This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e33322e302f32342d3332203d3e20313432313332.roa
File:                     3230322e34362e33322e302f32342d3332203d3e20313432313332.roa (raw, json)
Hash identifier:          ImzWNpktBTnA2YK6OdAxQ9K4Gff/MXaZAZVbmPHyMVQ=
Subject key identifier:   07:CD:EE:10:41:9C:1B:17:7B:D6:3C:B5:6C:88:E1:BA:6A:84:0D:14
Certificate issuer:       /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial:       56A416E8917C2EF4D01DD4A78B07CF1189D080F8
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e33322e302f32342d3332203d3e20313432313332.roa
Signing time:             Tue 20 Jan 2026 02:27:14 +0000
ROA not before:           Tue 20 Jan 2026 02:22:14 +0000
ROA not after:            Tue 19 Jan 2027 02:27:14 +0000
asID:                     142132
IP address blocks:        202.46.32.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 03:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a4:16:e8:91:7c:2e:f4:d0:1d:d4:a7:8b:07:cf:11:89:d0:80:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
        Validity
            Not Before: Jan 20 02:22:14 2026 GMT
            Not After : Jan 19 02:27:14 2027 GMT
        Subject: CN=07CDEE10419C1B177BD63CB56C88E1BA6A840D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:b8:da:a6:9a:d0:68:40:f5:81:45:3c:75:
                    ac:c2:a5:b1:ea:14:18:3c:41:92:02:0f:be:1e:15:
                    bf:f0:5d:48:d7:12:87:2f:a7:57:4e:7f:aa:50:ee:
                    48:56:68:92:4d:a7:99:94:28:da:c0:54:53:6c:e9:
                    ae:b2:6c:b2:a3:5e:a2:0b:ac:68:f1:34:f3:68:81:
                    7a:60:97:c0:77:b7:cf:fe:3d:c2:27:23:41:de:c1:
                    47:77:38:f1:26:62:30:f8:4f:4a:3f:32:56:94:a9:
                    fd:75:e7:4a:03:29:46:f0:7e:91:f6:7d:b1:b9:3f:
                    4a:68:63:89:fa:c0:72:0a:06:0e:07:2e:21:7f:df:
                    34:d6:6a:26:f4:81:2a:49:6a:3a:f0:6c:bf:73:2a:
                    30:c4:bc:7b:c8:6a:9a:c6:0a:90:94:25:b0:ec:97:
                    13:f2:2c:a9:33:2f:7c:5c:17:b0:34:76:bb:0e:04:
                    d8:6d:24:48:ce:14:b1:72:ee:8a:bd:4d:bc:2a:63:
                    d0:a4:41:6c:d6:2e:36:69:c5:c9:bf:ec:d3:72:21:
                    8e:c8:1b:12:8e:f6:cf:65:ae:9b:52:9d:d1:db:ce:
                    41:2f:b3:51:74:d9:55:b2:ae:b8:55:8f:de:28:15:
                    38:0f:95:14:a7:28:2c:ef:a2:53:6d:2f:a6:27:46:
                    60:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CD:EE:10:41:9C:1B:17:7B:D6:3C:B5:6C:88:E1:BA:6A:84:0D:14
            X509v3 Authority Key Identifier:
                keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e33322e302f32342d3332203d3e20313432313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.46.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:df:6d:75:d5:25:14:58:5c:0d:41:ee:9a:de:cd:e0:9f:e1:
         d5:fb:6b:ba:47:1b:cf:01:f0:a7:9e:56:13:f9:69:16:00:b3:
         43:66:21:9c:72:dc:da:ab:1c:ff:9b:e8:ca:fb:b1:16:97:9c:
         79:6d:38:0c:73:55:91:4b:34:56:bb:d8:2d:66:78:ca:6e:6b:
         33:cc:c8:2f:18:51:47:58:65:79:23:ec:86:f3:0f:a8:1b:8e:
         35:a5:c9:7f:d7:81:9b:a0:dc:90:9a:c2:0e:34:01:26:31:f1:
         26:d2:2e:b9:87:6b:e0:4c:fd:a8:2b:0c:9f:68:ad:dc:c7:8d:
         40:dc:e5:28:f6:e5:11:85:68:eb:cb:c1:7c:30:59:0d:08:03:
         bb:2e:8b:49:7d:2d:aa:40:96:61:9d:0b:27:85:0a:ab:75:8f:
         eb:53:7e:b5:1e:0c:30:86:2b:a2:8c:d1:fb:3f:e9:f5:9a:d6:
         a6:54:f2:cb:be:01:eb:80:c9:3f:b6:7c:b2:e8:1d:31:8e:b8:
         0d:fc:43:7d:ff:21:b9:5a:ab:e0:4e:34:27:d3:bc:7d:c1:e4:
         49:fa:84:8a:79:28:23:88:71:df:40:50:5d:a6:f7:d1:2b:45:
         23:e9:83:b9:f6:1f:10:bc:3b:cc:98:34:c6:80:c4:4a:f9:38:
         ee:69:7c:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 17:47:10 2026 by rpki-client