This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3231312e3134342e36342e302f31392d3139203d3e2039383132.roa
File:                     3231312e3134342e36342e302f31392d3139203d3e2039383132.roa (raw, json)
Hash identifier:          1gYUc5z0tOnIEVafnGtltByb311sR36v8GEUH8TacU8=
Subject key identifier:   7E:61:3C:9F:76:D7:20:DF:15:03:CA:D0:08:E5:D0:2D:46:B2:08:D2
Certificate issuer:       /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Certificate serial:       38872C32A382BF0DA25BAAFCFC7B07CBA1E646E4
Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3231312e3134342e36342e302f31392d3139203d3e2039383132.roa
Signing time:             Tue 20 Jan 2026 02:22:42 +0000
ROA not before:           Tue 20 Jan 2026 02:17:42 +0000
ROA not after:            Tue 19 Jan 2027 02:22:42 +0000
asID:                     9812
IP address blocks:        211.144.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 18:09:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:87:2c:32:a3:82:bf:0d:a2:5b:aa:fc:fc:7b:07:cb:a1:e6:46:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
        Validity
            Not Before: Jan 20 02:17:42 2026 GMT
            Not After : Jan 19 02:22:42 2027 GMT
        Subject: CN=7E613C9F76D720DF1503CAD008E5D02D46B208D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ca:94:e7:a8:92:7c:81:fb:af:c6:cd:ac:e2:
                    5a:df:fe:ba:39:a8:6f:a5:01:92:b1:3c:7f:97:52:
                    37:06:40:53:cf:22:b6:46:79:e7:e1:70:c7:4a:e7:
                    ef:16:66:f2:07:d1:bc:c6:c8:a2:c2:c5:b7:fa:21:
                    e4:f1:e1:43:71:b6:43:51:e2:be:68:12:fa:1f:af:
                    70:76:a1:38:41:ac:ad:cf:fe:2b:0b:92:c4:29:26:
                    c3:5c:d0:23:ac:85:4d:40:41:1a:35:4c:68:f0:50:
                    c0:84:4d:e4:e3:b6:fe:23:d9:a0:4c:de:3f:21:1f:
                    e7:9a:f9:e1:51:94:8e:66:e0:fe:27:2b:4a:50:b0:
                    ee:21:66:d7:3c:90:dc:19:25:5b:17:4e:83:20:e7:
                    4d:80:b9:be:51:9b:20:51:9c:20:8b:fe:e7:f2:ea:
                    b1:42:9e:23:3d:68:5a:7d:70:71:ac:92:f5:c3:11:
                    6b:9c:ff:5e:e3:fa:29:08:eb:1d:0f:8e:f5:29:cd:
                    de:9d:31:4d:1a:05:ff:19:f7:a6:b6:1c:00:1e:54:
                    5c:b1:f3:de:6f:0f:0c:fd:7c:cf:a0:ef:95:e5:8c:
                    bf:5a:51:e8:70:6b:22:23:40:bb:76:30:a3:e2:e1:
                    de:92:2e:13:f4:79:6d:7f:67:6d:4f:cc:59:a9:b4:
                    ac:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:61:3C:9F:76:D7:20:DF:15:03:CA:D0:08:E5:D0:2D:46:B2:08:D2
            X509v3 Authority Key Identifier:
                keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3231312e3134342e36342e302f31392d3139203d3e2039383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.144.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:68:7f:19:98:2a:e0:b8:5c:b4:66:d8:9d:e2:00:5d:40:cd:
         40:cc:48:50:cd:39:e9:48:6b:31:05:82:96:a9:88:78:cc:2a:
         34:76:93:a7:8b:a3:e2:0e:78:22:60:36:da:f6:2e:2e:09:49:
         4f:ea:d1:1d:12:52:ac:76:84:59:41:87:ad:e8:37:44:f4:ad:
         e1:1a:80:89:f7:b3:5d:b7:d6:9e:f7:f2:a3:67:3f:de:ed:9b:
         5b:92:d2:66:e6:23:29:ad:5a:c8:5d:a5:d4:f9:80:be:f2:69:
         3b:95:0a:8c:db:1f:db:99:58:13:39:35:fe:69:c4:e0:d3:d9:
         a2:c6:7b:65:7d:11:fc:fe:42:e6:77:14:30:72:19:e0:d2:fe:
         d7:1d:a9:bf:31:d0:ad:79:99:02:84:2f:ec:60:d4:5d:47:a9:
         57:a9:a7:e1:cc:40:48:13:01:84:a4:1a:6e:9d:d7:44:39:b3:
         43:bc:6b:6c:fb:c6:ae:3e:cf:54:34:b1:3c:17:bf:83:4d:c4:
         17:12:42:b2:ee:94:69:65:d4:1d:eb:c7:84:c2:c3:68:de:f2:
         4d:b6:fb:b9:86:de:b2:a7:71:6b:74:e6:86:6e:8c:83:2e:48:
         46:84:86:10:a0:47:aa:ef:dc:b5:d5:c2:14:f4:9b:bc:2a:df:
         a7:bb:f5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:34:28 2026 by rpki-client