This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa
File:                     3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier:          /iGkkIqO0FSP5CywowzeIsIdOQnf8YsmMX+nUyXOQLk=
Subject key identifier:   47:4F:5A:CF:16:B0:23:B0:9A:7D:54:44:FF:F1:30:93:85:ED:83:D1
Certificate issuer:       /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial:       79BDE95EB5FA904F8D62D5E8BDB2E8474F9DFCB4
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa
Signing time:             Tue 20 Jan 2026 02:25:02 +0000
ROA not before:           Tue 20 Jan 2026 02:20:02 +0000
ROA not after:            Tue 19 Jan 2027 02:25:02 +0000
asID:                     4808
IP address blocks:        113.208.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bd:e9:5e:b5:fa:90:4f:8d:62:d5:e8:bd:b2:e8:47:4f:9d:fc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
        Validity
            Not Before: Jan 20 02:20:02 2026 GMT
            Not After : Jan 19 02:25:02 2027 GMT
        Subject: CN=474F5ACF16B023B09A7D5444FFF1309385ED83D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:68:14:5a:3c:69:05:12:48:38:d4:05:2d:
                    c8:c4:9b:62:99:71:db:02:07:c4:08:d9:36:e2:03:
                    47:95:18:06:8b:5d:90:19:64:f7:10:d0:3d:d0:db:
                    5a:ea:c9:be:2b:4a:a3:6c:68:23:50:0d:04:9a:0e:
                    83:2e:13:1f:36:f9:3b:ea:b9:da:79:44:dd:50:65:
                    7f:c6:22:41:ab:25:51:71:84:78:8e:11:9b:8e:90:
                    e4:d8:fe:20:07:a8:75:52:5d:55:83:8e:48:56:8a:
                    f6:f4:b0:c4:d1:29:ef:1d:0c:ae:17:13:b3:19:bc:
                    77:a2:04:67:00:7a:d4:f0:42:5e:f8:83:4f:f7:6e:
                    8e:28:52:70:64:21:75:b8:0e:18:88:c2:7a:3c:31:
                    66:43:5d:ca:7d:6b:1f:ab:2b:2d:77:2d:6b:1d:e8:
                    e2:f6:67:ab:85:28:d5:eb:01:9f:df:e5:cb:4c:1b:
                    e9:62:eb:5e:f1:fd:5c:ca:ed:5f:cc:25:2b:e1:8d:
                    0e:48:b8:ea:b9:ce:3f:c1:98:dd:9d:a3:66:1b:ab:
                    e3:c4:c5:ea:1d:3b:ef:63:86:a3:47:1c:10:d6:c6:
                    fe:80:02:b3:70:04:49:46:87:b3:4b:da:fd:ef:38:
                    67:87:ef:b3:c9:93:06:fd:38:44:e4:3e:63:88:22:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4F:5A:CF:16:B0:23:B0:9A:7D:54:44:FF:F1:30:93:85:ED:83:D1
            X509v3 Authority Key Identifier:
                keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3131332e3230382e3131322e302f32322d3232203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.208.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:2b:51:4e:c7:d4:1a:d4:49:7f:8f:7c:fe:c4:79:47:7e:b1:
         f0:18:08:e2:61:b0:e9:39:b9:8e:e2:75:d4:b7:1f:b8:22:f5:
         ad:7c:c1:94:f6:5b:7d:1f:48:84:f8:fe:5e:5e:1f:fd:44:e6:
         9b:df:92:32:f2:e4:65:f2:30:44:d0:2c:73:4c:65:dc:5d:1e:
         f8:bd:51:80:7f:00:49:4e:54:c7:f7:71:bb:f2:d0:fc:e3:d3:
         3c:85:c5:98:d8:7d:70:9a:fd:21:7e:aa:21:8e:48:e4:5d:c1:
         35:27:39:a4:db:89:98:ae:b8:eb:a6:0a:82:5c:43:52:f0:89:
         f3:6e:0f:2a:a9:94:2a:97:4f:95:12:87:03:43:b7:01:1d:e1:
         01:0c:9c:61:23:7c:4c:81:58:90:07:f9:26:ac:ac:2c:fc:8d:
         c4:09:75:67:d2:d7:28:ad:e3:d9:2d:8f:a4:f3:c1:83:9a:da:
         8a:a0:ec:0d:8d:95:c0:54:ec:15:8c:cf:8e:7e:c9:0a:32:25:
         0d:0b:2e:e2:1b:22:ca:1b:94:b0:64:a0:74:5a:ae:4c:a4:d1:
         17:92:a0:90:3b:69:05:87:73:2a:0a:cc:95:a8:d1:0b:e1:70:
         bc:b4:be:01:7e:21:90:5c:06:40:0c:a5:7e:1a:35:9b:f9:00:
         8c:0d:8f:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:47 2026 by rpki-client