This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e33332e302f32342d3332203d3e20313432313332.roa
File:                     3230322e34362e33332e302f32342d3332203d3e20313432313332.roa (raw, json)
Hash identifier:          aRkdeTUwGFclTmy8U7h/IqtjJjl6kM1bnQogkgjIZt4=
Subject key identifier:   7C:5C:35:4C:04:32:D5:F9:01:09:70:44:91:AA:55:54:82:D8:CA:9B
Certificate issuer:       /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial:       555053767923CE80A299D0D382F294A1FE1842C8
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e33332e302f32342d3332203d3e20313432313332.roa
Signing time:             Tue 20 Jan 2026 02:27:14 +0000
ROA not before:           Tue 20 Jan 2026 02:22:14 +0000
ROA not after:            Tue 19 Jan 2027 02:27:14 +0000
asID:                     142132
IP address blocks:        202.46.33.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 03:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:50:53:76:79:23:ce:80:a2:99:d0:d3:82:f2:94:a1:fe:18:42:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
        Validity
            Not Before: Jan 20 02:22:14 2026 GMT
            Not After : Jan 19 02:27:14 2027 GMT
        Subject: CN=7C5C354C0432D5F90109704491AA555482D8CA9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:08:8a:ef:f2:44:64:26:6b:63:66:ed:e4:97:
                    54:8a:0d:91:0d:78:49:e9:2b:ba:f1:e1:3b:83:9e:
                    52:1e:e7:78:17:a8:ac:55:b9:e0:1b:c9:3c:2a:89:
                    56:5e:42:07:ee:45:a8:fa:19:1e:86:3e:15:08:d9:
                    18:04:f4:1a:68:0e:96:7f:d3:5b:8c:fd:09:e7:d1:
                    0c:57:8a:39:4e:b4:17:3b:b0:36:4a:ce:bb:7c:e1:
                    17:88:d2:0d:9e:bf:c5:36:5b:e0:0b:51:8d:86:16:
                    67:9c:fa:4f:1a:40:68:ca:16:cb:c1:9f:36:06:da:
                    74:04:60:64:d5:13:d5:a7:a8:ad:a9:81:93:ee:af:
                    a5:fb:c4:56:0a:61:49:cb:e6:62:73:b8:49:87:a7:
                    bc:7f:72:69:b8:79:bf:73:ce:55:5b:2e:2f:b3:95:
                    78:56:ae:90:c8:20:e7:c9:6e:64:1e:fe:a0:67:00:
                    15:b8:75:6b:cb:c5:a6:72:74:ba:5f:94:19:ab:be:
                    de:bb:14:40:60:14:d1:7e:69:c4:a9:82:6a:24:12:
                    bc:00:32:d0:01:2d:a3:19:c0:cc:05:62:96:38:8b:
                    98:95:c6:e1:8b:99:c3:a1:47:ef:af:b4:05:24:71:
                    da:8d:8c:e2:0c:55:b5:ec:b5:bf:87:be:36:35:7a:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5C:35:4C:04:32:D5:F9:01:09:70:44:91:AA:55:54:82:D8:CA:9B
            X509v3 Authority Key Identifier:
                keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e33332e302f32342d3332203d3e20313432313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.46.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:cb:53:65:c7:0c:a0:c6:f4:f0:eb:c1:59:e2:0d:44:89:e4:
         bc:f7:5a:17:f3:e2:f6:1a:af:d3:60:98:c8:86:0e:5c:72:3a:
         e5:fd:56:f9:0f:78:93:94:21:68:0f:9c:80:e3:ea:61:c9:55:
         f1:50:c7:e6:43:ef:81:1e:ec:ae:c9:b0:de:7e:09:a8:78:4f:
         eb:dd:8b:cb:3d:b7:8b:c8:66:fa:da:83:35:86:fc:54:fc:8c:
         1d:ff:a7:a7:07:af:28:58:25:24:42:a4:62:5c:de:a3:2e:ec:
         b7:8a:54:0f:91:0a:cb:b4:05:c1:d3:79:6e:e7:1f:e9:54:db:
         8c:a4:1d:9a:e5:23:80:55:31:fb:18:e8:7c:a7:dc:90:25:c0:
         78:1f:30:43:bf:f3:0d:f1:b7:fd:f5:12:38:30:1b:14:74:57:
         b3:37:ea:5a:4c:14:12:a0:f8:31:54:6c:19:12:04:86:54:4e:
         bd:bf:28:a2:f4:df:17:23:79:36:38:4a:21:87:a2:ad:97:a1:
         33:59:29:cd:3e:12:06:e7:5e:4d:79:ea:5a:90:ad:fa:64:ff:
         7e:a4:90:00:e0:02:cb:fc:5f:4a:78:ee:05:54:8a:1e:16:86:
         1e:18:ec:1c:41:c7:a0:0c:f1:d3:fd:19:06:78:da:33:be:59:
         7a:fa:6b:c7
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUVVBTdnkjzoCimdDTgvKUof4YQsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5
OUVBQkQxMzAeFw0yNjAxMjAwMjIyMTRaFw0yNzAxMTkwMjI3MTRaMDMxMTAvBgNV
BAMTKDdDNUMzNTRDMDQzMkQ1RjkwMTA5NzA0NDkxQUE1NTU0ODJEOENBOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYCIrv8kRkJmtjZu3kl1SKDZEN
eEnpK7rx4TuDnlIe53gXqKxVueAbyTwqiVZeQgfuRaj6GR6GPhUI2RgE9BpoDpZ/
01uM/Qnn0QxXijlOtBc7sDZKzrt84ReI0g2ev8U2W+ALUY2GFmec+k8aQGjKFsvB
nzYG2nQEYGTVE9WnqK2pgZPur6X7xFYKYUnL5mJzuEmHp7x/cmm4eb9zzlVbLi+z
lXhWrpDIIOfJbmQe/qBnABW4dWvLxaZydLpflBmrvt67FEBgFNF+acSpgmokErwA
MtABLaMZwMwFYpY4i5iVxuGLmcOhR++vtAUkcdqNjOIMVbXstb+HvjY1esAjAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUfFw1TAQy1fkBCXBEkapVVILYypswHwYDVR0j
BBgwFoAU72ohkcRV2UMu+Hr4JnXV9JnqvRMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDQ1ODExNS8wL0VGNkEyMTkxQzQ1NUQ5NDMyRUY4N0FGODI2NzVE
NUY0OTlFQUJEMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUY2QTIxOTFDNDU1RDk0MzJFRjg3QUY4MjY3NUQ1RjQ5OUVBQkQxMy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDQ1ODExNS8wLzMyMzAzMjJlMzQz
NjJlMzMzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzQzMjMxMzMzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMouITANBgkqhkiG9w0BAQsFAAOCAQEAyMtTZccMoMb08OvBWeINRInk
vPdaF/Pi9hqv02CYyIYOXHI65f1W+Q94k5QhaA+cgOPqYclV8VDH5kPvgR7srsmw
3n4JqHhP692Lyz23i8hm+tqDNYb8VPyMHf+npwevKFglJEKkYlzeoy7st4pUD5EK
y7QFwdN5bucf6VTbjKQdmuUjgFUx+xjofKfckCXAeB8wQ7/zDfG3/fUSODAbFHRX
szfqWkwUEqD4MVRsGRIEhlROvb8oovTfFyN5NjhKIYeirZehM1kpzT4SBudeTXnq
WpCt+mT/fqSQAOACy/xfSnjuBVSKHhaGHhjsHEHHoAzx0/0ZBnjaM75Zevprxw==
-----END CERTIFICATE-----
Generated at Tue Jan 20 17:46:46 2026 by rpki-client