This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3390/V4nYBCNpx6YSzCyX84mIQqRuvzI.roa
File:                     V4nYBCNpx6YSzCyX84mIQqRuvzI.roa (raw, json)
Hash identifier:          6fgt7EC6BoZ6tk8Xe/JP8tBAJb6zi17WBHpF9aFgVw8=
Subject key identifier:   57:89:D8:04:23:69:C7:A6:12:CC:2C:97:F3:89:88:42:A4:6E:BF:32
Certificate issuer:       /CN=226549B6299640B4815E70F0403521A2960160DD
Certificate serial:       018A
Authority key identifier: 22:65:49:B6:29:96:40:B4:81:5E:70:F0:40:35:21:A2:96:01:60:DD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ImVJtimWQLSBXnDwQDUhopYBYN0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/V4nYBCNpx6YSzCyX84mIQqRuvzI.roa
Signing time:             Mon 17 Nov 2025 02:01:52 +0000
ROA not before:           Mon 17 Nov 2025 02:01:52 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     131511
IP address blocks:        202.6.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/ImVJtimWQLSBXnDwQDUhopYBYN0.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/ImVJtimWQLSBXnDwQDUhopYBYN0.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ImVJtimWQLSBXnDwQDUhopYBYN0.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 01:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226549B6299640B4815E70F0403521A2960160DD
        Validity
            Not Before: Nov 17 02:01:52 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=5789D8042369C7A612CC2C97F3898842A46EBF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:aa:0f:2e:d6:42:ad:c5:dc:e3:57:c9:3a:
                    a5:d4:a2:de:c5:b9:6e:7a:2a:1c:e8:f4:8d:3a:3d:
                    b8:ed:62:8c:b2:84:b2:cc:ba:3d:c1:05:fe:29:25:
                    c8:ca:c6:8d:11:3e:36:63:1a:37:df:ee:fa:87:8d:
                    1d:ce:77:54:cb:50:81:33:fd:ba:7a:1a:f9:43:df:
                    8f:c9:f1:1f:93:e8:d9:08:b5:f9:91:af:d6:ad:f7:
                    9e:d9:8a:bc:85:da:84:75:6d:19:2c:01:ea:ab:30:
                    90:95:41:fb:a1:91:5a:05:04:92:7a:0a:59:e0:98:
                    31:b5:00:5c:06:13:a5:2b:ba:24:26:2f:71:0e:94:
                    04:e7:9f:9b:52:49:f3:12:16:2d:ca:c6:c7:a5:10:
                    6b:40:e8:4b:fc:25:57:03:a6:fd:64:23:f0:00:b4:
                    b6:39:f0:e7:98:e3:e9:c5:65:f2:7d:27:8a:dc:d1:
                    e4:4d:0f:03:eb:93:87:d0:14:5b:0e:5a:ef:0f:a2:
                    3d:1a:f7:9f:96:23:bd:f9:52:df:23:78:18:75:c0:
                    41:02:5b:42:da:48:5f:26:f6:39:02:0f:f3:fc:0d:
                    7a:d9:67:56:25:54:a0:c0:65:14:60:b6:97:de:ab:
                    18:c7:b4:b6:5f:55:f3:eb:b0:e2:51:b9:c6:6e:bc:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:89:D8:04:23:69:C7:A6:12:CC:2C:97:F3:89:88:42:A4:6E:BF:32
            X509v3 Authority Key Identifier:
                keyid:22:65:49:B6:29:96:40:B4:81:5E:70:F0:40:35:21:A2:96:01:60:DD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/ImVJtimWQLSBXnDwQDUhopYBYN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ImVJtimWQLSBXnDwQDUhopYBYN0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3390/V4nYBCNpx6YSzCyX84mIQqRuvzI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:36:1d:0e:c1:e8:b7:7b:f6:eb:8f:e7:34:a7:e1:f4:c3:8f:
         22:28:88:ab:23:6b:45:38:ba:23:bf:25:a7:9f:49:50:b7:84:
         3e:f3:18:5f:02:51:ca:8c:07:8e:1f:5d:8c:b9:f6:29:5c:23:
         d2:c8:ac:12:d5:44:70:4e:ea:13:fd:32:0c:17:c3:07:28:74:
         87:89:11:a6:44:db:18:16:a6:be:9f:7a:b9:72:d1:79:2d:36:
         fb:94:0d:0d:32:23:d3:11:6f:e4:d3:ea:77:63:2e:d3:3f:af:
         64:1f:a8:61:81:71:a9:1f:be:e3:21:1c:ca:cf:22:cb:23:d3:
         c5:55:f7:b4:7a:72:1e:aa:5f:90:c4:c4:8c:4d:4b:2b:be:e5:
         00:ec:14:4f:3d:3f:10:90:a7:ed:30:10:7f:ef:12:0f:fd:ac:
         5b:63:45:ed:44:81:d1:5b:8f:6d:66:60:29:2e:44:5b:10:7f:
         34:b9:37:50:d0:27:bb:93:67:ff:ff:cd:bf:0b:4a:f4:79:76:
         7b:5b:1b:9f:55:5f:9b:e0:da:3e:a4:66:fe:91:d8:35:f1:de:
         ed:73:19:a5:e4:b1:f9:7b:49:92:92:fe:f9:a3:09:5b:06:80:
         74:25:f4:0a:34:46:5f:fb:67:5d:1d:8a:fe:1d:a6:cb:72:27:
         18:74:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 00:30:31 2025 by rpki-client