This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e203130313033.roa
File:                     3138302e3232332e3234382e302f32312d3234203d3e203130313033.roa (raw, json)
Hash identifier:          OUkSV1DFfpGDaTU5Ze+/e5Bb03wLWmSQNEc7xFkibeE=
Subject key identifier:   BB:6B:16:AA:50:A0:EF:80:E9:30:3D:7F:20:DB:3D:04:A4:5A:EA:F3
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       535BA925E5EBF77D39849C8DD382283AABB0C37B
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e203130313033.roa
Signing time:             Tue 20 Jan 2026 02:24:53 +0000
ROA not before:           Tue 20 Jan 2026 02:19:53 +0000
ROA not after:            Tue 19 Jan 2027 02:24:53 +0000
asID:                     10103
IP address blocks:        180.223.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 21:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5b:a9:25:e5:eb:f7:7d:39:84:9c:8d:d3:82:28:3a:ab:b0:c3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jan 20 02:19:53 2026 GMT
            Not After : Jan 19 02:24:53 2027 GMT
        Subject: CN=BB6B16AA50A0EF80E9303D7F20DB3D04A45AEAF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:1e:24:64:9c:2e:14:03:13:9a:0f:55:e8:
                    cf:e9:f5:69:cd:f2:22:7c:1b:5f:a9:10:68:a2:03:
                    82:49:9a:3b:fc:39:b4:32:ac:1a:a9:8b:e2:a1:c1:
                    9d:6d:df:8e:07:4b:79:bc:a8:2f:24:bd:5e:1d:2b:
                    a6:2c:85:75:14:82:d2:e9:b2:dd:23:d6:c1:d5:7c:
                    6d:c3:37:24:bc:86:ce:6a:9f:d2:2b:40:09:16:e0:
                    c1:98:6e:df:4a:30:ae:2a:51:d3:48:98:29:0c:a2:
                    24:ca:34:50:f2:1a:67:91:23:82:dc:bc:5a:95:f2:
                    f8:c4:b0:bc:78:07:73:09:3f:4f:20:b3:52:9d:3c:
                    cf:69:6e:a5:7e:d7:6a:78:68:df:17:03:7a:be:4d:
                    8f:bf:06:3f:de:fd:cc:56:2a:35:d9:39:8c:e1:bd:
                    8d:9f:aa:e3:e3:cc:7d:bb:35:cd:54:0d:28:00:59:
                    8c:50:51:6e:c9:a7:aa:a8:5c:e5:ac:40:dd:5d:61:
                    54:2b:89:d9:ea:17:35:a2:bd:69:ea:70:e4:77:44:
                    47:46:58:b9:eb:7c:db:1d:30:62:6d:61:d5:ee:be:
                    ab:4f:a0:99:54:9f:11:5b:a9:bf:bd:75:1a:a0:00:
                    a0:42:14:be:04:eb:10:ae:f8:5c:7d:fa:23:5b:ce:
                    0d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6B:16:AA:50:A0:EF:80:E9:30:3D:7F:20:DB:3D:04:A4:5A:EA:F3
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3234382e302f32312d3234203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:b8:b1:cb:b0:36:79:69:2f:a1:4b:79:da:fd:3b:b5:3b:e7:
         6e:e7:5d:00:f9:4b:bd:3b:22:1b:c6:2d:0d:4c:51:5d:83:08:
         b1:a6:ae:38:8a:12:8c:77:b4:12:15:97:47:67:9d:d0:f4:3a:
         2d:01:56:78:7b:fd:77:5e:da:2d:1e:45:c2:6b:71:a8:65:6a:
         f6:a5:35:fd:c5:28:51:54:b2:ca:5a:c5:c7:65:cf:f6:a4:27:
         5f:a4:45:78:57:c3:b8:9d:09:a6:cf:3b:8f:6a:8b:4e:6b:85:
         03:86:cd:c0:78:13:8b:cf:26:b4:b1:33:f7:82:4a:e9:2f:8b:
         7b:58:fd:92:e3:6b:88:05:87:6e:ac:ab:88:f1:ab:2c:e2:c6:
         77:df:5d:cd:43:30:36:90:ee:76:5e:3f:69:8e:0b:76:fc:97:
         6e:7a:30:62:ec:b4:bb:4c:b6:45:aa:be:c0:e8:53:90:56:b6:
         0c:87:cf:c2:00:b1:c8:28:71:dd:76:f8:17:8b:92:a8:5e:18:
         2b:11:6c:ec:46:9d:97:f1:c2:d2:3e:80:32:11:bf:ff:a2:95:
         bc:b1:16:3e:24:89:cf:e6:4b:4f:3c:7e:10:28:1a:7f:09:9a:
         0a:96:7e:6c:a8:ce:ad:b4:f1:19:b3:06:0d:14:2e:48:fa:a8:
         a3:66:23:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:13:47 2026 by rpki-client