ea:d0:cf:61:4d:a7:d3:66:28:af:39:3c:
         76:57:dd:af:f7:66:e4:d7:50:5b:9f:40:38:8b:fd:58:a7:b0:
         15:3d:fd:59:91:4f:f3:1f:09:48:d9:7c:37:b4:4b:37:f1:f9:
         ca:20:88:3d:86:ca:dd:d4:6e:c8:c1:4f:76:61:56:38:9c:fc:
         af:6c:c2:9a:d2:9c:cf:bf:59:e7:e1:d9:88:27:59:13:94:0e:
         94:dd:62:55:4c:e2:1a:72:cc:f7:a3:5c:f7:91:76:fa:95:18:
         4c:35:61:d9
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUPJ06ffe260oJBKoyi8cgSi28Ph8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3
QzkwNTUxNjAeFw0yNjAxMjAwMjA0MjlaFw0yNzAxMTkwMjA5MjlaMDMxMTAvBgNV
BAMTKEI0QjI2QkIyMkZERENGRjVFOTQwQjQ4M0NEMEFDQTQ3MTRCQjE4QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP209DOSNnooQ4AIiD2p+H68k5
F+4zdOHQaap2qAUJfNQZxwujxZgGtczLm4uAiGTOTMM14qOKprTZdiv90VJU0ZFB
aWeuhdojoGvi+NO4tIsSNBhfODCxvHx/1TPJ4e8g20mtR2EAFd1eTZE2tEqZw393
lDoXQwX3T09+yflddIeaAK7ekLiPVhkEF2HwV37DigktzMCLbKfjf+2wZuxCBIOb
YWFYsK8eyt43NPkrQWHKb/uRbwaRsdUc35D+KIw3fUo6SKn2bTchzGiQDp88ZaBQ
BOtCA/CS/Qe5zh4ABh0esK/6rJvytUc8tqMKJ9QpTYvIIU15dsRbv9OnrH2tAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUtLJrsi/dz/XpQLSDzQrKRxS7GMIwHwYDVR0j
BBgwFoAUf8VBi0pZDfFTVeFnt6/A/3yQVRYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTk3Mjk5NC8wLzdGQzU0MThCNEE1OTBERjE1MzU1RTE2N0I3QUZD
MEZGN0M5MDU1MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3QzkwNTUxNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU5MTY4MzA2MTk3Mjk5NC8wLzMxMzUzNzJlMzYz
NjJlMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTMzMzkzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAJ1CKjANBgkqhkiG9w0BAQsFAAOCAQEAAgSOn0RVd0b/anLaBQUdGcKT
sJrKxNY9qUKDC+YiuQ4CEUsvWsxDWS+xvo1brdEZjmklb5iH9nBkDlu9RuWLWizd
Htmfh93QMJnWz1nDMTdT87mETGLjXeF0dvWDr4jTXJfDzubDfZnwiWhcHrea2O6j
NXQhUNbfeUnBr1n2Fh/zZrrjMfy25y/05CUGgUTh2h85FWNJ6tDPYU2n02Yorzk8
dlfdr/dm5NdQW59AOIv9WKewFT39WZFP8x8JSNl8N7RLN/H5yiCIPYbK3dRuyMFP
dmFWOJz8r2zCmtKcz79Z5+HZiCdZE5QOlN1iVUziGnLM96Nc95F2+pUYTDVh2Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:47 2026 by rpki-client