This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230322e302f32342d3234203d3e2032393134.roa
File:                     3138302e3232332e3230322e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          zJZnNlT9EpqggZT8CAbgXGHr2Z/+6UeNeB1z8nqKG1M=
Subject key identifier:   E6:DE:92:32:11:4C:C1:4D:9E:45:59:E6:B6:23:6A:4A:19:0B:B9:20
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       3839F983664D6441C7DB62888EFE83F322C18904
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230322e302f32342d3234203d3e2032393134.roa
Signing time:             Tue 20 Jan 2026 02:24:56 +0000
ROA not before:           Tue 20 Jan 2026 02:19:56 +0000
ROA not after:            Tue 19 Jan 2027 02:24:56 +0000
asID:                     2914
IP address blocks:        180.223.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:39:f9:83:66:4d:64:41:c7:db:62:88:8e:fe:83:f3:22:c1:89:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:56 2026 GMT
            Not After : Jan 19 02:24:56 2027 GMT
        Subject: CN=E6DE9232114CC14D9E4559E6B6236A4A190BB920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:ce:72:14:a6:10:f4:91:34:cf:c1:17:93:
                    50:46:dd:fc:b8:de:60:a6:15:6e:e8:dc:22:16:16:
                    b7:8f:fa:ef:66:0f:00:1e:0f:48:5f:97:35:34:7b:
                    d6:34:c6:5c:56:3e:ae:fc:7e:da:ba:bc:cd:59:c7:
                    80:e6:82:3b:76:52:54:1b:25:63:a9:26:22:cc:45:
                    28:b7:96:6b:ba:78:ae:65:a4:f9:37:02:e5:38:e5:
                    60:ff:17:20:47:e1:4e:25:8f:1a:d0:ae:09:6e:37:
                    3f:c2:3c:44:3d:7c:23:12:41:81:57:74:a0:88:95:
                    1c:95:b9:7c:43:65:43:69:4a:4f:57:b2:1f:9b:f7:
                    ee:da:bb:c9:ea:65:db:13:5d:51:23:69:34:5c:44:
                    21:d5:9c:08:7a:60:6b:0f:17:48:7c:8b:10:83:07:
                    d8:89:32:9d:ed:a0:0b:46:0a:a5:bd:60:57:63:2b:
                    7a:1b:f6:9b:12:26:d6:31:28:0e:62:1d:82:05:4f:
                    ed:3a:3b:4e:c2:88:3e:e4:93:03:c3:cd:ff:ac:cb:
                    19:57:81:04:68:19:5c:86:3c:28:0e:9b:48:c2:56:
                    6b:10:31:ea:2c:5b:5f:c5:1b:c0:d5:b8:0d:2f:b2:
                    57:61:f7:2d:6d:52:69:14:2c:df:1f:d7:6b:14:ad:
                    58:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DE:92:32:11:4C:C1:4D:9E:45:59:E6:B6:23:6A:4A:19:0B:B9:20
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230322e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:d7:82:c2:6d:02:ff:55:31:77:7f:6b:8f:02:d4:12:a4:55:
         70:6d:ef:0d:a4:4d:22:a2:dc:18:4a:b0:20:f2:a0:01:4e:b0:
         9b:e1:83:60:e4:a0:08:2b:8c:28:7e:e2:f4:37:75:7b:01:9f:
         69:c2:da:46:e9:24:03:a5:e5:ff:fd:59:e3:0d:a4:b2:0e:7e:
         cf:b8:e4:25:b0:a6:7e:50:84:fe:7c:52:16:6b:53:16:e4:b0:
         f4:72:81:b6:58:61:d6:79:b1:96:78:b4:3a:2a:6e:9e:36:90:
         d8:33:31:dc:a0:07:28:db:e3:88:0a:3a:fb:a1:ee:ef:21:a2:
         88:53:02:8d:48:a8:94:1e:64:2c:ee:b4:b7:d8:9e:ca:81:87:
         05:2e:2b:db:d4:9b:21:e8:73:ad:93:dd:2c:37:85:d6:1a:c0:
         a4:4e:14:f3:fc:79:03:88:a6:ae:db:e9:3f:19:06:98:1f:3e:
         ed:ec:68:16:09:42:3c:d9:09:d9:32:ab:ee:9e:46:ee:51:ab:
         fe:14:89:9c:4f:06:b9:89:65:e5:42:47:21:02:e1:3a:68:41:
         ef:80:69:8e:90:07:9b:49:cb:c6:74:07:ea:ef:7f:77:fc:69:
         cc:7d:5c:4a:34:2e:9c:3c:44:a4:47:c2:31:21:b9:1e:a1:79:
         91:6a:ec:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:49 2026 by rpki-client