This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e3131332e302e302f31362d3234203d3e203337393633.roa
File:                     34372e3131332e302e302f31362d3234203d3e203337393633.roa (raw, json)
Hash identifier:          Sc9B64EYbOlhHpRQn2hDIXOE8wTsYGOAnrQ1OGOsB2U=
Subject key identifier:   1C:7F:76:4B:3F:5C:16:4A:7E:EA:37:15:1D:15:43:EA:9B:69:77:F8
Certificate issuer:       /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Certificate serial:       7E50BC2A7DE8BEB36177D693A6555878E1E49D04
Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e3131332e302e302f31362d3234203d3e203337393633.roa
Signing time:             Tue 20 Jan 2026 07:00:30 +0000
ROA not before:           Tue 20 Jan 2026 06:55:30 +0000
ROA not after:            Tue 19 Jan 2027 07:00:30 +0000
asID:                     37963
IP address blocks:        47.113.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:50:bc:2a:7d:e8:be:b3:61:77:d6:93:a6:55:58:78:e1:e4:9d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
        Validity
            Not Before: Jan 20 06:55:30 2026 GMT
            Not After : Jan 19 07:00:30 2027 GMT
        Subject: CN=1C7F764B3F5C164A7EEA37151D1543EA9B6977F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:35:a9:39:fa:44:d9:c2:f0:8c:de:08:12:
                    9d:a8:27:1b:65:5b:ed:49:4c:76:7f:08:c5:9e:e7:
                    e7:8f:d1:28:c6:e0:2f:d1:68:07:72:35:07:af:fd:
                    92:21:b1:17:56:d4:87:b1:0d:1e:a8:0e:29:e7:31:
                    08:6a:42:1c:01:43:4c:13:2b:f3:21:12:f4:f6:1f:
                    b8:ed:51:30:11:fc:99:c3:3e:f5:97:a6:6c:41:1f:
                    1f:2c:27:62:29:df:6b:ae:8d:e0:bd:6c:58:3a:fb:
                    40:c6:a2:50:2d:ad:e2:57:a2:7e:af:2a:d3:d4:a8:
                    89:49:f0:5a:27:cd:de:85:e2:21:11:39:fc:b8:3d:
                    05:0b:24:bc:17:e8:0b:f5:45:48:dd:31:50:0c:9f:
                    3c:ee:24:c8:eb:c9:a9:8b:0e:c4:ab:a7:d8:50:11:
                    7d:7e:42:56:dd:ae:af:0b:ef:ca:99:3d:6c:c4:b7:
                    a3:35:40:8a:01:60:77:fe:fb:35:a1:b1:e4:a7:77:
                    39:be:bd:3b:05:8a:2a:33:44:dd:5d:6e:cd:a8:dd:
                    20:d7:7e:55:77:68:89:bd:4a:b9:d5:02:ec:6b:d5:
                    11:3e:2a:1a:1b:05:a3:1e:1c:71:43:c7:21:fe:ba:
                    ad:95:fb:12:4a:44:c8:c2:83:cf:a3:02:48:0c:74:
                    62:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7F:76:4B:3F:5C:16:4A:7E:EA:37:15:1D:15:43:EA:9B:69:77:F8
            X509v3 Authority Key Identifier:
                keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e3131332e302e302f31362d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.113.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:26:f6:a7:2f:4b:29:7b:f6:01:a7:5e:02:b5:bc:97:19:e8:
         ae:79:40:61:f9:6c:4d:9f:60:f6:84:66:7c:f5:54:63:eb:33:
         20:9e:80:8d:ca:4e:f0:32:59:a4:a2:a4:f3:2a:c5:16:61:82:
         01:59:6e:78:9c:51:3b:e0:e0:26:cb:b9:1f:f4:1d:f7:23:c4:
         d2:dd:de:9b:5d:93:8f:ec:b3:9d:e6:a0:13:4d:8f:b7:20:eb:
         0f:c6:51:cd:bd:ea:79:47:fd:96:24:53:4b:8d:a4:4d:db:9e:
         d2:00:b1:f3:3a:e6:e4:a8:c9:a0:8f:4b:73:77:2d:33:e6:9d:
         a1:a6:93:3a:da:57:3e:34:f1:68:d6:48:4f:3c:ef:33:33:ae:
         e5:b3:41:23:1b:78:d6:ee:bc:dc:9d:1a:a7:1d:88:eb:b9:98:
         50:44:15:5c:8c:eb:c4:ea:79:73:29:58:02:a3:62:70:09:76:
         04:af:4c:2a:1b:a3:b5:97:60:8b:84:2f:5b:8e:c2:80:4b:d2:
         05:98:d4:fc:30:88:66:f1:80:42:58:c9:a3:8b:cd:15:8f:58:
         3e:1a:f8:f0:d6:b2:5c:03:28:f9:6e:89:d0:5e:61:78:d8:f4:
         7a:ab:2f:d9:61:17:93:80:65:9b:a7:57:12:09:d2:1f:4f:48:
         fe:9a:e8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:09:20 2026 by rpki-client