This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e34312e302f32342d3332203d3e203234343133.roa
File:                     3230322e34362e34312e302f32342d3332203d3e203234343133.roa (raw, json)
Hash identifier:          MH+z7S8m0+NJYb4yQesScSMdHuiUp9PP6SLiA1TOGgw=
Subject key identifier:   64:4B:A5:CC:1E:2D:06:70:C8:FF:ED:4E:43:CB:36:66:0C:0D:47:93
Certificate issuer:       /CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
Certificate serial:       6182872A3CB37D2204C61A8139A82D24986F9AF6
Authority key identifier: EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e34312e302f32342d3332203d3e203234343133.roa
Signing time:             Tue 20 Jan 2026 02:27:13 +0000
ROA not before:           Tue 20 Jan 2026 02:22:13 +0000
ROA not after:            Tue 19 Jan 2027 02:27:13 +0000
asID:                     24413
IP address blocks:        202.46.41.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 03:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:82:87:2a:3c:b3:7d:22:04:c6:1a:81:39:a8:2d:24:98:6f:9a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6A2191C455D9432EF87AF82675D5F499EABD13
        Validity
            Not Before: Jan 20 02:22:13 2026 GMT
            Not After : Jan 19 02:27:13 2027 GMT
        Subject: CN=644BA5CC1E2D0670C8FFED4E43CB36660C0D4793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:04:7f:7c:7c:c2:10:2c:02:e1:2a:b0:b9:
                    ed:94:47:c1:9d:21:92:8d:0f:0b:60:87:1c:e1:2b:
                    13:58:71:60:f2:7e:bb:09:6a:7e:97:bd:f4:d0:81:
                    21:54:d7:72:5f:38:c7:e2:50:87:d6:dc:83:d3:47:
                    ca:13:41:71:79:eb:15:53:6f:24:60:c1:eb:32:20:
                    90:44:5d:9f:d4:8d:28:49:23:3e:15:9d:89:4c:f5:
                    8a:e3:b6:67:0d:b3:15:75:e5:f1:12:86:6a:89:e4:
                    ef:dc:b7:51:8f:3c:d4:ef:f2:8f:29:44:26:99:01:
                    1f:a7:92:a7:fc:dc:ea:2c:b2:83:a6:fa:c3:8f:29:
                    fe:a4:9a:d7:f4:8e:8d:c2:83:ab:da:00:b5:18:b9:
                    14:36:fc:41:e5:ce:60:b8:b0:6c:22:c7:38:2d:4f:
                    a5:da:8c:b5:2c:42:b3:e0:98:e9:5f:1f:86:c3:e8:
                    82:18:f7:da:ff:ed:9d:10:35:a7:18:bd:c5:ff:2e:
                    2f:c8:e3:42:7e:fe:37:04:6e:91:a0:93:d1:06:15:
                    3d:dc:95:56:9c:59:74:55:35:f1:73:78:83:fe:6a:
                    a3:c2:23:ff:0b:3f:e4:07:3a:3c:4e:44:38:ef:94:
                    9c:18:4f:41:2d:67:7d:b1:fe:1a:5f:3a:9c:de:6a:
                    c7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4B:A5:CC:1E:2D:06:70:C8:FF:ED:4E:43:CB:36:66:0C:0D:47:93
            X509v3 Authority Key Identifier:
                keyid:EF:6A:21:91:C4:55:D9:43:2E:F8:7A:F8:26:75:D5:F4:99:EA:BD:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/EF6A2191C455D9432EF87AF82675D5F499EABD13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF6A2191C455D9432EF87AF82675D5F499EABD13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394458115/0/3230322e34362e34312e302f32342d3332203d3e203234343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.46.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:5b:3d:76:03:a0:09:68:32:f9:3e:a1:fb:78:a2:51:95:eb:
         c0:74:54:ea:2c:eb:b4:b0:76:e9:8f:37:0d:04:48:6f:d4:f8:
         90:96:39:bb:8f:67:93:f0:82:32:d3:dc:90:73:14:e0:ba:fc:
         c0:b5:06:2c:3f:63:af:28:f3:b7:7b:1f:49:29:a3:b9:13:9b:
         f1:81:02:5e:9a:86:a3:8e:67:00:04:87:45:b4:bb:69:7e:db:
         e0:69:de:5b:c7:ec:78:6e:02:46:8b:5c:c6:56:01:c6:df:89:
         96:7b:52:d1:92:8d:f8:5a:53:91:39:cc:e5:47:fb:35:b6:af:
         17:5f:77:8e:4d:d2:e3:8f:4c:36:15:5f:dc:cc:ce:86:87:34:
         58:6b:a1:8d:b0:74:91:c1:85:39:b6:fc:01:2f:26:0c:76:a9:
         42:9f:ee:6a:bc:6b:2e:bd:5a:34:31:14:f9:82:b7:62:33:32:
         09:b4:d1:b6:71:cf:11:8b:a4:cb:38:00:4a:2d:1d:4d:1b:86:
         bc:42:4e:1e:7b:3b:4a:a4:b7:58:3e:30:0f:36:3e:1a:c5:5b:
         95:87:b4:31:d4:a3:b9:d9:f8:39:00:b0:bf:b6:5b:26:be:c5:
         7a:f3:bc:9c:d4:48:53:c2:4a:ac:3c:4e:32:0a:ec:9b:e0:33:
         03:61:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 14:42:26 2026 by rpki-client