This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3134342e302f32322d3234203d3e203632333837.roa
File:                     3130312e3233322e3134342e302f32322d3234203d3e203632333837.roa (raw, json)
Hash identifier:          dnP0455oLYXVgpr0/l53Y31YnAi8TXoahm/DGNNY1Pk=
Subject key identifier:   FF:E5:79:AC:4E:ED:5D:B6:D2:5D:70:F1:5F:FB:C2:63:52:23:85:61
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       05132266F18B68AE2FE1193DAF71528B1C131431
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3134342e302f32322d3234203d3e203632333837.roa
Signing time:             Tue 20 Jan 2026 02:11:58 +0000
ROA not before:           Tue 20 Jan 2026 02:06:58 +0000
ROA not after:            Tue 19 Jan 2027 02:11:58 +0000
asID:                     62387
IP address blocks:        101.232.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 10:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:13:22:66:f1:8b:68:ae:2f:e1:19:3d:af:71:52:8b:1c:13:14:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jan 20 02:06:58 2026 GMT
            Not After : Jan 19 02:11:58 2027 GMT
        Subject: CN=FFE579AC4EED5DB6D25D70F15FFBC26352238561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:2f:f9:cf:d7:79:cc:3e:17:d3:97:6a:e6:
                    25:40:5f:ff:a6:31:28:17:c5:fa:f1:a1:09:a9:0e:
                    3e:e3:66:23:0d:46:f9:bd:80:4b:56:49:eb:2e:41:
                    ed:37:4a:7c:b3:72:bd:b7:3d:35:66:2d:ad:51:f4:
                    35:81:cb:1c:25:79:f4:da:09:50:89:1a:d8:99:3e:
                    83:01:2a:9c:66:4e:a8:ab:eb:1e:9e:bf:d5:ef:51:
                    47:03:dd:52:cd:1e:e7:6b:cd:36:2a:11:df:9d:45:
                    d4:c4:8c:b1:80:09:62:f6:79:5f:97:85:91:bf:6d:
                    22:cc:44:62:90:4f:b1:8a:0f:32:ad:8c:d9:9d:ce:
                    f3:e0:57:f3:44:60:84:f4:9a:f4:03:a3:8d:2c:35:
                    2e:23:cb:b6:d5:cd:9a:a7:b6:f0:f8:46:c4:eb:24:
                    4a:be:0f:9c:a3:7c:70:3c:11:34:7b:e2:24:1f:c5:
                    42:54:cc:05:25:9a:76:59:df:c4:28:06:da:00:e7:
                    14:14:a2:50:69:fa:18:af:b5:57:d4:bf:56:77:13:
                    e8:11:76:8c:91:6f:68:78:60:b6:17:6a:9f:50:9b:
                    c5:c5:dc:12:fd:ce:95:9e:8d:e7:b8:dc:a6:c0:14:
                    61:4c:91:5c:cb:e5:af:60:2e:28:d9:8d:b6:90:3f:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E5:79:AC:4E:ED:5D:B6:D2:5D:70:F1:5F:FB:C2:63:52:23:85:61
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3134342e302f32322d3234203d3e203632333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.232.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:b2:3d:7a:4a:ae:d3:6d:db:6b:67:c6:a1:00:5a:b8:b5:85:
         6a:d8:2e:8e:59:4e:be:ac:63:77:f7:c6:d1:94:bd:36:44:83:
         2c:97:a8:53:90:c6:fc:27:93:62:44:fe:6a:13:a3:b4:15:8a:
         92:c2:49:8b:89:cb:86:92:62:26:4e:df:90:6f:29:5b:1e:98:
         14:0c:41:a5:e1:3d:28:e5:01:92:d9:ea:54:94:ca:5f:7b:22:
         41:a9:f8:17:2a:c7:88:86:6a:38:0a:3c:22:a4:58:5e:84:f5:
         64:8c:17:6c:c2:79:30:48:6f:77:17:92:80:b1:9d:b4:e7:ad:
         c5:98:5c:16:06:8c:e3:c2:58:73:13:2e:97:54:c0:2c:d5:86:
         d8:69:da:6e:49:96:0a:20:c9:c3:81:8f:73:a3:2c:64:1e:05:
         15:ea:18:f6:41:6b:27:bb:af:c2:85:27:21:39:5a:d8:8b:e5:
         a1:97:72:a2:71:37:ae:33:54:d1:d3:1a:79:e0:54:d8:1d:8a:
         6e:25:1c:a6:31:c6:b0:d8:a7:c7:ac:9d:08:ca:7b:45:e6:4b:
         12:b7:7e:c6:3b:83:f0:7f:0b:4c:2c:88:ce:28:d7:c0:38:58:
         53:a9:60:c1:92:ee:cf:f0:42:88:73:67:12:1f:5f:99:2b:a1:
         a8:5d:6f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 15:31:56 2026 by rpki-client