This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230322e302f32342d3332203d3e20313432313332.roa
File:                     3131342e32382e3230322e302f32342d3332203d3e20313432313332.roa (raw, json)
Hash identifier:          ++F4eXcz0vDMIbqar2KgOOZoXvVwUpAd2Xzif+khECA=
Subject key identifier:   B0:A1:33:A6:58:8A:17:43:07:D5:48:52:09:A5:2D:44:1A:81:03:38
Certificate issuer:       /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial:       0D46BF816CF5D44B35A807C2E280B27E85A12932
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230322e302f32342d3332203d3e20313432313332.roa
Signing time:             Tue 20 Jan 2026 02:27:15 +0000
ROA not before:           Tue 20 Jan 2026 02:22:15 +0000
ROA not after:            Tue 19 Jan 2027 02:27:15 +0000
asID:                     142132
IP address blocks:        114.28.202.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 03:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:46:bf:81:6c:f5:d4:4b:35:a8:07:c2:e2:80:b2:7e:85:a1:29:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
        Validity
            Not Before: Jan 20 02:22:15 2026 GMT
            Not After : Jan 19 02:27:15 2027 GMT
        Subject: CN=B0A133A6588A174307D5485209A52D441A810338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:15:75:93:ff:38:4e:59:11:26:38:4f:72:
                    ed:10:52:61:58:df:a4:fd:66:a0:6f:b6:74:a5:cd:
                    e6:55:3d:23:8c:21:b2:97:10:fa:31:79:f7:cb:47:
                    fa:28:db:b3:bd:84:50:81:d9:8e:b7:25:d3:5d:00:
                    46:ea:ac:5d:4b:53:35:9f:27:03:3c:e4:5b:32:a6:
                    9b:eb:84:41:73:8e:02:6a:07:b1:1c:bb:be:9b:50:
                    4b:b1:70:71:56:5f:99:20:a6:f2:73:0c:27:c9:69:
                    63:a3:17:7c:6a:16:de:04:bf:b0:a1:1c:57:82:a6:
                    1c:40:f5:fd:ad:86:cf:f6:e8:90:15:cf:f1:73:a1:
                    85:e4:21:80:d4:47:b8:26:24:21:85:84:4a:57:6b:
                    c7:6c:71:e4:46:25:ba:ad:3d:30:23:29:cf:2a:22:
                    b7:9a:5d:64:9c:c6:11:4a:f5:75:f8:06:2c:28:c9:
                    55:a5:41:52:4a:df:f4:67:bb:d7:c0:b5:9f:35:f8:
                    71:cf:32:1f:60:22:51:44:27:6d:76:95:6c:45:d1:
                    eb:3f:f6:0c:72:60:b6:64:df:ca:a9:81:47:c7:c8:
                    e4:b5:4d:62:35:3f:6e:d2:c2:f8:27:75:27:61:d3:
                    be:5e:ee:1f:0a:c6:de:8b:92:54:09:f8:76:71:92:
                    94:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A1:33:A6:58:8A:17:43:07:D5:48:52:09:A5:2D:44:1A:81:03:38
            X509v3 Authority Key Identifier:
                keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3230322e302f32342d3332203d3e20313432313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.28.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:ad:89:3a:d4:d2:f2:9a:24:43:be:58:9f:b4:97:d3:65:dc:
         9e:61:42:51:66:5a:bc:5c:c2:e8:17:ac:9b:33:e5:b7:6d:61:
         cd:94:03:83:68:ec:32:18:64:ba:13:3b:2a:52:ca:12:e9:a2:
         bf:70:7c:c5:a8:8d:c7:55:8b:50:79:10:71:06:f9:57:d9:9c:
         ec:dd:e0:59:32:f7:d8:31:49:5c:3d:99:4e:33:de:1e:60:6d:
         19:60:57:a4:23:7b:95:36:76:e0:11:ff:fa:82:5a:fd:90:f3:
         43:f5:2a:16:23:c1:c0:07:e2:42:70:2a:36:f2:80:63:17:54:
         d6:fd:80:11:8d:66:99:0a:60:d9:e8:0b:e0:3a:57:96:ce:e7:
         61:95:39:ac:3d:18:1d:20:21:db:27:1b:83:dc:ee:78:99:30:
         ae:23:84:82:ad:6c:c5:de:de:7c:d2:75:3b:87:41:5b:2f:13:
         3c:c1:30:75:49:70:fd:30:65:ec:2f:b9:4a:8a:0b:51:d1:27:
         c1:94:42:d8:c1:f0:9b:78:80:b7:14:b8:d5:ef:05:21:ad:61:
         99:9f:58:fe:78:f6:85:81:1a:3a:2d:20:5f:9a:5d:0c:a2:b7:
         84:53:06:f3:79:e3:0a:f4:a9:39:f1:aa:98:c0:d7:a8:be:74:
         ef:84:78:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 17:45:48 2026 by rpki-client