This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3230332e3133302e35302e302f32342d3234203d3e203534393934.roa
File:                     3230332e3133302e35302e302f32342d3234203d3e203534393934.roa (raw, json)
Hash identifier:          Ujrh8dXiv3ar3WusLzYw5/Zpebj94GN0ZVIqrzqX81U=
Subject key identifier:   45:CE:9B:D3:F6:FF:10:79:AE:7E:EC:70:18:EF:41:EA:13:A0:FD:87
Certificate issuer:       /CN=D55490FB885552307A1D271E02513B4D423A90AE
Certificate serial:       44F268871765F54A1CE2F6852EF66AC6F3D2E99E
Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3230332e3133302e35302e302f32342d3234203d3e203534393934.roa
Signing time:             Tue 20 Jan 2026 02:26:10 +0000
ROA not before:           Tue 20 Jan 2026 02:21:10 +0000
ROA not after:            Tue 19 Jan 2027 02:26:10 +0000
asID:                     54994
IP address blocks:        203.130.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Jan 2026 14:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f2:68:87:17:65:f5:4a:1c:e2:f6:85:2e:f6:6a:c6:f3:d2:e9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE
        Validity
            Not Before: Jan 20 02:21:10 2026 GMT
            Not After : Jan 19 02:26:10 2027 GMT
        Subject: CN=45CE9BD3F6FF1079AE7EEC7018EF41EA13A0FD87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4a:af:c7:2d:d0:7e:7b:2c:b3:ae:0b:a9:6d:
                    e1:4c:b9:02:9a:b6:0b:dd:5f:67:da:26:a4:e6:31:
                    ed:12:0b:d5:10:a5:54:ad:de:68:20:01:f3:2b:cd:
                    04:40:dd:30:05:31:21:e9:81:d4:df:5d:e0:dd:59:
                    2c:c5:c8:b7:16:f7:d4:34:dd:a7:2a:a6:4e:11:fb:
                    a7:c9:ca:5b:1f:b2:27:1d:bc:0d:ea:29:c7:fb:e3:
                    10:69:33:98:4e:62:87:7e:be:a3:2a:a7:4c:b5:68:
                    f2:02:60:e8:c8:9d:45:7b:80:76:37:f8:bb:1c:9a:
                    5b:15:41:49:bf:a5:02:73:d0:c4:47:64:e2:ce:76:
                    19:9a:9d:09:b0:b1:9a:bc:ea:06:39:82:0a:e5:f6:
                    f9:9d:b6:a1:6c:d1:3c:58:54:6b:43:ab:05:48:3a:
                    08:07:b5:29:3d:15:a0:82:35:69:4f:b5:01:bc:be:
                    dd:30:f8:a9:15:a0:47:50:3b:18:65:9b:91:03:95:
                    21:37:68:06:6a:ae:ea:92:2f:61:d2:8a:2a:fe:1f:
                    4c:94:cf:2a:76:85:39:0b:5f:c2:ce:f0:af:94:2f:
                    8d:08:b8:c4:e4:a2:26:59:13:73:87:9a:a2:5f:f0:
                    5a:61:37:80:96:1d:e4:4f:00:59:cf:ef:cd:2e:d6:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CE:9B:D3:F6:FF:10:79:AE:7E:EC:70:18:EF:41:EA:13:A0:FD:87
            X509v3 Authority Key Identifier:
                keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3230332e3133302e35302e302f32342d3234203d3e203534393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.130.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f3:13:69:cd:a2:4d:e8:6b:f4:8b:95:a9:2b:1b:32:9c:4b:
         98:e4:49:b9:6e:39:a3:35:0a:17:61:1f:29:00:1a:55:de:78:
         ad:4c:7a:7b:e0:c4:59:e6:6e:a4:23:0c:b7:82:c7:79:6c:84:
         6a:35:da:e3:30:44:aa:27:3e:48:6e:c3:91:00:b4:16:85:23:
         34:16:03:d1:54:59:52:b8:b8:2f:b1:2d:2e:00:e3:00:3b:9b:
         8a:06:e6:0c:2e:e5:d8:dd:40:e0:94:65:f3:0a:20:e4:c9:f4:
         bd:2d:c6:18:be:63:4b:3e:2d:d0:9e:5b:64:ed:1a:f4:ec:2f:
         65:88:fb:58:f9:dc:0a:fb:73:38:25:39:b9:58:c0:3e:34:60:
         b3:04:e3:27:ea:97:65:36:db:a5:c1:95:49:49:56:e9:37:ab:
         28:d0:f0:cf:4c:22:ce:e5:69:36:df:05:40:19:98:9b:e3:a7:
         0b:73:50:b6:db:8c:46:6f:98:0f:ec:55:32:47:02:92:7b:97:
         20:1b:89:b4:86:d5:8c:4a:30:e9:53:af:2e:83:03:0c:60:42:
         5e:1c:d7:15:17:74:c1:00:1c:50:60:d9:e4:5c:0f:f4:c7:2f:
         f5:e3:4b:21:f2:dd:6d:c2:9f:8d:e2:9e:41:40:64:3f:30:41:
         19:12:b9:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 07:48:56 2026 by rpki-client