This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3232302e3233322e36342e302f31382d3138203d3e2039383132.roa
File:                     3232302e3233322e36342e302f31382d3138203d3e2039383132.roa (raw, json)
Hash identifier:          I0zHbYxsmBFvohLM8DkvsZ1oqb7s+KYz9uQPm7CroDI=
Subject key identifier:   30:CC:FE:89:7D:25:65:9D:EE:BF:57:B7:ED:E4:7D:19:6C:02:F6:BB
Certificate issuer:       /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Certificate serial:       66687BBDEDDAF36732CE4B310FB5AB271A4D0470
Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3232302e3233322e36342e302f31382d3138203d3e2039383132.roa
Signing time:             Tue 20 Jan 2026 02:22:42 +0000
ROA not before:           Tue 20 Jan 2026 02:17:42 +0000
ROA not after:            Tue 19 Jan 2027 02:22:42 +0000
asID:                     9812
IP address blocks:        220.232.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:68:7b:bd:ed:da:f3:67:32:ce:4b:31:0f:b5:ab:27:1a:4d:04:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
        Validity
            Not Before: Jan 20 02:17:42 2026 GMT
            Not After : Jan 19 02:22:42 2027 GMT
        Subject: CN=30CCFE897D25659DEEBF57B7EDE47D196C02F6BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:5f:3f:96:75:99:cb:48:4d:07:b7:f1:4f:
                    6e:89:c9:01:d6:bb:15:3b:cd:4c:48:8f:38:dd:86:
                    2c:ef:d3:8e:7e:59:d1:f6:79:e3:09:99:0c:c9:d7:
                    32:bc:ed:ac:d7:41:ac:a5:ee:ed:74:a7:de:57:18:
                    46:f2:c6:72:e9:83:dd:a7:f6:54:55:66:03:ab:d7:
                    aa:47:4d:8d:7a:70:a9:0e:15:5c:84:06:3c:24:5b:
                    88:a1:60:7b:c0:3a:68:40:5b:07:d2:85:e6:7c:25:
                    ca:92:f0:6e:d0:32:4b:42:ae:d0:ce:04:18:4e:46:
                    24:34:e3:fc:46:d0:b0:0c:a0:0c:a5:7e:9d:d5:53:
                    8a:ad:b0:62:b9:76:f1:12:ce:db:1c:52:e8:b9:32:
                    e2:95:10:7b:c4:bb:ea:d3:a3:7a:fe:46:26:ad:7b:
                    f2:82:89:31:56:9b:b4:cb:08:c6:14:24:77:44:b9:
                    67:1b:fc:7c:9e:1f:0f:74:1e:e9:2e:08:24:f5:98:
                    2c:8e:e1:d5:8f:a2:73:cd:67:b7:d0:20:3c:50:3d:
                    9f:08:9f:50:b1:ce:f5:b8:dd:83:61:74:0d:3d:e3:
                    c2:24:1e:86:fd:31:8d:18:8b:08:3e:53:73:e2:97:
                    af:ee:c8:65:cc:38:57:6a:4d:84:a1:49:55:e0:e4:
                    7a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CC:FE:89:7D:25:65:9D:EE:BF:57:B7:ED:E4:7D:19:6C:02:F6:BB
            X509v3 Authority Key Identifier:
                keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/3232302e3233322e36342e302f31382d3138203d3e2039383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.232.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         99:98:5a:fa:f7:53:d0:f7:0a:63:70:74:93:23:a9:4d:82:ab:
         1d:0b:83:aa:d6:9a:e8:4d:e0:0f:72:20:36:30:1f:b0:c6:13:
         e9:57:11:eb:55:9b:e6:57:2b:fd:bb:72:af:5f:a5:d4:0a:80:
         42:ae:d2:11:a6:db:9d:b6:b2:ca:45:ef:46:d6:7c:c1:af:5e:
         71:d3:3c:59:89:87:9b:92:a7:6e:10:c7:d8:11:1f:61:4b:f6:
         c5:9f:bd:b2:44:3f:3d:cc:a9:79:f4:6d:23:ae:c0:d0:92:08:
         22:3d:cf:fe:79:c9:cd:a2:97:6b:96:6c:a6:35:00:b9:a1:bb:
         74:cd:ac:82:3f:14:f1:e5:6c:ce:ff:f6:25:e6:d8:7b:a4:24:
         51:6b:ac:7d:56:1e:db:8c:33:24:87:a1:38:d7:59:2b:0f:24:
         31:12:79:36:15:96:d6:92:3f:ee:72:96:c0:f6:5e:2d:fe:fe:
         5b:04:d6:e7:a2:2e:22:33:19:91:88:e9:a4:ba:10:9d:42:37:
         d8:d8:82:4d:07:cb:18:2d:23:e1:bd:da:42:56:8d:8a:a4:3a:
         e9:c3:e8:08:3e:6e:9c:3f:a2:c4:9c:1d:85:59:86:9b:0b:1f:
         39:d9:f4:f1:d6:95:a0:6f:63:dc:af:7a:03:ff:1f:f7:52:0d:
         dc:07:58:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:14 2026 by rpki-client