This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142917633/0/36312e38372e3139322e302f31382d3138203d3e2039383132.roa
File:                     36312e38372e3139322e302f31382d3138203d3e2039383132.roa (raw, json)
Hash identifier:          NcBNEADCeCZLNzNGO+pth0cg6oeLMNH1TO90vX/NYUc=
Subject key identifier:   BB:81:6A:F0:5B:55:68:E0:D9:1E:FD:69:C5:EB:32:6A:A5:C5:9D:0D
Certificate issuer:       /CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
Certificate serial:       3902ACE314FBFB10D3494160B65B671BA2968290
Authority key identifier: 19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/36312e38372e3139322e302f31382d3138203d3e2039383132.roa
Signing time:             Tue 20 Jan 2026 02:22:42 +0000
ROA not before:           Tue 20 Jan 2026 02:17:42 +0000
ROA not after:            Tue 19 Jan 2027 02:22:42 +0000
asID:                     9812
IP address blocks:        61.87.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:02:ac:e3:14:fb:fb:10:d3:49:41:60:b6:5b:67:1b:a2:96:82:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192A244D700BFD48E358E2B21CB1BA7A3A5FB184
        Validity
            Not Before: Jan 20 02:17:42 2026 GMT
            Not After : Jan 19 02:22:42 2027 GMT
        Subject: CN=BB816AF05B5568E0D91EFD69C5EB326AA5C59D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:b5:12:2b:dc:9b:4a:65:7f:63:66:b0:6d:
                    f5:1b:29:48:b8:de:fc:fb:91:71:b0:a0:44:f8:f2:
                    24:00:9c:a4:0c:74:fd:60:9d:1e:a7:28:1a:97:b2:
                    76:19:cf:0f:4e:17:7a:f2:1c:75:bc:86:94:0f:2d:
                    30:3b:d8:80:c2:ef:84:7e:22:46:32:5a:c1:68:ad:
                    93:c2:58:a5:19:79:14:a4:43:b4:d8:54:78:dd:ef:
                    69:01:a2:f2:c6:b0:5c:ad:2a:fa:6f:92:40:75:02:
                    ae:8f:30:26:ae:a6:40:2a:62:61:f0:d9:b2:02:81:
                    27:79:42:8d:ea:76:cf:55:4b:fa:2e:11:95:b2:cd:
                    ae:ff:a4:f8:06:8d:c0:ce:71:a0:a8:39:73:e7:70:
                    73:a6:81:dd:61:a3:b5:ff:b0:f9:59:08:1b:8c:63:
                    94:3e:85:c9:41:98:f8:51:b1:60:8b:7e:40:09:2e:
                    ad:ee:22:2e:30:91:88:0c:37:14:53:ac:ca:e3:e8:
                    3e:77:48:57:86:7b:87:53:f5:dc:41:41:d0:5f:06:
                    20:16:d9:e8:52:f9:c6:40:5c:d5:39:3d:31:1f:3b:
                    fe:9e:c1:21:83:89:4b:cf:60:83:1d:a4:6e:1b:86:
                    1f:08:75:8f:3d:70:10:d5:7a:01:a1:4a:8d:56:82:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:81:6A:F0:5B:55:68:E0:D9:1E:FD:69:C5:EB:32:6A:A5:C5:9D:0D
            X509v3 Authority Key Identifier:
                keyid:19:2A:24:4D:70:0B:FD:48:E3:58:E2:B2:1C:B1:BA:7A:3A:5F:B1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/192A244D700BFD48E358E2B21CB1BA7A3A5FB184.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142917633/0/36312e38372e3139322e302f31382d3138203d3e2039383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.87.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         15:90:93:b3:2f:73:0f:14:02:88:7d:70:05:01:10:f5:cb:c5:
         1c:19:34:c0:7a:32:83:2a:b0:ad:35:a2:dc:ba:9e:2e:79:2d:
         04:3a:69:43:c6:3a:60:d8:23:7e:95:7c:55:a0:c0:1e:8a:02:
         83:a9:35:16:83:db:75:c3:ad:16:81:3f:18:b1:56:70:70:dc:
         f9:cd:42:7b:6d:6f:c1:96:6d:9a:94:e2:dc:26:32:bb:d1:20:
         75:e4:73:9d:0e:a9:d5:00:09:dd:50:71:e8:3d:90:92:5b:8b:
         c0:f5:d3:da:e3:6c:f2:eb:97:1f:fb:d1:b5:d2:72:66:fd:c8:
         52:01:f3:4c:b5:89:17:62:a3:3f:2d:9b:98:5d:c2:86:07:51:
         4d:02:bb:f0:11:5f:03:a4:ed:e9:2b:79:ce:df:06:5a:34:43:
         9b:bf:ed:14:d2:b2:8e:72:31:e3:f1:2e:1f:f3:b0:3f:e8:30:
         8c:86:b6:3d:a4:5b:a8:bc:72:ae:d8:5d:99:03:12:71:a9:5b:
         e4:0d:bd:c8:23:ec:c7:e1:37:81:c7:45:af:2b:cd:9a:06:bf:
         e2:e3:6e:51:16:72:5f:d4:e1:fa:59:ad:26:03:6a:c2:03:24:
         a2:0e:18:0c:fd:66:34:97:29:a1:3f:4a:80:b2:fa:57:a2:aa:
         e5:1f:db:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:15 2026 by rpki-client