This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230342e302f32322d3234203d3e203130313033.roa
File:                     3138302e3232332e3230342e302f32322d3234203d3e203130313033.roa (raw, json)
Hash identifier:          aGx2F8wuKghapSsJZwD/DvC343TsQcyn8K0LPNwoCJo=
Subject key identifier:   7D:00:6E:F8:32:F9:8C:4C:7F:94:15:90:CC:8A:5C:69:41:0C:EC:49
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       52D3B7502E34ADBD9B7A36F95505937BC73C6E09
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230342e302f32322d3234203d3e203130313033.roa
Signing time:             Tue 20 Jan 2026 02:25:00 +0000
ROA not before:           Tue 20 Jan 2026 02:20:00 +0000
ROA not after:            Tue 19 Jan 2027 02:25:00 +0000
asID:                     10103
IP address blocks:        180.223.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d3:b7:50:2e:34:ad:bd:9b:7a:36:f9:55:05:93:7b:c7:3c:6e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:20:00 2026 GMT
            Not After : Jan 19 02:25:00 2027 GMT
        Subject: CN=7D006EF832F98C4C7F941590CC8A5C69410CEC49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:a2:c0:f2:bb:10:54:28:68:0e:7b:9d:8a:
                    be:0f:21:93:6d:b7:27:01:5e:6f:a1:19:2d:9d:23:
                    82:0a:2f:6e:8b:dd:c2:ce:70:99:f8:03:7f:45:b3:
                    2f:e5:2c:bf:d8:a2:24:7e:69:76:8d:56:a5:02:ae:
                    fb:9a:f2:40:dc:aa:03:68:2d:1d:8c:9e:18:9d:ff:
                    80:af:56:00:9e:30:38:51:65:b8:9f:7f:e0:26:97:
                    a6:b4:f0:23:76:bd:44:c5:76:0e:4d:95:55:dc:f2:
                    72:78:df:53:1a:c8:76:aa:18:75:22:af:41:18:3b:
                    72:f2:44:c8:8b:ef:6e:be:49:35:76:c7:3f:44:2c:
                    e6:af:6f:c8:78:a0:c7:af:95:99:1b:6f:1a:b4:f7:
                    d3:26:6d:79:39:67:48:bf:6a:f9:21:95:83:95:b9:
                    f3:ac:a8:d6:73:f6:98:2b:ed:77:a2:3e:24:87:2e:
                    c4:e3:37:b7:22:2d:bd:fa:fb:3f:4b:91:2f:9b:dd:
                    89:cc:1d:c0:8e:c1:f8:f4:04:7b:4c:ef:a5:9c:35:
                    a2:bb:2f:24:60:7e:0b:ca:7d:6c:61:c9:47:39:b1:
                    03:da:ba:4d:e5:e2:df:30:88:73:cb:08:65:92:1b:
                    6a:bb:af:ab:6b:41:b1:ea:b1:29:53:2d:a9:c8:3c:
                    26:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:00:6E:F8:32:F9:8C:4C:7F:94:15:90:CC:8A:5C:69:41:0C:EC:49
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230342e302f32322d3234203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:8a:9f:f3:4f:c5:9d:8a:ba:29:4a:52:f1:97:92:84:3a:76:
         87:8f:9d:c0:9f:78:d5:48:ef:35:ff:ee:37:04:a1:70:da:f4:
         78:58:8e:b5:4b:71:0d:cf:3a:82:dd:05:15:33:f0:2c:77:a5:
         b9:09:56:8b:0c:1b:87:0e:7a:74:75:94:4b:ba:fb:a1:dd:a8:
         21:19:51:d2:ee:cb:f4:ce:4e:11:51:84:d3:93:f3:96:e5:0f:
         16:53:fe:27:b6:62:9b:67:ff:2d:9c:1c:96:b3:32:2a:04:d8:
         c6:39:93:ed:7e:bd:20:69:83:06:99:1a:6e:45:34:dd:c2:48:
         ce:87:c3:d1:e3:78:f2:60:b7:07:c4:54:c5:65:a2:62:07:84:
         13:79:e4:2c:c8:e1:e6:80:f2:a5:43:74:c8:d3:87:9d:48:42:
         2e:31:c9:33:91:57:eb:b9:12:ac:14:ee:eb:37:d3:7d:e0:cc:
         b9:7c:fe:42:a8:c9:1f:92:4f:ec:33:6e:45:a4:fd:39:eb:81:
         44:d3:be:38:8d:d1:67:5a:ad:a0:9a:e0:b7:dc:63:c0:3f:e2:
         cb:3a:fd:90:a7:48:53:9f:7a:e6:3a:f7:90:04:5f:5c:22:3d:
         22:00:89:d2:e3:bb:d6:26:7b:23:8f:79:3e:43:55:97:d4:db:
         35:a5:c4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:43 2026 by rpki-client