This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230332e302f32342d3234203d3e2032393134.roa
File:                     3138302e3232332e3230332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          9JEbRrTquhXPujTNJuxCapBGR+bdWRfIIuWIJRI/By8=
Subject key identifier:   05:81:33:7F:51:24:D2:FB:69:F1:1F:9E:26:CD:A2:B0:2B:6F:CA:1D
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       63AFB21F55A68264F1E8647EFA40C88F871F6786
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230332e302f32342d3234203d3e2032393134.roa
Signing time:             Tue 20 Jan 2026 02:24:59 +0000
ROA not before:           Tue 20 Jan 2026 02:19:59 +0000
ROA not after:            Tue 19 Jan 2027 02:24:59 +0000
asID:                     2914
IP address blocks:        180.223.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:af:b2:1f:55:a6:82:64:f1:e8:64:7e:fa:40:c8:8f:87:1f:67:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:59 2026 GMT
            Not After : Jan 19 02:24:59 2027 GMT
        Subject: CN=0581337F5124D2FB69F11F9E26CDA2B02B6FCA1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:17:a8:f5:12:8f:c3:6b:a4:79:cf:63:8a:
                    84:9a:c6:4a:30:3b:47:30:48:d7:fe:f8:91:2a:57:
                    0d:6f:84:a5:70:bb:5c:af:b0:70:9c:97:fa:1c:3e:
                    dd:50:65:0c:43:99:83:33:63:29:5d:b0:ad:75:80:
                    72:49:66:fb:e0:34:cb:44:a5:f3:74:2f:40:a0:18:
                    18:20:45:61:84:fa:9a:4d:d9:9b:d4:8c:32:48:e4:
                    82:cf:96:05:89:fc:ab:9d:f5:92:6a:50:ac:6b:c2:
                    08:44:74:ea:d8:c5:79:25:eb:cd:41:88:fb:ea:2c:
                    fb:90:c5:c1:85:46:eb:25:c4:88:2a:48:cd:5f:77:
                    09:fe:d4:9c:1d:14:cc:6d:66:36:00:52:51:4b:56:
                    2f:72:0c:7f:5b:3b:6a:75:ad:92:61:ce:e2:c2:3a:
                    64:d4:ec:04:5d:87:01:3e:48:07:37:2c:0b:e1:89:
                    85:7d:6a:25:6e:ee:d7:51:1f:b8:d0:85:ba:74:8a:
                    99:34:e4:e8:d9:4b:cc:6a:7e:ef:3b:b0:5f:17:96:
                    9e:ec:94:b1:ad:32:36:3f:b5:58:84:7a:0e:ed:76:
                    08:49:8b:f3:02:61:97:3a:03:92:d6:e9:31:c3:d2:
                    86:a6:44:21:8e:43:8b:f1:7f:2e:c7:e9:c2:6f:85:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:81:33:7F:51:24:D2:FB:69:F1:1F:9E:26:CD:A2:B0:2B:6F:CA:1D
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230332e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:b9:20:55:14:62:35:ee:0f:55:cd:bd:1c:9c:38:39:71:0d:
         33:7a:17:92:75:ed:8f:bf:16:2b:46:13:74:0a:90:b6:73:e7:
         7a:39:73:05:69:3b:00:7f:c7:6c:94:23:95:58:07:0f:23:48:
         a4:18:8c:64:9d:d4:c9:d7:ca:a3:ab:12:74:8e:23:f1:ee:e4:
         64:61:b4:91:78:60:05:d1:07:8d:0a:a7:51:a6:62:7c:4b:75:
         a5:93:a9:9a:3a:1e:1a:d1:9b:29:a1:15:b6:48:90:c5:65:0b:
         1c:3b:29:1a:3d:bb:d9:94:61:a2:93:e5:5d:03:a9:1b:5a:57:
         d2:7f:ef:74:c0:b3:2f:81:fd:2d:74:31:55:46:bb:4c:2a:7b:
         b3:1a:03:c9:a5:c8:0b:af:bc:cd:86:4f:50:e2:1a:1c:f2:ed:
         cd:b9:00:f3:ed:29:3b:0e:cf:f0:e7:ee:86:ac:ff:aa:c3:48:
         e9:bf:8c:57:98:77:ea:a7:9d:24:53:89:d0:b9:f8:69:f0:f0:
         71:ee:b3:9b:0b:b6:99:75:03:9e:4f:dd:82:6e:28:3b:b3:9e:
         8b:68:de:14:2b:7d:c9:f7:63:d2:b8:a1:cd:94:ab:bc:13:66:
         c1:99:b7:66:47:14:5c:6d:ab:38:47:71:8b:e0:9b:d1:81:9d:
         aa:7a:6f:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:29 2026 by rpki-client