This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3230332e3133302e36332e302f32342d3234203d3e203534393934.roa
File:                     3230332e3133302e36332e302f32342d3234203d3e203534393934.roa (raw, json)
Hash identifier:          UBRqylYTLGDVfK3g4RFGUeCrUxzDzQEIc6ZZPYpaGWE=
Subject key identifier:   EF:B9:42:5B:E0:DE:89:A0:40:DC:A5:FC:0F:27:25:42:20:63:ED:6F
Certificate issuer:       /CN=D55490FB885552307A1D271E02513B4D423A90AE
Certificate serial:       48A1DB440B90535C3E6029150324B50E39123889
Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3230332e3133302e36332e302f32342d3234203d3e203534393934.roa
Signing time:             Tue 20 Jan 2026 02:26:10 +0000
ROA not before:           Tue 20 Jan 2026 02:21:10 +0000
ROA not after:            Tue 19 Jan 2027 02:26:10 +0000
asID:                     54994
IP address blocks:        203.130.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Jan 2026 14:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a1:db:44:0b:90:53:5c:3e:60:29:15:03:24:b5:0e:39:12:38:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE
        Validity
            Not Before: Jan 20 02:21:10 2026 GMT
            Not After : Jan 19 02:26:10 2027 GMT
        Subject: CN=EFB9425BE0DE89A040DCA5FC0F2725422063ED6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:b8:32:59:25:00:4e:d1:01:8b:25:aa:3f:
                    0a:26:da:6c:10:9f:76:a4:52:4b:f9:3c:9d:48:25:
                    a4:a3:da:f6:4b:03:66:b0:30:69:ee:aa:e2:d3:01:
                    cf:dc:49:91:93:a9:82:cc:60:11:93:f0:19:3b:fa:
                    c3:f5:db:a0:e1:1e:cd:78:af:6e:b6:e4:48:00:42:
                    9a:ef:c6:6f:ce:28:e9:e9:e9:d7:17:43:6c:a1:8f:
                    c0:74:fc:ca:fe:01:41:17:5e:27:6b:d3:8a:13:dc:
                    88:e7:b6:00:55:45:38:6b:9b:7c:51:54:ea:7c:1f:
                    63:cb:7e:3c:10:57:06:60:c9:c4:f7:9a:7d:0b:db:
                    a1:e3:d6:ea:f2:6e:ec:6f:95:00:16:51:d8:20:17:
                    14:09:0f:a2:e5:74:0e:b4:d6:de:22:4a:e1:62:66:
                    cf:89:dd:ce:8f:2a:d7:5f:c4:0c:aa:28:d2:54:59:
                    29:3c:37:48:0e:15:91:31:a5:50:2c:cb:c8:33:bd:
                    43:64:29:a2:e4:1a:ae:64:ad:ee:68:ab:06:94:20:
                    9b:2f:18:70:e0:c4:ef:26:f7:09:98:44:27:67:c7:
                    bf:42:9e:c6:ab:11:cd:f1:21:1c:89:50:8e:71:64:
                    70:ba:22:cb:af:39:05:da:2d:ba:96:3a:08:e9:12:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B9:42:5B:E0:DE:89:A0:40:DC:A5:FC:0F:27:25:42:20:63:ED:6F
            X509v3 Authority Key Identifier:
                keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3230332e3133302e36332e302f32342d3234203d3e203534393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.130.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:5d:0e:3b:a8:8f:b6:3e:c4:03:81:27:b3:df:d9:a8:5a:ef:
         54:f3:5f:12:6d:83:71:e4:66:5e:6b:62:b7:a0:95:60:e1:63:
         a6:01:ed:c2:50:87:3c:3d:bf:f0:60:5e:2f:ef:27:0b:d8:c5:
         db:c5:7f:30:a4:4b:03:f2:fd:f4:4f:e0:bf:ef:bf:92:7b:ef:
         a5:92:92:2c:2b:05:04:a5:d3:d4:4f:44:6b:53:7a:27:21:ef:
         d8:1b:e7:4a:5f:e8:21:d2:3b:70:e6:ce:85:7a:d9:72:38:72:
         cc:c6:2a:5f:5c:c6:9b:4c:10:69:d1:12:d5:41:59:77:54:a5:
         9a:43:f2:18:68:cb:4d:d1:a4:b7:d3:96:b1:9c:fa:8f:18:fa:
         bd:c8:db:ad:09:50:cf:34:38:c5:0b:9c:a2:28:87:62:56:2e:
         76:c3:ab:d1:ab:42:5f:15:91:07:ec:40:66:80:a2:9f:1a:d7:
         4c:fc:e1:7e:a0:9f:18:f8:8f:50:85:d9:e8:c2:30:c2:e8:54:
         ea:58:78:05:25:03:bf:58:a4:89:2d:59:36:65:0c:b6:7a:c7:
         b9:9a:8c:71:09:9a:5e:98:b2:80:ad:5c:c6:cd:2e:74:f5:50:
         65:4a:c8:c4:99:9a:2a:9c:db:d3:a5:74:a0:71:f2:7d:c3:c1:
         d2:c4:0a:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 07:48:55 2026 by rpki-client