This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3131382e3133322e302e302f31342d3134203d3e2039383132.roa
File:                     3131382e3133322e302e302f31342d3134203d3e2039383132.roa (raw, json)
Hash identifier:          jKwJN1kmzBgrQ6MXY/tnHBcVuTP+6UYFpaGIhsHPcHU=
Subject key identifier:   52:61:05:67:99:52:B3:4D:81:97:54:22:9D:78:7B:5B:A5:4F:47:CE
Certificate issuer:       /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Certificate serial:       3DBADF9D408B000DEB44192F36B5012B5A55B056
Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3131382e3133322e302e302f31342d3134203d3e2039383132.roa
Signing time:             Tue 20 Jan 2026 02:22:42 +0000
ROA not before:           Tue 20 Jan 2026 02:17:42 +0000
ROA not after:            Tue 19 Jan 2027 02:22:42 +0000
asID:                     9812
IP address blocks:        118.132.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ba:df:9d:40:8b:00:0d:eb:44:19:2f:36:b5:01:2b:5a:55:b0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
        Validity
            Not Before: Jan 20 02:17:42 2026 GMT
            Not After : Jan 19 02:22:42 2027 GMT
        Subject: CN=526105679952B34D819754229D787B5BA54F47CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:a5:44:a6:f3:e2:ce:87:6e:0e:08:55:d6:
                    30:9e:67:9a:06:40:5c:a9:13:e3:c3:7f:cc:3e:37:
                    74:0c:ff:4a:9f:75:ee:46:9c:11:13:df:30:f2:43:
                    44:ec:6b:82:76:52:16:cf:7d:f7:4a:52:7a:ed:25:
                    cf:a4:f9:03:a8:bc:27:9e:99:45:a9:94:3c:eb:e2:
                    ff:6c:f0:0b:01:f5:b2:04:11:c8:4d:4b:d2:9a:01:
                    33:04:fb:50:9e:8d:b8:75:5d:b3:6e:d0:80:f2:2e:
                    ba:92:b3:e7:4f:6c:a6:ce:af:e5:40:60:9b:a3:7d:
                    06:36:26:67:72:1c:b6:13:c8:fe:08:b4:15:dd:45:
                    86:14:99:0f:30:75:e2:96:d4:40:26:02:73:b3:62:
                    c7:c2:6d:7b:81:3b:7e:e4:2f:23:e5:73:8b:5e:8d:
                    97:6a:53:a4:29:15:cf:7d:63:76:05:d1:fc:46:82:
                    0d:d8:68:dc:c1:cd:c7:87:41:cc:19:f2:c4:fe:f1:
                    28:e1:87:fb:5d:b8:73:62:65:1c:b8:d2:37:98:c0:
                    1a:2d:86:f1:4b:12:33:4c:1c:a8:89:d4:33:61:be:
                    57:c6:a2:0e:73:d2:0d:aa:01:d9:35:97:46:14:c9:
                    3b:e8:56:cf:c9:fc:3c:df:61:0a:96:cf:cd:4b:d7:
                    e6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:61:05:67:99:52:B3:4D:81:97:54:22:9D:78:7B:5B:A5:4F:47:CE
            X509v3 Authority Key Identifier:
                keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3131382e3133322e302e302f31342d3134203d3e2039383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         2d:8e:46:74:79:e5:ef:29:4c:78:6c:1f:2d:be:c3:58:ac:37:
         48:8e:7f:98:5d:99:d7:29:7e:06:f1:a5:47:7b:5e:82:db:bb:
         1d:96:08:87:95:37:1a:67:a7:5f:6d:24:96:af:e9:06:c9:e3:
         e5:6d:59:4b:26:23:00:cb:3b:60:dd:9a:64:aa:0c:2a:0b:21:
         bc:47:c7:df:45:6e:d4:41:d4:bc:be:f9:9c:9d:9b:5e:40:f4:
         f4:80:ca:89:6b:e7:c7:a8:f4:8d:a6:ae:bb:a0:54:06:3a:c0:
         1a:b9:5c:b6:e1:5e:28:8d:55:09:0d:05:3b:04:8b:6f:bc:de:
         30:1b:91:f2:db:8b:0e:44:8c:2d:ec:3f:1e:6d:11:cb:de:dc:
         97:4c:26:63:f0:f5:ac:52:e6:fd:eb:6c:40:88:23:3d:be:53:
         ec:e8:f5:d0:45:a7:96:c5:e7:5c:0d:b9:2c:57:41:88:ef:1f:
         bc:d8:14:87:96:2d:02:62:41:2d:38:9f:e8:f3:9a:05:43:23:
         42:01:f7:aa:54:42:c0:3f:86:ed:63:d4:54:1b:ad:c7:66:bf:
         40:eb:cf:19:80:32:02:8d:57:d7:61:f7:ff:e2:18:ae:bb:0b:
         71:e5:57:a4:41:be:05:ee:fe:3a:39:02:1f:72:96:a6:81:0b:
         ac:7a:32:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:16 2026 by rpki-client