This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230312e302f32342d3234203d3e2032393134.roa
File:                     3138302e3232332e3230312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          TL+26RnyP2ZsqrvUvrJueuYd0TuDX8cvS+Hj5wUy3YE=
Subject key identifier:   70:3B:88:94:F9:B2:25:65:1B:D9:6A:C5:D6:7C:E0:E3:91:7C:D9:6C
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       140E8590213FDF851753A0822A62518689B27D09
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230312e302f32342d3234203d3e2032393134.roa
Signing time:             Tue 20 Jan 2026 02:24:55 +0000
ROA not before:           Tue 20 Jan 2026 02:19:55 +0000
ROA not after:            Tue 19 Jan 2027 02:24:55 +0000
asID:                     2914
IP address blocks:        180.223.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0e:85:90:21:3f:df:85:17:53:a0:82:2a:62:51:86:89:b2:7d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:55 2026 GMT
            Not After : Jan 19 02:24:55 2027 GMT
        Subject: CN=703B8894F9B225651BD96AC5D67CE0E3917CD96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:33:4f:80:b1:22:ab:86:33:81:e8:da:1d:cc:
                    90:74:8a:54:28:78:47:5a:58:c4:19:b9:0e:cc:e5:
                    7b:93:5a:50:e7:41:df:0f:4c:8e:c9:30:e3:16:61:
                    fb:82:6f:c4:06:76:c0:92:a6:6e:fd:61:bf:ed:f3:
                    cb:84:7b:4f:9f:88:24:82:7e:a6:43:ad:97:d0:35:
                    e8:24:e5:e2:f3:64:8f:3f:d4:03:33:33:d4:ef:62:
                    8f:b2:f5:c7:5c:a8:17:77:48:2a:ba:6b:d2:87:5d:
                    0f:07:ed:19:b7:7e:72:86:0f:d7:2f:0c:fe:e8:77:
                    61:8c:7e:6b:8c:32:c9:2d:b0:cb:b2:74:78:dc:5f:
                    19:3d:ab:86:eb:1d:34:5c:aa:0f:5f:34:6c:f3:a6:
                    bc:fd:74:4b:08:3a:b6:58:5c:eb:27:f4:12:14:ff:
                    da:4a:15:27:2b:a7:e1:0d:70:df:fb:5b:84:07:fd:
                    8a:d6:df:76:df:10:01:18:9d:65:55:b2:4f:6f:5a:
                    4f:68:1d:e1:49:3a:49:3c:b8:33:a6:20:c1:c8:45:
                    26:39:93:9a:a1:87:89:43:f5:c5:fa:4d:61:62:7d:
                    7f:bb:1f:18:37:f8:8d:1c:25:bb:c8:08:71:52:44:
                    15:36:84:fe:bd:b2:1c:f2:4f:2c:e7:5d:12:4d:fa:
                    33:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3B:88:94:F9:B2:25:65:1B:D9:6A:C5:D6:7C:E0:E3:91:7C:D9:6C
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230312e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:67:b1:17:c7:92:98:67:13:86:7e:be:d4:25:24:58:8a:2b:
         3f:89:00:ef:4b:30:74:22:ac:15:21:f1:07:49:af:5b:81:1f:
         22:2f:f7:39:c8:03:27:24:a3:df:45:4d:10:51:53:c9:4a:81:
         76:a0:7b:02:c3:6d:8a:53:66:a4:8f:75:0d:3d:d5:82:8b:89:
         bd:a7:c2:0a:61:6a:4c:55:7d:d4:0b:ba:25:82:8e:68:16:fc:
         b0:5a:2f:53:44:b1:cb:1b:1f:df:48:41:58:b2:9d:97:6e:ab:
         a6:76:4a:a2:9a:93:e9:5b:ca:76:8e:5f:ba:54:16:92:a3:14:
         33:e6:da:e4:3c:72:e6:90:c3:af:79:1b:ad:b9:24:3a:74:37:
         82:77:ef:49:bd:ec:1d:e6:57:93:22:7b:90:f9:e7:6b:2a:d0:
         f8:27:72:25:ca:1b:9a:e6:9e:40:20:6b:ee:6d:1d:85:b8:f1:
         6f:29:5f:7c:74:f1:21:a0:97:51:ad:4b:f5:d5:d7:e9:1b:fe:
         9d:69:4a:14:b3:54:ec:e4:b3:eb:6a:0b:ee:42:7d:97:2a:63:
         d9:bb:ea:ed:fb:43:2a:d5:55:9f:59:ed:f3:aa:ac:cd:41:cf:
         7d:ce:71:b5:98:47:d6:25:fb:5c:ff:0c:bd:e2:6a:8d:50:23:
         af:82:85:26
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:43 2026 by rpki-client