This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231392e302f32342d3332203d3e203234343237.roa
File:                     3230322e3137302e3231392e302f32342d3332203d3e203234343237.roa (raw, json)
Hash identifier:          PGdlBkvIO8J6pjhNUuYTr3nEOg0TKMZhDugFcUldVRM=
Subject key identifier:   CD:BC:6D:80:FC:40:D2:2B:FE:D8:2F:BD:5A:0D:81:4E:16:CD:CD:20
Certificate issuer:       /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Certificate serial:       54BA8B47278161B4874D3D409E265E85324A1E84
Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231392e302f32342d3332203d3e203234343237.roa
Signing time:             Tue 20 Jan 2026 02:27:20 +0000
ROA not before:           Tue 20 Jan 2026 02:22:20 +0000
ROA not after:            Tue 19 Jan 2027 02:27:20 +0000
asID:                     24427
IP address blocks:        202.170.219.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ba:8b:47:27:81:61:b4:87:4d:3d:40:9e:26:5e:85:32:4a:1e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
        Validity
            Not Before: Jan 20 02:22:20 2026 GMT
            Not After : Jan 19 02:27:20 2027 GMT
        Subject: CN=CDBC6D80FC40D22BFED82FBD5A0D814E16CDCD20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f5:03:53:00:6a:60:46:bf:d0:14:2f:85:93:
                    36:d8:3e:3d:65:a2:99:13:8c:32:dc:1b:2a:a3:ff:
                    1e:20:b9:b2:3d:8b:7e:51:c1:ab:dd:11:76:06:2b:
                    66:8e:06:b9:27:c7:de:af:6d:f2:16:27:da:ac:80:
                    0d:ff:4e:76:14:68:92:82:96:f7:b0:67:7d:13:14:
                    f6:03:8d:59:41:48:a8:a2:cb:05:b3:53:5e:0e:e7:
                    4a:8f:60:62:0b:ed:71:88:d9:34:af:af:ee:06:95:
                    d2:24:5a:18:c2:11:8b:c8:75:52:d9:08:7e:3e:f6:
                    90:31:97:74:d4:da:2f:93:b7:a8:84:94:ec:2b:b2:
                    11:7b:a8:ac:89:67:71:5f:35:7b:74:b8:4b:8e:1c:
                    26:6a:3a:51:7f:f3:e5:a5:4d:11:72:e6:de:0d:28:
                    9f:82:4a:01:c7:34:62:2a:47:fe:13:7b:81:99:39:
                    68:c1:0d:71:bd:3f:05:34:e6:c8:9a:ff:aa:2e:4c:
                    0f:dd:75:26:c6:e2:e3:f7:77:de:76:4b:82:00:1e:
                    b3:8d:b5:bc:fd:92:c2:16:c0:e6:ed:50:26:62:72:
                    15:1e:17:31:e8:e0:95:76:4b:76:b5:1a:52:cf:33:
                    2f:2d:e6:e7:50:b0:d8:6e:2a:28:37:1b:19:10:13:
                    d5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BC:6D:80:FC:40:D2:2B:FE:D8:2F:BD:5A:0D:81:4E:16:CD:CD:20
            X509v3 Authority Key Identifier:
                keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231392e302f32342d3332203d3e203234343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.170.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:db:9d:83:86:e5:2c:df:71:d9:6d:0b:7b:90:a2:84:7d:85:
         23:c4:a4:b9:29:65:02:ee:67:d8:dd:12:a3:66:5e:b5:b2:3b:
         ef:e4:36:07:eb:e4:04:e1:be:75:67:07:c2:41:33:fb:a3:d1:
         cc:78:0f:fc:90:93:d3:6b:85:de:04:a1:a7:5f:cd:73:6a:fb:
         ca:cd:eb:13:6a:9f:29:7b:50:04:26:97:90:37:f0:eb:73:29:
         41:09:e1:1e:69:73:d8:63:a4:2e:1b:8a:3d:2b:06:aa:70:0a:
         e7:e5:1f:43:b1:e3:f4:bb:56:71:1d:4f:a9:df:01:8f:64:09:
         0a:07:7b:bd:b5:36:ee:77:e2:aa:a8:6c:7b:dc:d5:04:58:6a:
         43:14:84:79:7a:97:45:05:3c:f8:44:1b:5f:8c:88:47:11:50:
         7b:5f:3a:02:e3:ae:fc:b6:74:0f:5f:1d:ee:17:1b:5e:d0:da:
         95:d7:85:57:b7:58:2f:fa:35:d3:cf:dc:44:2c:74:50:bb:06:
         3f:ba:3d:6d:d4:15:2d:27:62:7f:62:0f:d6:4f:df:da:73:04:
         71:18:3c:05:a2:5c:18:2e:34:6f:b1:2f:b8:a2:db:13:c0:dc:
         22:9d:59:63:07:26:ea:c3:22:de:ef:0a:3f:4a:21:78:52:52:
         6c:37:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:33 2026 by rpki-client