This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e2032393134.roa
File:                     3138302e3232332e3233322e302f32312d3234203d3e2032393134.roa (raw, json)
Hash identifier:          DGxDsNJdARl/yvd2DT4pARGMkQpm2h8yURu0/AtFjkU=
Subject key identifier:   AD:B6:1E:C3:FA:AE:A9:34:4A:44:A4:1E:DF:10:15:93:E3:6F:7A:32
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       3E850AAD9798684601D973192F1981FC0E523F39
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e2032393134.roa
Signing time:             Tue 20 Jan 2026 02:24:54 +0000
ROA not before:           Tue 20 Jan 2026 02:19:54 +0000
ROA not after:            Tue 19 Jan 2027 02:24:54 +0000
asID:                     2914
IP address blocks:        180.223.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:85:0a:ad:97:98:68:46:01:d9:73:19:2f:19:81:fc:0e:52:3f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:54 2026 GMT
            Not After : Jan 19 02:24:54 2027 GMT
        Subject: CN=ADB61EC3FAAEA9344A44A41EDF101593E36F7A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d5:2e:48:6f:ff:2a:fd:ad:73:e5:70:fc:52:
                    2a:6f:c6:59:8a:b7:8e:4e:f5:e8:e9:0f:ec:ae:38:
                    30:6c:9c:36:7b:1a:a8:d1:92:2a:fb:d8:e9:e7:1c:
                    a9:7e:a8:5c:41:c3:a0:97:db:3c:8a:cf:f7:4c:2c:
                    63:22:e7:d9:70:63:0c:92:94:b7:90:24:3e:ff:8f:
                    1c:1f:f1:4d:c9:07:75:69:3d:9a:42:e8:5b:ea:fb:
                    ff:fa:50:9d:3e:a3:2f:a0:0f:36:27:29:5f:23:5e:
                    ca:32:00:cb:67:f0:54:b9:bc:a4:8c:9c:ea:e5:1d:
                    e3:9e:91:c8:9c:ea:0b:54:e7:70:a7:1e:d2:b9:c0:
                    d5:58:57:aa:15:aa:86:4f:f5:bb:36:a1:ee:77:0f:
                    25:b5:72:77:f3:d4:79:12:92:fb:5b:6b:66:ea:bb:
                    66:05:0c:71:d1:8f:66:9a:e5:b9:02:e7:d6:3c:3e:
                    34:e8:69:4d:ff:37:ac:57:9b:00:24:e8:a0:d7:4e:
                    ca:b1:ab:fe:43:f6:40:83:11:52:95:8f:f8:bd:72:
                    32:93:95:53:cc:cf:33:cd:0a:83:6a:b9:01:6b:e6:
                    14:f0:1a:0d:7d:d3:2b:9b:5d:b3:f6:2d:02:a3:ab:
                    c8:96:10:dc:2e:87:18:a8:1d:0c:aa:b3:ae:e1:5b:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B6:1E:C3:FA:AE:A9:34:4A:44:A4:1E:DF:10:15:93:E3:6F:7A:32
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3233322e302f32312d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:77:61:89:ad:39:b9:94:a1:c7:76:d5:39:1c:b3:0e:de:b6:
         06:0a:6d:97:1a:9a:0c:da:6f:87:fb:cf:ad:06:d4:b6:8c:66:
         0c:15:d9:4a:73:a8:8a:b1:6f:ee:bc:19:9e:35:0c:23:56:47:
         d3:62:c4:94:23:45:c0:85:47:f2:e3:d8:3d:b5:07:1e:d9:b6:
         23:eb:e4:1c:e3:52:7a:7b:63:f6:10:72:46:e4:34:18:1f:a4:
         ce:c7:0c:0e:d0:3b:b7:54:2f:85:46:20:79:30:38:9c:75:b9:
         5a:e2:92:ae:56:54:e1:b8:85:a6:7f:c0:f2:0d:22:37:89:b4:
         63:dd:31:8c:93:a2:d8:4a:57:3f:56:6d:e6:da:ed:27:ec:e5:
         b9:60:1b:ca:7a:3b:71:17:da:fb:59:1a:c8:b1:d0:d3:df:c2:
         4f:2a:1c:93:49:10:91:e4:bc:29:7e:cf:31:30:05:29:20:d6:
         0c:41:ae:ef:5c:41:a0:40:aa:48:c7:f4:f2:20:a5:9e:ff:b4:
         6e:9d:3e:e5:4a:b4:e8:8b:1b:7d:fc:cd:b3:3e:e9:01:12:f6:
         54:21:3b:25:03:9f:49:27:e4:d3:4e:cb:b3:e5:ee:62:95:ad:
         71:f2:04:8a:96:d0:4f:2c:af:56:b7:2b:ad:3a:a4:f5:fc:b4:
         6b:5c:d5:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:27 2026 by rpki-client