This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230302e302f32342d3332203d3e203234343133.roa
File:                     3131342e32382e3230302e302f32342d3332203d3e203234343133.roa (raw, json)
Hash identifier:          ZQUiVDwqsT/ysu76cvVNTZYX/e7z++2UDQH+isRM3J8=
Subject key identifier:   6F:F6:8D:D4:18:18:CD:3E:5D:90:F8:C6:90:1F:2A:95:87:C3:BA:D2
Certificate issuer:       /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial:       58D6A73BF662344670D782C89752C62CEF2C83E6
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230302e302f32342d3332203d3e203234343133.roa
Signing time:             Tue 20 Jan 2026 02:27:15 +0000
ROA not before:           Tue 20 Jan 2026 02:22:15 +0000
ROA not after:            Tue 19 Jan 2027 02:27:15 +0000
asID:                     24413
IP address blocks:        114.28.200.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 03:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d6:a7:3b:f6:62:34:46:70:d7:82:c8:97:52:c6:2c:ef:2c:83:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
        Validity
            Not Before: Jan 20 02:22:15 2026 GMT
            Not After : Jan 19 02:27:15 2027 GMT
        Subject: CN=6FF68DD41818CD3E5D90F8C6901F2A9587C3BAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:db:d4:08:a0:71:9d:dd:e9:60:96:55:5b:f5:
                    b3:c7:30:0b:df:89:20:3d:d4:d0:41:fb:9b:93:5f:
                    e4:51:4c:88:62:67:bd:f1:d5:88:49:cb:4a:f0:db:
                    72:54:18:8e:ea:10:c1:de:38:fa:62:3f:0c:29:9a:
                    39:7a:03:82:ed:5e:78:96:85:cc:54:8a:be:a2:62:
                    43:9e:d2:f8:76:6b:8d:57:9e:be:37:9c:ea:a9:5f:
                    32:af:6b:9b:95:32:53:3d:b0:f7:38:91:70:1f:09:
                    02:6d:1e:72:cc:f6:c8:53:05:a7:b8:f4:cd:75:6b:
                    ce:eb:10:68:a8:f4:08:08:8c:69:15:85:38:21:1c:
                    18:6a:a9:cf:e6:f2:17:01:d7:c4:89:06:c9:34:25:
                    de:b1:13:25:67:c0:03:bb:4e:86:dd:0e:e8:90:0e:
                    fb:65:d3:45:21:04:b0:6c:b2:23:7a:43:95:cd:fb:
                    2a:b3:65:95:a7:ef:9b:b1:a2:df:ab:22:81:69:dc:
                    d5:34:ef:a1:02:bf:0e:ab:8d:57:f3:c6:97:f5:b1:
                    7e:47:9a:02:4c:ae:0e:02:a9:f4:d1:52:8e:4a:9a:
                    34:89:23:7e:1b:9b:ee:c8:34:52:72:9a:45:6c:36:
                    fb:1f:77:83:e1:94:1e:11:fe:fc:df:01:aa:33:a3:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F6:8D:D4:18:18:CD:3E:5D:90:F8:C6:90:1F:2A:95:87:C3:BA:D2
            X509v3 Authority Key Identifier:
                keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230302e302f32342d3332203d3e203234343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.28.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:34:e5:8d:15:a9:02:f9:3a:36:6b:eb:2a:9e:da:7e:16:c0:
         62:08:7e:a1:cc:3b:b8:91:6a:64:00:68:90:4e:07:ec:b5:fe:
         b9:12:07:08:d7:09:e8:a6:8a:99:a0:e2:74:ba:7d:7f:b0:a8:
         56:53:b1:c3:2d:b0:93:08:01:4d:1e:8e:b9:c8:33:b3:6d:aa:
         31:b9:6c:6e:59:ac:bd:54:0a:6f:99:61:74:75:12:a6:5e:31:
         bb:0d:7d:07:3e:e0:80:9b:f3:4a:c0:c4:86:30:5f:00:00:4b:
         40:80:ca:de:7c:0a:e0:7a:9e:df:b5:52:2e:1a:56:d1:8b:ca:
         d0:b7:be:66:c3:9e:b5:31:62:62:32:ed:93:81:38:9d:96:e8:
         f2:3e:05:5d:c5:53:6e:37:4f:ba:0f:2b:93:ae:89:61:67:dc:
         96:ae:3a:99:a5:bb:04:92:7e:67:7d:16:5f:0f:2c:a1:3a:ea:
         aa:86:4e:42:46:77:af:ec:02:2d:c9:e1:67:a5:b3:3d:9e:50:
         09:fe:fd:cd:64:43:c7:89:f3:c8:92:ad:41:37:a6:4b:0d:d0:
         15:30:91:c8:1d:35:78:ac:bc:29:1d:ac:96:ac:68:7c:e7:de:
         f8:bf:8e:71:38:13:89:89:5f:da:c3:89:88:b4:cd:15:2c:67:
         c6:39:6d:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 14:40:21 2026 by rpki-client