This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e36322e302f32342d3234203d3e203234313437.roa
File:                     3230332e38362e36322e302f32342d3234203d3e203234313437.roa (raw, json)
Hash identifier:          LEggqkanD8YXk+XFnT/2KdUJ9g96lm9p2YSqWsX8J9A=
Subject key identifier:   D0:BB:04:41:71:91:A9:08:28:BA:34:F2:D0:4A:72:F2:A8:C7:E5:C7
Certificate issuer:       /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial:       034F8DA48C8388D2F4C73A48D2C84E8EBC30F0B3
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e36322e302f32342d3234203d3e203234313437.roa
Signing time:             Tue 20 Jan 2026 02:25:02 +0000
ROA not before:           Tue 20 Jan 2026 02:20:02 +0000
ROA not after:            Tue 19 Jan 2027 02:25:02 +0000
asID:                     24147
IP address blocks:        203.86.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4f:8d:a4:8c:83:88:d2:f4:c7:3a:48:d2:c8:4e:8e:bc:30:f0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
        Validity
            Not Before: Jan 20 02:20:02 2026 GMT
            Not After : Jan 19 02:25:02 2027 GMT
        Subject: CN=D0BB04417191A90828BA34F2D04A72F2A8C7E5C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d7:78:d7:32:15:30:08:13:39:31:51:e7:43:
                    cf:56:fc:da:d1:13:2f:4c:2c:92:cd:71:d8:b7:4b:
                    a5:a8:28:7a:37:34:73:c4:2f:c0:ba:be:f4:65:cd:
                    82:45:34:fa:61:27:5b:a0:9f:43:19:69:72:68:f9:
                    fe:4e:eb:98:57:c7:98:16:3b:57:14:87:3d:51:50:
                    1e:b2:74:b7:b6:e4:6c:0a:0d:3c:4d:2b:6b:49:b5:
                    02:39:85:ac:fc:35:0e:cc:48:04:57:dd:b1:1a:7f:
                    e5:6d:f2:20:a0:ba:8f:7a:3e:15:85:94:db:3a:56:
                    52:29:a3:cf:51:01:c4:71:17:44:b2:0e:3f:53:00:
                    3f:e9:2f:98:08:56:d4:9b:3d:f7:9d:8c:d8:4f:df:
                    5b:8a:3b:36:76:21:89:3a:18:a2:52:82:17:07:36:
                    75:67:d6:32:9a:81:58:26:47:eb:f7:dd:e8:02:4b:
                    69:de:23:c1:31:61:39:a5:50:a5:68:94:86:e7:5a:
                    06:ec:f5:5c:01:fa:6b:a0:27:17:a3:f9:1a:8b:65:
                    76:e2:7e:d8:f0:b8:15:45:07:50:93:f8:51:41:10:
                    fa:04:b6:e4:70:0b:4d:c7:d1:47:7f:0d:d5:11:6d:
                    1e:59:e4:06:fc:ea:63:17:dc:bf:6b:92:ff:2f:ca:
                    fd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BB:04:41:71:91:A9:08:28:BA:34:F2:D0:4A:72:F2:A8:C7:E5:C7
            X509v3 Authority Key Identifier:
                keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3230332e38362e36322e302f32342d3234203d3e203234313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.86.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:c7:44:cf:73:e9:40:28:3f:3c:ae:c5:a7:a3:cb:53:ab:19:
         ac:4a:40:21:95:73:74:b9:e1:d8:bf:3e:51:dd:ec:2d:f4:94:
         63:ce:a5:7a:e8:05:b4:91:cc:45:1b:00:ec:61:17:89:f9:32:
         bb:af:ed:85:4b:9d:99:1d:46:c0:7d:38:83:43:6a:4a:30:2b:
         19:d2:fb:44:db:10:88:07:34:78:51:0c:d8:b1:8a:0e:ae:df:
         b1:e9:8b:06:de:b3:ae:8d:9c:e0:0e:f1:45:1d:61:f4:53:05:
         97:b3:32:77:04:7e:61:a4:b5:2d:22:b8:23:71:ce:fb:64:70:
         e7:91:8d:e2:de:fa:ea:02:bd:9c:00:0b:57:fb:71:28:a7:30:
         08:fa:a6:63:14:3b:9c:20:03:78:14:47:b7:2e:e1:4d:4b:e2:
         fc:8e:a1:12:70:48:16:84:de:fc:de:f3:51:7d:4d:22:94:43:
         53:a3:69:b0:9a:0e:b5:0b:0d:e8:74:ed:92:63:86:64:4a:b6:
         40:98:59:7f:23:a3:a0:8e:90:cb:0b:6c:75:de:ec:81:9f:8b:
         fa:5e:29:65:e1:7f:19:fb:26:de:67:fe:a3:2e:93:3a:84:8b:
         1c:40:65:4a:59:c5:46:24:52:f6:4d:87:45:af:5a:d3:e6:c4:
         7a:ad:df:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:31 2026 by rpki-client