This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230382e302f32322d3234203d3e203130313033.roa
File:                     3138302e3232332e3230382e302f32322d3234203d3e203130313033.roa (raw, json)
Hash identifier:          r6bHGg26z/hcOLrtL6JKGYKHH4zOYf1AzBzhLr/3gIw=
Subject key identifier:   FE:B0:16:F7:63:B3:7F:9A:B6:AA:0E:97:D8:25:32:7E:F3:45:A9:4B
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       1EBD4E5D07EF3A4AEE28264E8FBC83E11606C939
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230382e302f32322d3234203d3e203130313033.roa
Signing time:             Tue 20 Jan 2026 02:24:55 +0000
ROA not before:           Tue 20 Jan 2026 02:19:55 +0000
ROA not after:            Tue 19 Jan 2027 02:24:55 +0000
asID:                     10103
IP address blocks:        180.223.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bd:4e:5d:07:ef:3a:4a:ee:28:26:4e:8f:bc:83:e1:16:06:c9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:55 2026 GMT
            Not After : Jan 19 02:24:55 2027 GMT
        Subject: CN=FEB016F763B37F9AB6AA0E97D825327EF345A94B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e9:b3:40:ca:70:c5:a6:82:dd:1f:df:0b:d5:
                    eb:8f:de:b0:91:70:ad:0d:34:e2:d9:45:8b:f3:9f:
                    66:be:96:b0:57:4b:49:84:26:a2:4b:e7:d7:5b:f6:
                    1d:c1:81:a4:22:41:1f:6f:95:ed:31:9a:97:2b:c2:
                    8e:f8:73:24:45:a5:22:3d:10:95:20:b3:e0:f8:a5:
                    90:ef:e3:b4:c0:3b:5f:80:22:93:fa:b9:18:da:b5:
                    11:14:f0:63:eb:9b:f4:15:2d:5a:7a:2f:f0:20:4b:
                    19:6e:f9:4e:78:dd:6f:04:bc:e0:5d:df:2f:c9:3b:
                    ea:35:5b:54:9c:b8:ee:72:c3:f1:2e:08:10:d5:90:
                    11:64:90:90:51:6a:ff:f0:d4:14:10:1b:d4:1e:61:
                    e1:9f:b3:ad:a8:d8:63:23:85:57:cd:e5:cb:78:e7:
                    36:e5:83:a2:27:2c:fe:61:3f:f3:b8:11:f8:a8:e2:
                    21:02:b8:90:56:d9:57:55:9d:da:e8:f1:ac:f1:8d:
                    0a:6d:df:e5:5b:50:eb:f3:ea:ba:54:d5:8c:88:d0:
                    2a:ef:2a:9b:0e:5b:e5:29:46:86:c5:a6:06:1f:7a:
                    5a:21:ba:a8:66:1a:b4:9b:83:92:51:d2:f1:4b:16:
                    3a:cb:9a:15:10:3f:d5:a7:8d:cf:97:6c:12:16:f4:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B0:16:F7:63:B3:7F:9A:B6:AA:0E:97:D8:25:32:7E:F3:45:A9:4B
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3230382e302f32322d3234203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:b6:69:16:e1:58:ce:23:a3:52:51:91:33:77:dd:93:d3:79:
         ab:bf:46:47:fa:fd:02:72:9a:14:bd:5e:98:37:d9:a8:a2:2c:
         30:bd:32:6e:67:e4:eb:e8:26:99:00:df:fb:6a:74:22:3f:65:
         b4:f2:5c:65:c8:7f:6a:07:e2:b8:de:48:7b:fb:fd:23:44:e0:
         81:48:e4:f7:f6:ce:e0:6a:29:cb:5a:19:6b:e6:35:68:65:63:
         e9:a3:a1:39:8f:7b:9a:bf:9d:cb:b0:27:b6:d5:e5:7d:4c:0c:
         13:25:52:3d:83:7d:42:e7:97:b6:02:8b:69:f1:56:b7:73:dd:
         81:0f:0f:8b:5e:1a:d2:34:8c:bf:94:f4:43:7b:ee:1c:c1:ad:
         e5:0d:ae:1b:62:ec:73:81:7f:68:3f:ca:7a:84:4a:ea:a3:29:
         05:ef:b9:2f:ca:ec:e0:c2:8e:eb:76:60:f5:51:55:06:ed:1f:
         7f:cc:76:21:2e:16:f8:4d:86:75:19:d9:1c:c4:90:67:0e:39:
         f4:ea:a5:c4:a3:35:b3:ca:77:13:a5:82:ee:78:38:d4:3c:ce:
         de:dc:bf:65:0f:1b:55:70:6b:14:d8:c3:2c:18:79:e1:41:27:
         e0:25:e7:23:08:e6:28:7e:19:c9:05:cc:1d:a4:d8:54:08:3b:
         5d:fb:3c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:50 2026 by rpki-client