This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231372e302f32342d3332203d3e203234343237.roa
File:                     3230322e3137302e3231372e302f32342d3332203d3e203234343237.roa (raw, json)
Hash identifier:          LJLHnynahTuEBARxNRPN8UwyfsQaRWudvGF9ghrX2DQ=
Subject key identifier:   9E:34:90:34:BC:BC:B6:9E:4A:10:B7:FB:F1:4D:93:FC:E9:A3:DA:46
Certificate issuer:       /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Certificate serial:       0D62B40312EDFD020F265C515F4C57A3230495BE
Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231372e302f32342d3332203d3e203234343237.roa
Signing time:             Tue 20 Jan 2026 02:27:20 +0000
ROA not before:           Tue 20 Jan 2026 02:22:20 +0000
ROA not after:            Tue 19 Jan 2027 02:27:20 +0000
asID:                     24427
IP address blocks:        202.170.217.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:62:b4:03:12:ed:fd:02:0f:26:5c:51:5f:4c:57:a3:23:04:95:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
        Validity
            Not Before: Jan 20 02:22:20 2026 GMT
            Not After : Jan 19 02:27:20 2027 GMT
        Subject: CN=9E349034BCBCB69E4A10B7FBF14D93FCE9A3DA46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b5:92:20:36:cf:9b:ed:e5:4f:dd:a2:16:4e:
                    62:a1:6b:1d:d7:6a:56:bd:35:92:9e:45:90:26:a1:
                    22:6c:7f:f7:40:1e:68:78:ae:cf:3c:ca:f1:42:55:
                    8c:23:a0:af:d5:ef:d0:f3:5c:60:ee:18:fa:a9:54:
                    45:1e:a1:d5:ea:07:6d:f5:fa:1f:d6:08:99:c0:5d:
                    3f:33:81:10:05:2c:cd:85:de:a1:c4:9b:65:2f:80:
                    c6:9c:5c:30:0a:9b:d3:82:27:84:1e:fd:37:6a:b6:
                    89:f1:52:c9:3d:2b:bc:3b:45:16:bf:50:fe:98:9e:
                    d8:15:3a:81:83:dc:c7:ce:53:5c:af:57:08:66:1b:
                    fc:7b:6e:c7:de:5a:6c:37:03:cf:98:c1:17:f2:f2:
                    e3:bf:ca:48:c2:15:76:e7:d0:d7:88:0e:43:fc:fd:
                    27:64:9c:4e:bc:f7:24:35:ce:22:b2:c3:ee:75:86:
                    33:03:94:77:a6:ec:c2:1a:c8:96:63:56:71:ba:3e:
                    1d:69:cc:a4:37:34:8c:3e:b8:8b:3b:68:ec:e8:ad:
                    43:06:b7:b6:c5:98:3e:dd:42:4b:d8:b2:7c:04:9e:
                    ed:92:99:cf:67:5a:22:d2:8e:02:34:e6:6b:ba:2e:
                    86:9c:94:50:96:b8:42:cb:a7:92:ec:7d:e1:7a:dd:
                    4f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:34:90:34:BC:BC:B6:9E:4A:10:B7:FB:F1:4D:93:FC:E9:A3:DA:46
            X509v3 Authority Key Identifier:
                keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231372e302f32342d3332203d3e203234343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.170.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:7e:16:90:95:9f:bc:16:59:b6:51:43:f5:9d:f9:92:86:e6:
         bd:0c:1b:1d:21:00:b5:3c:cc:6b:c1:de:36:7d:50:ed:ae:97:
         3a:af:79:2f:a9:bd:0b:17:81:72:a8:50:b5:03:aa:68:f8:6a:
         9d:78:82:24:47:24:62:e7:33:dc:35:89:60:83:be:b7:3e:fb:
         04:aa:09:0a:3f:cc:f8:bc:b3:a5:df:ed:f8:22:3b:e4:95:57:
         f7:47:40:34:0f:20:77:65:e0:aa:f6:48:1a:b3:91:55:3d:ab:
         f4:84:79:75:71:8f:aa:8f:72:e5:66:83:80:1c:3c:b6:48:ad:
         a7:68:e0:91:b8:fc:21:27:f8:51:17:37:56:4e:1c:85:fa:dc:
         14:47:f2:ec:7a:eb:f7:64:f1:72:5a:59:30:ff:58:ff:06:94:
         20:45:08:2c:cc:db:ac:4c:52:4d:1d:d4:dd:d9:58:46:09:5c:
         a2:ea:37:da:ae:30:b9:a8:76:56:12:31:fd:54:9e:0d:10:37:
         54:ea:d0:ec:bf:d1:10:88:e7:73:63:f9:7d:58:a6:26:7e:dc:
         4b:eb:a9:ac:38:cf:96:b1:7c:c4:d4:80:95:55:f3:12:a9:5c:
         b0:da:2b:3e:25:ff:08:09:69:fa:86:0f:52:5e:c3:9f:71:a5:
         78:73:7b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:32 2026 by rpki-client