This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231392e3233352e3139322e302f32342d3234203d3e203234313437.roa
File:                     3231392e3233352e3139322e302f32342d3234203d3e203234313437.roa (raw, json)
Hash identifier:          qtTgYatGvSNFTC6OFpTmEbcwwa3g6HwXVA0Ip2Px3xw=
Subject key identifier:   CD:00:C1:E3:E4:DC:99:D1:38:F6:CC:88:D6:BD:D8:55:8B:9B:FA:BD
Certificate issuer:       /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial:       45C0F530FBD90F7E68CBEC238C89559E7FAA00F0
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231392e3233352e3139322e302f32342d3234203d3e203234313437.roa
Signing time:             Tue 20 Jan 2026 02:25:02 +0000
ROA not before:           Tue 20 Jan 2026 02:20:02 +0000
ROA not after:            Tue 19 Jan 2027 02:25:02 +0000
asID:                     24147
IP address blocks:        219.235.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c0:f5:30:fb:d9:0f:7e:68:cb:ec:23:8c:89:55:9e:7f:aa:00:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
        Validity
            Not Before: Jan 20 02:20:02 2026 GMT
            Not After : Jan 19 02:25:02 2027 GMT
        Subject: CN=CD00C1E3E4DC99D138F6CC88D6BDD8558B9BFABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2c:cd:36:cc:2d:e9:3d:9d:9b:60:f2:a2:8d:
                    57:8a:43:f9:ee:8d:e2:f8:30:35:33:81:d2:43:ad:
                    6f:98:e6:8b:a0:d4:a0:42:60:2d:7b:3a:f3:6b:5b:
                    62:56:c1:86:ee:de:51:3d:55:8e:72:b8:03:4f:15:
                    f0:40:ab:66:7f:9b:63:4f:3c:87:71:95:ba:17:4d:
                    20:06:b7:05:18:04:9f:03:99:06:f5:c7:36:d2:c9:
                    5f:bc:b4:8c:2a:eb:2b:6c:53:7d:fb:ff:eb:fb:83:
                    90:3e:3e:05:20:42:e6:fa:69:19:08:f9:41:cc:73:
                    88:7d:30:3f:6b:d1:c4:4d:90:42:6d:e1:1b:91:34:
                    73:ac:cf:1e:26:59:8d:0b:1f:5e:f4:13:08:2a:15:
                    55:a7:6b:a7:a0:b3:b5:96:6c:38:38:72:74:2d:7d:
                    50:39:1c:ee:46:d2:7a:f9:09:99:1e:3d:7e:59:a1:
                    54:f0:4a:77:26:2a:4a:a7:71:b0:58:f8:cb:59:a2:
                    fa:05:ba:dc:b7:de:2a:b6:b3:15:c5:c5:71:8b:63:
                    e6:2a:4c:30:81:48:43:40:95:bf:32:3a:ac:e4:73:
                    81:e5:f7:d8:9d:01:56:11:70:cd:18:50:0b:a3:64:
                    2f:b7:a8:af:24:ff:d3:d2:11:98:a2:83:8a:d8:82:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:00:C1:E3:E4:DC:99:D1:38:F6:CC:88:D6:BD:D8:55:8B:9B:FA:BD
            X509v3 Authority Key Identifier:
                keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231392e3233352e3139322e302f32342d3234203d3e203234313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.235.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:73:52:f0:b4:9b:93:aa:25:67:7b:11:1d:1a:24:2c:a6:70:
         d3:26:80:79:c1:d3:16:39:e3:77:1c:e7:0d:12:50:aa:7a:15:
         3f:9e:55:da:07:5c:3e:dd:a2:53:ac:cc:8b:4f:a6:6d:1e:17:
         56:33:e3:af:95:35:c1:ba:67:f5:c6:8b:c2:a0:1e:43:4c:43:
         1a:8a:c5:e3:26:55:62:7c:3a:7b:a2:a9:94:62:26:26:fd:14:
         b2:d5:bf:89:41:f3:b9:c6:b3:a0:09:4f:a8:48:32:f2:78:e4:
         73:50:8b:96:fd:b9:11:bc:62:e1:e7:01:27:e5:62:fa:55:38:
         7c:a2:8e:41:7a:91:08:e3:61:68:7a:b9:28:57:ad:92:d8:07:
         cb:77:c4:fb:3f:6f:63:fc:86:d5:a0:d5:3b:c9:74:55:e6:ed:
         58:72:5c:99:c6:21:28:2e:df:eb:1b:62:df:c2:ac:7b:f4:bc:
         14:cc:6d:06:93:82:06:02:93:3d:0d:5e:a5:f2:d1:10:d6:3c:
         77:85:29:65:96:a0:44:93:92:dc:4e:80:b8:94:b3:a5:0f:54:
         de:1f:64:c4:67:d5:8d:87:4b:c2:e5:fd:0a:ac:a3:ef:43:f4:
         b8:b2:cb:91:58:d9:6a:21:e7:b9:b5:bb:c9:09:34:9c:e7:06:
         a3:2b:02:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:34:26 2026 by rpki-client