This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3134302e302f32322d3234203d3e203632333837.roa
File:                     3130312e3233322e3134302e302f32322d3234203d3e203632333837.roa (raw, json)
Hash identifier:          yU65BB1qrplK2lLxtpF/uVSmP1uOUvh6JmJKAK+0pfg=
Subject key identifier:   24:3D:A5:DE:86:52:D9:BD:2E:B4:D1:91:92:C9:72:A5:CC:F6:81:00
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       3DF6B313A14695E28BD3ACA93837F73B89AE41F3
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3134302e302f32322d3234203d3e203632333837.roa
Signing time:             Tue 20 Jan 2026 02:11:58 +0000
ROA not before:           Tue 20 Jan 2026 02:06:58 +0000
ROA not after:            Tue 19 Jan 2027 02:11:58 +0000
asID:                     62387
IP address blocks:        101.232.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 10:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f6:b3:13:a1:46:95:e2:8b:d3:ac:a9:38:37:f7:3b:89:ae:41:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jan 20 02:06:58 2026 GMT
            Not After : Jan 19 02:11:58 2027 GMT
        Subject: CN=243DA5DE8652D9BD2EB4D19192C972A5CCF68100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:59:ba:4d:4c:37:c0:4a:1c:6b:cb:3d:e3:
                    7d:98:95:97:76:ee:b2:f7:67:f9:6f:6a:72:b9:f8:
                    5d:6c:4f:f8:37:47:b5:66:fe:b8:7e:25:47:c3:39:
                    b9:a5:5e:c2:d1:d4:93:21:a0:3d:64:a4:a5:5a:7c:
                    3c:44:67:1a:74:b6:96:5e:26:e7:4a:c6:c8:eb:ab:
                    ac:0d:77:f0:d9:31:04:ff:a5:41:56:2a:e6:b4:d1:
                    4e:00:fa:18:cd:e8:e8:7b:c2:22:1c:11:42:7f:86:
                    d3:45:44:c4:ff:b3:d1:00:40:be:a7:2a:ef:41:fc:
                    3e:ae:d0:2d:d7:67:ac:5e:bc:35:ba:88:38:ac:d6:
                    ff:96:69:b9:7a:d6:d8:8e:6c:b9:1c:47:0a:f9:ca:
                    64:e0:df:f8:cf:a6:33:5f:44:af:ce:7e:24:28:4c:
                    dd:fa:c7:33:38:b4:8b:4e:9f:65:a1:fa:0b:cf:1e:
                    24:ee:dd:96:6b:86:f2:62:16:88:43:76:67:a6:77:
                    61:e5:c1:90:30:0e:ac:d8:70:55:4a:f4:1c:a2:30:
                    14:b4:73:2d:23:43:6d:3c:52:ad:c2:88:c6:0a:56:
                    c8:6d:11:1c:73:be:cc:4f:81:b0:2e:10:aa:d2:d0:
                    7f:fb:f5:45:a7:ad:3d:85:58:93:9b:3b:a4:e0:94:
                    e7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3D:A5:DE:86:52:D9:BD:2E:B4:D1:91:92:C9:72:A5:CC:F6:81:00
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3134302e302f32322d3234203d3e203632333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.232.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:1c:ce:af:8f:4f:cd:18:20:e2:1b:a9:8c:dd:85:73:92:d9:
         9e:e8:da:03:ca:86:46:31:cd:66:26:ac:43:14:2f:37:48:a9:
         9a:b6:64:be:5d:54:74:ed:36:ae:9d:fa:89:8d:74:2c:e0:e9:
         cd:6f:01:f4:0d:3d:26:71:5f:18:7e:e8:e4:c1:18:93:33:09:
         ee:09:ff:cb:23:ef:e7:ba:40:10:75:b4:d3:c1:cf:23:44:d4:
         f8:3d:3e:4f:04:f3:61:28:51:ae:34:a5:7d:2d:81:1b:d4:c2:
         fd:45:c7:73:1f:f8:2d:f3:05:73:af:d8:9f:b9:b4:a0:48:43:
         be:ad:1b:4c:40:4b:6f:bd:0e:50:b4:34:1e:50:8b:a0:55:07:
         23:18:75:98:22:81:a0:50:b8:e9:fb:33:58:f0:93:8b:13:e8:
         ef:79:28:ba:e3:29:f5:29:d5:d1:61:68:5e:11:11:7e:7c:ae:
         d8:81:61:55:6a:15:7f:72:c6:9d:ad:43:83:30:e2:f6:45:42:
         54:ad:c1:3d:2b:64:74:de:1a:0a:a1:c2:73:22:39:fb:ee:5d:
         b2:35:c6:3f:27:ff:cf:44:15:b7:82:5a:10:21:0a:28:ea:f8:
         9e:6a:f9:4a:77:5b:53:97:fa:e7:21:a2:11:67:8d:5d:55:6b:
         47:37:1a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 15:31:56 2026 by rpki-client