This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35352e302f32342d3234203d3e203234313437.roa
File:                     3230332e38362e35352e302f32342d3234203d3e203234313437.roa (raw, json)
Hash identifier:          ZojEaFjtdgor13jSa7GyZGMBWWXJenaYyF2n+BjUBOg=
Subject key identifier:   AB:EF:F9:9F:2A:9C:58:23:36:A4:7D:95:0A:76:69:69:76:9B:D9:10
Certificate issuer:       /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial:       0DCD66E0A46C0443524F6C97D9DEB3314731D948
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35352e302f32342d3234203d3e203234313437.roa
Signing time:             Tue 20 Jan 2026 02:25:00 +0000
ROA not before:           Tue 20 Jan 2026 02:20:00 +0000
ROA not after:            Tue 19 Jan 2027 02:25:00 +0000
asID:                     24147
IP address blocks:        203.86.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:cd:66:e0:a4:6c:04:43:52:4f:6c:97:d9:de:b3:31:47:31:d9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
        Validity
            Not Before: Jan 20 02:20:00 2026 GMT
            Not After : Jan 19 02:25:00 2027 GMT
        Subject: CN=ABEFF99F2A9C582336A47D950A766969769BD910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:18:c6:b2:57:43:8c:d5:88:0f:dd:bc:42:
                    69:dd:ea:51:cd:cf:e5:c6:c7:0e:df:a4:0e:e7:27:
                    66:d3:73:a5:1f:f6:86:31:cc:e1:f9:1e:c0:20:a1:
                    ce:34:db:93:75:a6:6b:f1:4d:b4:8c:ba:2d:60:51:
                    2b:bc:30:81:47:82:bc:f9:f2:60:e9:31:30:fb:60:
                    b7:7d:0d:7c:03:24:0f:e0:d7:3e:05:64:48:cb:2a:
                    86:21:93:f5:20:ba:9c:8e:d9:9e:15:2c:13:23:35:
                    05:c7:a9:c7:87:2b:44:e9:75:cc:3f:48:dd:31:f0:
                    72:36:8c:53:19:ca:8d:c1:02:13:ec:fd:f9:c4:9c:
                    9a:21:94:44:a9:8b:9d:37:21:23:1d:ae:1c:4e:63:
                    12:16:d5:c5:7d:8c:42:f3:f3:d7:09:13:e6:3a:54:
                    0a:93:9f:15:07:70:b8:ab:3d:d3:9a:ee:e7:49:34:
                    4a:dd:5d:4d:a6:c9:8a:ce:79:f8:23:0b:3e:8f:bc:
                    91:ad:68:32:2e:84:2f:e1:ac:d8:85:02:72:aa:05:
                    2a:cd:9b:51:0a:9f:49:22:fa:c0:14:26:06:cc:21:
                    86:a9:8b:df:24:8a:0b:e9:eb:7f:60:79:9e:41:e4:
                    42:30:11:d9:d3:78:60:b4:dd:31:88:9e:a3:fa:c9:
                    27:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EF:F9:9F:2A:9C:58:23:36:A4:7D:95:0A:76:69:69:76:9B:D9:10
            X509v3 Authority Key Identifier:
                keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e35352e302f32342d3234203d3e203234313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.86.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:95:40:87:9b:ae:48:e9:af:50:a8:51:37:3f:08:6d:11:4f:
         2f:0f:b9:86:3c:ad:35:2d:3b:3f:e5:8a:4c:fd:a8:ce:de:75:
         ca:7b:3d:39:40:7f:a1:77:af:2a:30:1e:c2:c6:3f:84:8f:18:
         2f:e8:db:5d:9d:68:79:f7:15:4e:8d:48:15:11:b8:fa:77:fd:
         b7:50:4a:a7:5f:19:db:b9:ef:d4:20:e4:b7:ec:ff:4c:71:e3:
         98:e9:cf:38:44:fa:18:48:f0:58:d0:5a:13:d7:01:bd:5a:f3:
         6e:77:da:2b:86:a2:e6:2e:33:c4:c9:58:16:0d:cd:20:c7:2c:
         f2:6c:33:7a:d3:f9:1e:7a:06:79:bc:63:bd:4e:34:ac:be:5a:
         62:7d:6e:7a:88:77:14:fe:d9:91:28:41:92:0f:95:6c:92:0e:
         89:d2:c7:45:8c:74:b6:09:e0:93:71:7e:ce:22:bd:b5:d4:10:
         df:e8:07:39:6f:80:73:0f:85:b5:1e:eb:8c:4b:7a:c4:f4:fb:
         6a:3a:cf:ee:7e:8e:f3:d4:1b:39:0c:f5:99:5e:00:60:a7:ef:
         5f:3f:78:2d:33:6b:64:42:ce:63:d2:a7:2c:18:97:e7:09:98:
         ee:09:ad:57:82:d7:c9:4f:2d:41:0c:6a:f8:5e:c5:18:2d:1d:
         57:56:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:30 2026 by rpki-client