This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3132382e302f32322d3234203d3e203632333837.roa
File:                     3130312e3233322e3132382e302f32322d3234203d3e203632333837.roa (raw, json)
Hash identifier:          W/bQYZj/hsTlnoP7p5QDfey1W36vYQVxLnEsc4e0VVc=
Subject key identifier:   E4:93:78:70:33:D8:76:3C:FB:6D:50:C1:1E:E3:2B:D5:97:91:73:1A
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       6F2F87E593485F58A4101585363459E71434664F
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3132382e302f32322d3234203d3e203632333837.roa
Signing time:             Tue 20 Jan 2026 02:11:58 +0000
ROA not before:           Tue 20 Jan 2026 02:06:58 +0000
ROA not after:            Tue 19 Jan 2027 02:11:58 +0000
asID:                     62387
IP address blocks:        101.232.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 10:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2f:87:e5:93:48:5f:58:a4:10:15:85:36:34:59:e7:14:34:66:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jan 20 02:06:58 2026 GMT
            Not After : Jan 19 02:11:58 2027 GMT
        Subject: CN=E493787033D8763CFB6D50C11EE32BD59791731A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:47:f6:bc:ee:e7:7f:2d:a8:45:16:9f:4c:
                    8b:a8:8b:c7:83:9b:dc:44:fb:0a:6f:e0:ab:45:d5:
                    c9:e9:2a:f8:73:51:8e:25:6d:6d:7d:51:69:59:b0:
                    59:1b:c8:1a:10:5c:2a:73:ee:03:c7:f8:e5:cc:4c:
                    f0:f5:49:85:33:44:28:c5:be:89:e4:1c:56:df:99:
                    84:cb:76:24:cb:69:ff:bf:0a:0e:62:26:13:28:76:
                    29:ab:1f:59:8e:6f:37:eb:98:4c:84:c5:1c:93:8b:
                    4c:5a:b0:2f:ec:d4:59:e5:bd:de:69:99:b0:3b:f6:
                    40:1b:0b:bc:17:12:27:ba:cf:4b:fb:37:f0:4b:1c:
                    40:ae:81:ca:82:48:db:ae:50:6c:f3:a0:98:b2:17:
                    63:f0:18:1c:19:e0:ed:bd:88:a0:7b:ee:64:94:0a:
                    79:1b:56:9a:f5:b0:7b:97:3b:29:3c:65:4d:2e:8a:
                    65:20:fe:a5:14:2e:de:06:d5:5f:e5:00:ea:2c:63:
                    24:ca:13:6d:3a:ce:3c:1a:75:ec:06:11:09:28:17:
                    0c:0a:3e:28:8f:0d:1c:ab:28:4b:ae:20:31:f0:75:
                    14:92:df:09:93:57:b6:19:58:d2:d2:dd:92:cf:75:
                    2f:27:8f:0d:05:e5:0e:55:a8:8f:e2:4f:87:ac:6f:
                    84:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:93:78:70:33:D8:76:3C:FB:6D:50:C1:1E:E3:2B:D5:97:91:73:1A
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3132382e302f32322d3234203d3e203632333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.232.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:35:9b:ea:6d:de:c3:c6:a8:65:06:15:db:ec:a5:08:9f:e6:
         19:fe:fa:e0:a9:c7:81:58:b1:d5:8a:c9:32:14:fc:bc:3d:48:
         7b:d6:ef:90:1b:bf:69:98:72:c5:c2:dc:be:f6:93:a7:63:c2:
         78:38:77:c9:bd:a9:9d:f5:ae:6d:50:cf:9d:3d:03:3b:f7:51:
         9b:44:e3:5d:51:50:21:4a:cc:58:9e:d8:39:76:f7:9b:c2:53:
         07:48:71:9d:3a:67:c5:1a:1e:30:b2:af:c2:cf:a4:50:e7:00:
         a4:1a:5c:8e:7c:2c:e2:de:bc:3b:f2:bb:12:5b:02:7e:a5:cc:
         88:c2:71:1a:98:34:50:08:16:be:5d:36:67:38:65:3a:78:5c:
         ba:c9:0e:a8:e0:2f:48:32:95:e7:3e:46:c7:59:64:a2:71:0f:
         5b:03:58:4b:c9:5f:5f:29:ab:5a:8e:7a:15:e6:97:c6:36:1d:
         19:6f:83:21:1f:01:78:59:2b:17:38:5c:f2:d5:d7:6f:dc:dd:
         aa:99:65:7f:fb:c2:24:4b:c7:ce:a0:21:2e:26:99:60:62:c9:
         8f:72:12:8f:87:19:14:d8:86:23:4d:2a:c7:63:52:35:22:dc:
         35:56:23:f5:59:78:01:5e:cf:22:e9:bb:3a:b7:5b:54:d3:cc:
         5e:ef:9d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 15:31:45 2026 by rpki-client