This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231392e3233352e3230372e302f32342d3234203d3e203234313437.roa
File:                     3231392e3233352e3230372e302f32342d3234203d3e203234313437.roa (raw, json)
Hash identifier:          Ol05ujiu93BtjhqGQ+WlieMkmygulOYjoIsurKH7T0c=
Subject key identifier:   65:91:19:D1:6C:3A:DD:92:D5:12:08:A7:D0:5D:09:A9:26:8F:8A:CC
Certificate issuer:       /CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
Certificate serial:       27EF6A8342E9FCE5A6AB5E8D9812809AF789C27B
Authority key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231392e3233352e3230372e302f32342d3234203d3e203234313437.roa
Signing time:             Tue 20 Jan 2026 02:25:01 +0000
ROA not before:           Tue 20 Jan 2026 02:20:01 +0000
ROA not after:            Tue 19 Jan 2027 02:25:01 +0000
asID:                     24147
IP address blocks:        219.235.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ef:6a:83:42:e9:fc:e5:a6:ab:5e:8d:98:12:80:9a:f7:89:c2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1
        Validity
            Not Before: Jan 20 02:20:01 2026 GMT
            Not After : Jan 19 02:25:01 2027 GMT
        Subject: CN=659119D16C3ADD92D51208A7D05D09A9268F8ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:80:b0:63:6c:ac:73:13:55:9c:38:72:4b:e7:
                    bd:29:c7:af:ce:bb:c3:51:fa:ba:b0:fc:c7:8e:b8:
                    d4:08:ea:15:59:bf:18:fd:34:35:d1:4b:e6:ad:b0:
                    9c:2d:b7:d5:35:da:c8:14:e9:98:55:48:5f:49:66:
                    4f:70:fa:fc:63:12:e6:5d:c3:f8:61:a0:b7:ee:e4:
                    1d:64:3a:8c:23:a9:97:9f:e8:18:0f:c9:e0:79:09:
                    eb:eb:ac:72:3d:d7:f7:c5:4a:a9:bf:44:38:56:0e:
                    d4:bf:68:28:3b:1d:a9:a2:e7:75:10:33:eb:a6:09:
                    b4:1e:bb:c7:fd:e3:e4:23:00:8b:54:c5:6a:93:37:
                    1b:ad:55:48:be:22:9d:f6:7b:c3:9d:d2:82:0c:bf:
                    65:0a:df:65:ac:c1:74:39:b1:fa:d5:dc:73:a3:8d:
                    f6:5f:98:17:5f:32:f1:be:78:66:f7:7d:ed:b2:e7:
                    81:cf:51:ba:ac:5d:01:fa:2f:f8:40:48:cd:3c:0f:
                    8f:32:55:02:32:9f:21:91:06:44:61:c8:74:f9:c3:
                    aa:b6:4b:91:17:6b:98:28:11:6f:9e:00:ab:7d:20:
                    bb:ff:8a:01:c9:d7:d7:bf:11:bf:49:9a:87:cb:4f:
                    77:e4:db:f2:dd:5e:b4:ca:17:75:0e:7d:74:b5:20:
                    fb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:91:19:D1:6C:3A:DD:92:D5:12:08:A7:D0:5D:09:A9:26:8F:8A:CC
            X509v3 Authority Key Identifier:
                keyid:A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/3231392e3233352e3230372e302f32342d3234203d3e203234313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.235.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:fc:06:a2:c6:6d:2d:7f:dc:1e:a4:f3:7a:a1:2f:8d:08:f3:
         74:f7:3f:46:98:ac:3e:31:3d:12:e0:b4:49:8c:e6:59:69:2f:
         a8:35:60:6e:50:45:59:54:07:18:8a:17:1e:62:48:96:51:33:
         01:cd:09:f6:dd:4f:9e:de:e6:dd:32:f2:08:05:a1:f7:d8:47:
         b8:68:fc:78:5a:f3:49:a7:cc:78:e5:b2:15:f5:64:0b:39:a8:
         41:4c:48:a5:3d:fe:89:78:66:df:1d:49:e0:35:bd:e9:ed:ae:
         85:14:ad:99:34:54:1a:f7:fa:3e:10:33:4f:c9:38:68:f5:76:
         27:92:a7:47:cd:56:35:5a:b6:24:04:7f:6e:31:98:13:b2:17:
         13:fb:03:69:aa:54:10:45:23:3c:0b:f0:87:da:86:13:f6:06:
         24:2f:2d:8c:5c:34:0f:43:f4:aa:26:27:6a:87:8c:ba:95:7b:
         14:61:75:58:02:b5:fb:6b:df:c6:98:c0:18:3b:66:10:e3:1a:
         15:a4:b0:95:e7:b1:36:6c:4d:a4:a6:1c:c0:c3:67:67:f6:57:
         cd:0b:a9:a7:ea:e5:12:b6:1e:3a:ce:92:f0:41:92:bb:ac:02:
         3d:e8:bb:40:48:00:01:37:04:11:7d:51:34:96:11:cc:66:35:
         fb:9f:64:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:17 2026 by rpki-client