This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3230322e3135382e3136302e302f31392d3139203d3e2039383132.roa
File:                     3230322e3135382e3136302e302f31392d3139203d3e2039383132.roa (raw, json)
Hash identifier:          WfnSRTZHTQ/dfvGlHS8zfsr31ORCAKbR2RcqMtZBrV8=
Subject key identifier:   61:55:00:D6:67:4A:EB:2F:91:60:C9:C0:F7:50:5B:27:74:4E:47:5B
Certificate issuer:       /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Certificate serial:       763559E0EE10C1FDED422FDDF8492A11C138334E
Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3230322e3135382e3136302e302f31392d3139203d3e2039383132.roa
Signing time:             Tue 20 Jan 2026 02:22:41 +0000
ROA not before:           Tue 20 Jan 2026 02:17:41 +0000
ROA not after:            Tue 19 Jan 2027 02:22:41 +0000
asID:                     9812
IP address blocks:        202.158.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 18:09:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:35:59:e0:ee:10:c1:fd:ed:42:2f:dd:f8:49:2a:11:c1:38:33:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
        Validity
            Not Before: Jan 20 02:17:41 2026 GMT
            Not After : Jan 19 02:22:41 2027 GMT
        Subject: CN=615500D6674AEB2F9160C9C0F7505B27744E475B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:54:a2:64:4a:af:66:17:6a:c5:b7:c5:68:a0:
                    fe:bb:1c:8b:f7:e4:08:80:0f:8d:39:e1:f7:fb:5e:
                    c2:0f:43:8e:a5:74:98:20:24:cd:ab:68:43:eb:3e:
                    08:fb:01:d9:36:5d:c5:25:fa:5e:d4:ce:b5:8f:d5:
                    c8:d9:2f:69:ed:87:2c:08:26:ea:44:74:f6:f1:03:
                    43:1d:1d:cb:91:89:af:13:c0:b9:ad:25:c3:c5:12:
                    48:c1:ef:17:19:42:84:7d:a8:eb:ce:61:8d:5b:65:
                    9c:3f:8f:e3:e5:c4:0a:0f:4b:01:80:a5:76:c2:96:
                    3b:1d:90:94:12:f5:04:65:f2:fe:5a:7d:0d:c4:8b:
                    bc:ab:33:b7:70:97:43:da:d3:c2:d8:f5:ab:93:b5:
                    58:02:e7:cd:17:65:14:e5:14:df:55:6f:bd:87:30:
                    0f:1b:5d:d3:17:65:f4:79:83:c0:d8:4b:a3:65:e0:
                    cd:af:46:f7:cc:d1:9c:83:95:13:53:de:b7:2e:b3:
                    66:e7:0f:18:f0:fb:58:ed:13:73:f6:85:de:71:83:
                    8d:0d:30:e4:3a:29:65:57:0c:72:99:dc:be:f6:2b:
                    6c:cd:8f:df:34:b5:94:8e:4f:e8:4b:e9:ec:65:c1:
                    2b:31:7f:3e:b0:59:ea:2f:f4:55:c7:6e:14:8b:bf:
                    4b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:55:00:D6:67:4A:EB:2F:91:60:C9:C0:F7:50:5B:27:74:4E:47:5B
            X509v3 Authority Key Identifier:
                keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3230322e3135382e3136302e302f31392d3139203d3e2039383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.158.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:5c:ae:de:f8:72:c2:7c:41:91:18:85:57:38:eb:91:0e:6e:
         59:b5:40:f3:fa:3b:ee:b5:c4:a1:35:7c:03:5d:e2:a1:3f:6f:
         a1:a6:de:8f:00:30:a5:c1:21:9c:b7:17:61:3b:3d:40:73:a9:
         cc:fc:e8:a1:8c:ca:24:99:be:61:0a:3a:1a:5e:5f:68:f7:a7:
         d2:c7:df:5c:c3:1b:88:1a:ff:13:6d:34:fd:3c:64:eb:c0:7c:
         f6:b2:d9:ee:a5:5a:57:24:cd:1e:87:e2:11:8f:f6:0c:04:15:
         56:1e:51:da:a2:f6:f0:a8:0d:8d:48:57:05:d0:c7:f0:f5:71:
         e3:61:f7:ed:d1:68:0a:c7:c8:fd:cf:72:44:55:d0:dc:30:b5:
         da:95:be:87:3b:05:b9:c0:e5:e1:cc:79:14:1d:1d:93:65:14:
         45:c6:ca:7c:b4:da:9f:98:7b:da:1c:bb:f2:29:bc:6c:6b:6f:
         17:ec:dc:8d:ce:f6:0f:d6:2f:8c:9e:f4:21:8b:8e:91:08:06:
         b5:ee:27:09:17:e6:95:a2:00:72:4f:b1:ef:93:b7:4d:b9:72:
         c7:d2:c6:10:68:58:cd:3e:7d:86:f9:e0:db:5d:2b:95:98:2b:
         6f:15:3d:43:6f:05:77:d5:1b:bc:70:c9:06:39:3c:cb:41:f4:
         75:cd:a6:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:33:51 2026 by rpki-client