This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3235342e302f32342d3332203d3e20313432313332.roa
File:                     3131342e32382e3235342e302f32342d3332203d3e20313432313332.roa (raw, json)
Hash identifier:          j/kCe1R482npo/DPFk8G2xR7iL8FDpLrSE7yWcUxfOE=
Subject key identifier:   96:49:97:93:2C:DA:F7:E2:F6:BD:03:BE:C9:51:49:FA:46:5C:2B:04
Certificate issuer:       /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial:       325D53869491E6F064E59329003E47C3AFC312F1
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3235342e302f32342d3332203d3e20313432313332.roa
Signing time:             Tue 20 Jan 2026 02:27:14 +0000
ROA not before:           Tue 20 Jan 2026 02:22:14 +0000
ROA not after:            Tue 19 Jan 2027 02:27:14 +0000
asID:                     142132
IP address blocks:        114.28.254.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 03:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5d:53:86:94:91:e6:f0:64:e5:93:29:00:3e:47:c3:af:c3:12:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
        Validity
            Not Before: Jan 20 02:22:14 2026 GMT
            Not After : Jan 19 02:27:14 2027 GMT
        Subject: CN=964997932CDAF7E2F6BD03BEC95149FA465C2B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d4:44:54:0e:43:2e:a3:04:f1:0b:16:c1:ac:
                    65:09:2f:8b:d0:7a:82:62:ba:f7:37:9d:dd:6d:8b:
                    90:30:cd:15:a0:3c:1f:6f:7c:f7:f3:70:9d:73:ce:
                    22:82:7b:d9:1c:95:8f:07:a9:28:b8:47:1a:89:35:
                    79:c1:26:3d:82:ca:43:27:b9:af:06:5b:68:7f:c7:
                    89:59:32:43:98:17:0e:9a:72:10:d3:a7:6f:19:3f:
                    2f:9d:48:73:a9:ef:1c:a7:a2:39:41:3f:ce:c6:69:
                    c3:75:43:ce:34:b4:b1:22:68:51:fa:2e:2e:ec:f8:
                    65:6d:61:01:05:31:f2:7c:72:74:2c:9e:e7:b1:0e:
                    3f:5a:8e:68:1d:2e:75:5b:8b:fa:b1:93:26:1d:29:
                    56:28:26:e9:38:fa:55:f1:65:15:e2:8e:e8:75:f6:
                    4b:84:33:58:d2:c6:9c:25:9d:63:e3:de:e8:7c:a8:
                    b7:43:d3:63:71:b7:c5:a4:24:35:05:a6:91:56:0f:
                    61:62:67:b8:99:93:82:38:64:e7:4e:1e:ff:51:92:
                    0b:71:9f:32:6d:63:b8:7f:6d:6f:64:91:0a:d8:a2:
                    c8:4d:c1:07:fb:1a:14:68:8d:c4:2d:4b:a1:c6:f8:
                    cb:9e:7c:75:7c:60:3f:80:8d:09:5a:40:ae:da:c8:
                    63:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:49:97:93:2C:DA:F7:E2:F6:BD:03:BE:C9:51:49:FA:46:5C:2B:04
            X509v3 Authority Key Identifier:
                keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3131342e32382e3235342e302f32342d3332203d3e20313432313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.28.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:0a:01:f9:48:30:26:52:e0:6a:97:30:9e:6a:c7:0e:cf:9c:
         ad:07:d5:d1:08:98:66:90:07:64:d8:54:8f:c9:fd:1f:2e:af:
         a6:f3:57:8c:0a:00:40:9e:12:67:0a:f3:00:33:f8:d8:1d:62:
         19:b6:37:a7:2e:d8:4e:45:73:b7:18:f3:b5:3c:7b:f1:1b:46:
         5c:ed:2c:53:25:7d:9b:f9:b2:eb:8b:3b:4a:c7:51:76:44:62:
         a3:b1:52:11:5c:d7:ee:60:1f:72:dc:2d:ae:b0:1d:d2:f8:9e:
         5a:f4:74:28:42:97:e5:03:84:ab:68:68:fb:21:9b:7a:b6:af:
         45:7f:42:a2:4f:65:f6:1b:da:fc:89:ac:4f:07:da:c8:d8:d1:
         d6:ec:16:99:45:7a:32:e6:51:de:0e:d1:f0:13:57:66:07:28:
         7c:3c:cf:f6:50:50:c2:76:ff:e4:52:a2:33:27:4a:45:f3:c0:
         d8:fa:4f:8e:d5:c5:e5:b2:dc:3a:27:63:87:79:45:a3:47:93:
         19:6f:0f:2b:17:25:8c:dc:49:5e:cc:fc:32:e6:f1:5a:95:f5:
         28:16:bc:11:58:2c:51:f0:cd:64:34:d6:4c:0a:44:3c:8d:a2:
         c1:fd:ae:a7:7d:3d:63:83:c8:97:c6:3d:3d:68:ef:ff:42:f9:
         d8:33:1a:84
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUMl1ThpSR5vBk5ZMpAD5Hw6/DEvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5
OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTRaFw0yNzAxMTkwMjI3MTRaMDMxMTAvBgNV
BAMTKDk2NDk5NzkzMkNEQUY3RTJGNkJEMDNCRUM5NTE0OUZBNDY1QzJCMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc1ERUDkMuowTxCxbBrGUJL4vQ
eoJiuvc3nd1ti5AwzRWgPB9vfPfzcJ1zziKCe9kclY8HqSi4RxqJNXnBJj2CykMn
ua8GW2h/x4lZMkOYFw6achDTp28ZPy+dSHOp7xynojlBP87GacN1Q840tLEiaFH6
Li7s+GVtYQEFMfJ8cnQsnuexDj9ajmgdLnVbi/qxkyYdKVYoJuk4+lXxZRXijuh1
9kuEM1jSxpwlnWPj3uh8qLdD02Nxt8WkJDUFppFWD2FiZ7iZk4I4ZOdOHv9Rkgtx
nzJtY7h/bW9kkQrYoshNwQf7GhRojcQtS6HG+MuefHV8YD+AjQlaQK7ayGOlAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUlkmXkyza9+L2vQO+yVFJ+kZcKwQwHwYDVR0j
BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE
NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ0NTgxMTUvMC8zMTMxMzQyZTMy
MzgyZTMyMzUzNDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMjMxMzMzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAHIc/jANBgkqhkiG9w0BAQsFAAOCAQEAlgoB+UgwJlLgapcwnmrH
Ds+crQfV0QiYZpAHZNhUj8n9Hy6vpvNXjAoAQJ4SZwrzADP42B1iGbY3py7YTkVz
txjztTx78RtGXO0sUyV9m/my64s7SsdRdkRio7FSEVzX7mAfctwtrrAd0vieWvR0
KEKX5QOEq2ho+yGberavRX9Cok9l9hva/ImsTwfayNjR1uwWmUV6MuZR3g7R8BNX
ZgcofDzP9lBQwnb/5FKiMydKRfPA2PpPjtXF5bLcOidjh3lFo0eTGW8PKxcljNxJ
Xsz8MubxWpX1KBa8EVgsUfDNZDTWTApEPI2iwf2up309Y4PIl8Y9PWjv/0L52DMa
hA==
-----END CERTIFICATE-----
Generated at Tue Jan 20 17:45:33 2026 by rpki-client