This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35342e302f32332d3233203d3e203234313437.roa
File:                     3230332e38362e35342e302f32332d3233203d3e203234313437.roa (raw, json)
Hash identifier:          qrPNPGmkS1XHHj7dvp921g1Efab04Eu3HyMUsLNZTLY=
Subject key identifier:   A4:EC:94:D7:27:0C:D5:0D:5B:A7:1F:9A:F1:59:F6:41:C9:08:BF:C1
Certificate issuer:       /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial:       13803C8166E8DC42917B2A2E5E453FC2A57CA999
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35342e302f32332d3233203d3e203234313437.roa
Signing time:             Tue 20 Jan 2026 02:25:02 +0000
ROA not before:           Tue 20 Jan 2026 02:20:02 +0000
ROA not after:            Tue 19 Jan 2027 02:25:02 +0000
asID:                     24147
IP address blocks:        203.86.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:80:3c:81:66:e8:dc:42:91:7b:2a:2e:5e:45:3f:c2:a5:7c:a9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
        Validity
            Not Before: Jan 20 02:20:02 2026 GMT
            Not After : Jan 19 02:25:02 2027 GMT
        Subject: CN=A4EC94D7270CD50D5BA71F9AF159F641C908BFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:0b:af:fe:b8:dc:69:6c:18:02:b7:7d:b6:
                    aa:50:fe:79:5a:70:dc:93:66:5d:6d:8d:c9:81:78:
                    59:fe:4e:dc:3d:43:80:a1:86:6b:a0:11:7d:0d:43:
                    a7:85:08:03:91:57:b6:01:06:d0:c5:1b:d9:0d:20:
                    e9:fe:cd:2f:89:75:e8:38:78:d3:a3:37:3c:36:b3:
                    05:24:de:17:8d:62:2d:3d:7a:3b:1a:03:88:6a:66:
                    36:56:7e:fa:eb:c7:bd:79:dc:0a:fe:1b:8f:ee:c3:
                    22:df:bb:b7:76:29:ba:7c:5a:4d:5a:b8:ea:d1:24:
                    e6:01:05:4a:38:2b:3e:5d:e8:78:b2:1b:bf:7f:eb:
                    45:fc:33:65:9f:4e:1f:a1:6e:56:8e:ac:86:46:c0:
                    4f:c7:23:46:b4:48:62:30:e8:49:d0:c1:94:8e:f7:
                    c9:cc:9f:44:19:2e:9e:4a:43:e0:5f:04:89:27:60:
                    1c:3c:02:37:2f:d7:0c:62:d8:45:93:07:2d:5b:35:
                    de:b6:65:13:49:e9:ca:13:52:cb:72:78:7d:6a:4f:
                    b6:ae:9f:9d:c0:14:15:6e:39:c4:be:76:6c:ad:33:
                    b8:90:a6:3c:13:a5:1e:e7:d3:06:3a:9c:7c:50:8c:
                    66:e1:63:58:8c:eb:11:e6:94:81:da:d1:06:c1:d0:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EC:94:D7:27:0C:D5:0D:5B:A7:1F:9A:F1:59:F6:41:C9:08:BF:C1
            X509v3 Authority Key Identifier:
                keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35342e302f32332d3233203d3e203234313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.86.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:92:d7:9d:68:fe:ae:45:4a:21:bd:f1:88:e6:85:72:38:1f:
         64:d3:73:9d:95:68:10:0d:9e:25:e9:16:a0:cc:af:1c:c0:75:
         6a:73:c5:b5:ed:c1:c9:83:23:b5:70:f4:34:5b:6b:b4:2a:47:
         3a:6d:00:9e:98:45:16:c1:09:1f:64:c5:99:90:0b:04:a0:b3:
         9a:50:35:28:16:c1:9d:19:0d:ea:9c:f7:16:6e:7c:a1:64:e3:
         08:b3:b7:99:04:e7:90:a3:5a:ac:12:c7:f6:41:be:26:c3:db:
         a6:e7:fa:f8:92:d8:ef:59:ee:54:23:df:86:ea:90:6a:30:a9:
         b7:53:b7:3b:9f:14:d3:d8:6a:21:0d:d9:14:3b:af:b4:2e:d0:
         86:83:a7:73:6d:2e:4c:f7:76:92:85:2f:aa:f0:98:54:32:84:
         68:5b:33:f2:d0:98:09:49:35:59:bf:07:fe:6f:b6:06:d8:48:
         ea:40:ea:5e:c8:74:f7:82:d0:0e:0c:0b:11:0c:7d:9a:59:1d:
         0e:4b:f6:ac:bf:d5:48:c2:91:3f:95:d1:2e:b1:5a:0a:92:0f:
         40:41:0d:62:e4:dd:b8:24:03:15:2f:0a:cd:82:c8:73:f5:8c:
         90:0f:cd:e5:f7:06:e7:6d:8f:17:8a:87:0d:77:b9:06:ea:66:
         99:b5:cd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:55:29 2026 by rpki-client