This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3139352e302f32342d3234203d3e2032393134.roa
File:                     3138302e3232332e3139352e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          qZKDoieAvhaGXia6eX8Io58AsQzmCq7+zmq4W8EAthU=
Subject key identifier:   2D:13:20:A8:3E:0E:E7:EA:C0:8A:50:40:9B:F9:AE:AF:64:F8:A7:A2
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       436DFE5ACEB1719E2C5C8FFB9F9E4A442A970808
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3139352e302f32342d3234203d3e2032393134.roa
Signing time:             Tue 20 Jan 2026 02:24:58 +0000
ROA not before:           Tue 20 Jan 2026 02:19:58 +0000
ROA not after:            Tue 19 Jan 2027 02:24:58 +0000
asID:                     2914
IP address blocks:        180.223.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6d:fe:5a:ce:b1:71:9e:2c:5c:8f:fb:9f:9e:4a:44:2a:97:08:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:58 2026 GMT
            Not After : Jan 19 02:24:58 2027 GMT
        Subject: CN=2D1320A83E0EE7EAC08A50409BF9AEAF64F8A7A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:20:c4:fc:11:1e:37:2b:f9:ec:f3:35:11:0b:
                    97:05:9f:73:a3:24:59:48:98:23:8a:a7:ab:b8:3c:
                    34:f0:4d:6f:a7:aa:7e:f4:a7:be:b7:b1:2e:a3:e4:
                    68:0b:d1:46:01:62:05:c0:8e:3b:fe:27:04:15:a9:
                    b0:67:3b:c7:39:63:61:5e:eb:43:96:9e:84:79:0e:
                    3c:8a:35:19:dc:c0:a5:5c:df:9a:50:f5:88:20:a0:
                    77:b0:e2:ed:cc:82:57:ec:f4:9f:9b:a0:c5:65:ae:
                    96:bf:0a:06:7d:e9:32:92:5b:b2:65:0c:95:e8:59:
                    7b:ea:6f:26:fd:cc:ff:40:4f:d3:00:dc:60:4c:d7:
                    1d:e3:36:e0:e2:04:3e:b9:ff:c2:84:69:13:7c:81:
                    b3:bb:59:95:fa:7d:01:ee:1e:3b:d4:c0:1d:51:6b:
                    f5:d8:a2:fd:ff:ca:0d:0b:89:d5:bf:c0:7b:d1:c3:
                    59:c8:2f:47:06:78:1a:e1:4a:66:19:5e:4a:06:cb:
                    29:ed:d1:c3:e1:94:16:2b:67:de:ee:45:95:3c:fe:
                    d4:dc:9b:24:e5:f0:cc:30:18:8d:15:4d:a0:7f:b7:
                    84:8d:4f:dc:f8:9d:67:1c:d9:ca:f8:b0:fa:1e:be:
                    29:73:64:71:08:73:76:56:04:43:bb:2b:79:f4:a7:
                    50:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:13:20:A8:3E:0E:E7:EA:C0:8A:50:40:9B:F9:AE:AF:64:F8:A7:A2
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3139352e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:60:fa:8e:e0:e0:ce:8d:69:dc:92:1b:16:00:ec:89:7b:77:
         4f:8a:69:9e:fd:d6:31:77:66:7e:62:3c:f9:25:f0:55:26:f8:
         e6:2e:db:2e:98:ed:ed:7a:fd:89:a2:e5:d9:f8:f3:3b:f6:53:
         1c:b7:4c:c8:81:13:6f:fd:55:d4:92:d4:55:4e:6a:f7:de:61:
         9b:ad:5f:66:0a:39:c8:41:9e:d8:7d:1c:78:69:96:82:fe:b1:
         a2:a5:2a:cb:03:8f:e2:5d:a4:58:bf:d8:e3:8e:9d:b8:0c:a1:
         54:3b:1f:06:11:81:77:37:bd:95:32:d9:8d:53:3a:e8:d5:10:
         02:19:79:ff:b7:90:30:b8:60:8a:4c:42:bf:78:8e:27:b8:f8:
         0d:2b:d2:dd:c7:4d:97:87:34:20:28:24:57:b3:97:fc:70:3a:
         c0:63:fc:b8:ee:de:95:52:4a:82:2d:9c:a5:7a:25:00:cc:67:
         3e:e7:31:15:5e:38:40:3f:4d:d3:fb:55:85:8b:60:1d:79:0f:
         0e:3a:10:a9:15:32:af:9a:fb:1f:75:30:78:76:b4:a3:c5:0a:
         65:56:42:d9:17:e7:d8:d0:c3:b8:28:df:71:d0:ab:36:26:af:
         95:2f:44:3d:01:b4:47:b0:cd:77:e8:d6:6a:d0:f1:18:b6:0a:
         da:a2:7c:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:42 2026 by rpki-client