This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230372e302f32342d3234203d3e2032393134.roa
File:                     3138302e3232332e3230372e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          i4bRrtxEbFfol+fyBOvpgbzvPIITWQu+po/S4OyuoLM=
Subject key identifier:   B6:B1:0B:66:53:86:6F:20:2F:C6:40:B4:45:04:E0:81:05:D4:13:40
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       1577BF3A9D5B27322CA1BC5C362BFB0A18F47F0D
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230372e302f32342d3234203d3e2032393134.roa
Signing time:             Tue 20 Jan 2026 02:24:56 +0000
ROA not before:           Tue 20 Jan 2026 02:19:56 +0000
ROA not after:            Tue 19 Jan 2027 02:24:56 +0000
asID:                     2914
IP address blocks:        180.223.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:77:bf:3a:9d:5b:27:32:2c:a1:bc:5c:36:2b:fb:0a:18:f4:7f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:56 2026 GMT
            Not After : Jan 19 02:24:56 2027 GMT
        Subject: CN=B6B10B6653866F202FC640B44504E08105D41340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4a:78:f4:ae:fa:80:0c:c6:6a:31:7e:ec:9e:
                    5d:e3:2a:33:08:f5:4e:9e:67:4a:17:7f:6c:f8:c0:
                    b9:20:d6:3d:e1:a2:3e:0f:bc:73:9c:e7:ae:3f:bf:
                    95:5c:9b:a7:4a:2b:8d:b8:22:b1:fc:02:77:41:20:
                    58:f4:c5:42:e9:b4:c8:30:85:8c:ce:45:cf:dc:07:
                    a3:ce:f7:b0:cb:3e:88:94:e7:88:81:b3:5e:6c:b5:
                    62:19:c6:8a:4b:51:84:6f:b6:da:1a:d9:68:69:52:
                    c9:02:5e:d7:33:88:53:e4:75:05:bb:c5:98:bc:b7:
                    dd:84:c8:fe:ae:d3:f1:a1:bf:a5:32:d1:b7:14:1e:
                    36:df:82:d1:03:8e:53:8f:23:f6:a8:cc:1d:2c:ce:
                    53:a1:f3:03:a2:a7:77:18:16:29:05:c8:e4:b9:3b:
                    a2:c6:72:cb:e6:05:f4:15:95:bd:8a:62:07:8f:cf:
                    95:f7:ff:8f:a0:be:f1:59:3b:1a:6e:d0:ae:3f:13:
                    8a:66:cb:41:6d:2a:cc:3c:b0:af:56:36:99:80:89:
                    0d:7a:f0:a9:99:83:8b:fe:0b:02:b7:64:e2:ad:da:
                    03:e9:ca:30:ae:5f:4b:bd:10:6c:94:27:75:03:9a:
                    6d:d2:43:bc:e8:0e:bd:f1:c7:32:6a:59:5a:c7:46:
                    de:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B1:0B:66:53:86:6F:20:2F:C6:40:B4:45:04:E0:81:05:D4:13:40
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230372e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:70:3b:13:fd:52:42:53:22:29:a2:0d:2b:35:04:fd:04:27:
         c2:c2:db:12:86:aa:35:77:e4:c5:54:d4:29:67:9b:75:10:f3:
         3c:86:90:77:94:30:48:1b:f4:55:12:3f:4f:48:e2:83:28:fe:
         73:b1:ef:55:75:14:57:1f:60:2c:c8:f0:4c:90:96:cb:81:78:
         b6:17:c3:6a:fe:b6:14:81:29:b4:ed:ad:79:89:0c:fd:8b:74:
         ec:c8:91:2c:28:b9:3d:8a:7a:de:63:92:20:7e:eb:2d:ce:d4:
         3b:27:6d:dc:c2:e1:50:08:fd:fb:29:16:b0:26:2e:bf:66:2d:
         05:d3:a8:ab:7f:10:c6:46:c7:91:80:e3:79:3d:9b:87:77:d2:
         bc:0c:8a:8e:a8:58:c9:4f:77:db:60:81:20:f6:a9:cc:53:79:
         64:75:be:d5:25:85:ea:69:79:4d:77:c4:72:91:39:2c:dc:60:
         fa:ad:76:9f:9b:73:44:13:8b:69:37:f6:1a:33:a4:d3:7a:f9:
         0a:f5:96:7a:31:47:b0:6f:6c:64:fc:9f:c0:83:10:f3:42:f4:
         43:f0:c6:1a:4d:48:df:0d:4d:53:0f:2b:ba:8e:57:64:31:b5:
         ca:af:20:5d:33:d4:55:f7:ec:fe:0c:f3:96:06:94:c2:9d:ea:
         70:72:72:9b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUFXe/Op1bJzIsobxcNiv7Chj0fw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw
NkNERDJDRTAeFw0yNjAxMjAwMjE5NTZaFw0yNzAxMTkwMjI0NTZaMDMxMTAvBgNV
BAMTKEI2QjEwQjY2NTM4NjZGMjAyRkM2NDBCNDQ1MDRFMDgxMDVENDEzNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnSnj0rvqADMZqMX7snl3jKjMI
9U6eZ0oXf2z4wLkg1j3hoj4PvHOc564/v5Vcm6dKK424IrH8AndBIFj0xULptMgw
hYzORc/cB6PO97DLPoiU54iBs15stWIZxopLUYRvttoa2WhpUskCXtcziFPkdQW7
xZi8t92EyP6u0/Ghv6Uy0bcUHjbfgtEDjlOPI/aozB0szlOh8wOip3cYFikFyOS5
O6LGcsvmBfQVlb2KYgePz5X3/4+gvvFZOxpu0K4/E4pmy0FtKsw8sK9WNpmAiQ16
8KmZg4v+CwK3ZOKt2gPpyjCuX0u9EGyUJ3UDmm3SQ7zoDr3xxzJqWVrHRt6PAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUtrELZlOGbyAvxkC0RQTggQXUE0AwHwYDVR0j
BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0
RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTU5NjkyOS8wLzMxMzgzMDJlMzIz
MjMzMmUzMjMwMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEALTfzzANBgkqhkiG9w0BAQsFAAOCAQEAt3A7E/1SQlMiKaINKzUE/QQn
wsLbEoaqNXfkxVTUKWebdRDzPIaQd5QwSBv0VRI/T0jigyj+c7HvVXUUVx9gLMjw
TJCWy4F4thfDav62FIEptO2teYkM/Yt07MiRLCi5PYp63mOSIH7rLc7UOydt3MLh
UAj9+ykWsCYuv2YtBdOoq38QxkbHkYDjeT2bh3fSvAyKjqhYyU9322CBIPapzFN5
ZHW+1SWF6ml5TXfEcpE5LNxg+q12n5tzRBOLaTf2GjOk03r5CvWWejFHsG9sZPyf
wIMQ80L0Q/DGGk1I3w1NUw8ruo5XZDG1yq8gXTPUVffs/gzzlgaUwp3qcHJymw==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:12:46 2026 by rpki-client