This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3131342e36302e302e302f31342d3134203d3e2039383132.roa
File:                     3131342e36302e302e302f31342d3134203d3e2039383132.roa (raw, json)
Hash identifier:          qgUQUN7l+eb17arMuJC6fMalB2h0HFMIO2suqD2UuGk=
Subject key identifier:   3F:07:B4:BD:B8:B0:79:E0:15:0B:76:DF:F8:D4:A1:2A:AE:93:A3:D4
Certificate issuer:       /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Certificate serial:       28827993F2A3C4DA0BA9D253C19F571C8AB48E8E
Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3131342e36302e302e302f31342d3134203d3e2039383132.roa
Signing time:             Tue 20 Jan 2026 02:22:41 +0000
ROA not before:           Tue 20 Jan 2026 02:17:41 +0000
ROA not after:            Tue 19 Jan 2027 02:22:41 +0000
asID:                     9812
IP address blocks:        114.60.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 13:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:82:79:93:f2:a3:c4:da:0b:a9:d2:53:c1:9f:57:1c:8a:b4:8e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
        Validity
            Not Before: Jan 20 02:17:41 2026 GMT
            Not After : Jan 19 02:22:41 2027 GMT
        Subject: CN=3F07B4BDB8B079E0150B76DFF8D4A12AAE93A3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2c:a0:df:03:cb:26:7c:c5:a9:f8:68:d8:74:
                    60:f9:1c:2c:5f:d0:e5:89:e8:bf:4d:9c:4d:1b:6a:
                    ad:ae:01:63:d7:ae:5b:d7:91:e8:10:7c:c2:34:26:
                    59:89:dc:61:9c:71:ee:e1:98:72:34:ac:1f:16:aa:
                    cc:7b:ef:9a:d8:fa:0f:a4:09:5d:b3:0c:fb:c3:75:
                    c7:06:36:3a:25:89:3e:2f:7d:b1:4b:e9:2b:bc:f9:
                    b3:b3:db:22:56:b9:21:36:0d:29:4e:4c:43:84:dd:
                    79:5e:18:9c:df:f2:d7:12:e8:69:ed:fd:1a:ac:f6:
                    02:9a:a2:db:db:72:c7:1d:08:fb:0a:60:db:a4:ce:
                    40:9c:47:51:97:b9:5d:ac:9d:b8:fd:f4:43:21:89:
                    e6:4c:3b:07:77:f9:97:fe:4c:4f:d2:2f:fc:79:79:
                    cc:6a:25:92:d5:34:f1:ce:19:bd:90:3d:e2:60:92:
                    7a:cd:f7:61:c8:73:be:46:19:2d:c1:de:d2:5d:ef:
                    7d:3e:2f:5a:30:0f:0e:6a:32:8f:cb:74:66:b8:74:
                    f9:45:3e:13:7e:34:8b:69:8c:c2:05:2b:02:e1:7c:
                    21:a3:cf:b6:33:0a:bf:06:fc:08:44:0c:dd:7f:2c:
                    82:66:b2:bb:0f:a8:cb:23:f7:bf:47:2b:04:24:c5:
                    38:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:07:B4:BD:B8:B0:79:E0:15:0B:76:DF:F8:D4:A1:2A:AE:93:A3:D4
            X509v3 Authority Key Identifier:
                keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3131342e36302e302e302f31342d3134203d3e2039383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.60.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         22:f7:0f:6e:7b:44:57:6b:45:2b:8f:f5:77:80:ba:44:42:ad:
         c6:33:61:ec:5f:40:c4:8e:57:9e:d6:84:00:b5:e6:16:25:41:
         9b:30:a2:3d:f7:27:d9:f6:85:b5:f2:24:5b:84:f0:01:3b:da:
         63:0c:95:3d:e7:44:6c:7f:9d:1a:78:ad:4a:e0:9e:a1:87:1c:
         cc:42:77:e5:3a:79:66:25:30:5f:c7:71:cd:94:fc:15:13:54:
         9d:7f:93:93:48:e3:e9:1e:f8:a8:70:38:4f:6d:e7:3d:dd:be:
         02:8f:df:bf:9e:ea:6b:3d:fb:21:3b:c9:a5:ed:b2:0d:87:70:
         27:50:79:1b:6d:49:60:3b:43:b7:c3:bd:c5:6d:7c:40:02:b9:
         65:b9:2b:b9:2b:d0:d6:fb:b3:a9:ad:3d:54:b2:f3:09:a1:dc:
         7c:7e:86:ac:59:50:00:9c:14:97:94:70:a6:b1:6d:4c:1b:04:
         6b:a2:d3:a2:26:5c:31:0f:9e:ef:9b:a8:cc:4e:fa:85:88:f1:
         08:d8:a6:76:95:03:68:6f:4f:17:61:e7:8a:6d:81:82:9e:29:
         1d:a2:43:d9:f9:d3:b5:1b:c5:95:10:e5:58:ac:e8:1e:36:98:
         c0:90:18:6a:a5:70:13:6a:52:80:ac:88:af:67:e6:79:c4:d0:
         a4:05:4f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:03 2026 by rpki-client