This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232312e302f32342d3332203d3e203234343237.roa
File:                     3230322e3137302e3232312e302f32342d3332203d3e203234343237.roa (raw, json)
Hash identifier:          XtA9p9+3iEqJl9oNL4XSEWEUSb6vE+lI29hPVM6jgl8=
Subject key identifier:   EA:29:58:6F:D2:55:3E:42:94:E3:A7:DD:A9:83:AB:6F:20:2C:2D:3B
Certificate issuer:       /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Certificate serial:       08F3C1100DAC9B9B51D4555202E1E4AD2D4B090A
Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232312e302f32342d3332203d3e203234343237.roa
Signing time:             Tue 20 Jan 2026 02:27:20 +0000
ROA not before:           Tue 20 Jan 2026 02:22:20 +0000
ROA not after:            Tue 19 Jan 2027 02:27:20 +0000
asID:                     24427
IP address blocks:        202.170.221.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f3:c1:10:0d:ac:9b:9b:51:d4:55:52:02:e1:e4:ad:2d:4b:09:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
        Validity
            Not Before: Jan 20 02:22:20 2026 GMT
            Not After : Jan 19 02:27:20 2027 GMT
        Subject: CN=EA29586FD2553E4294E3A7DDA983AB6F202C2D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:79:bc:52:8a:fb:df:1f:a2:d6:9c:8a:70:
                    79:7c:bc:8d:8d:c3:3f:e2:1a:0f:02:50:e4:99:f5:
                    94:f8:a2:2f:a8:c4:71:f6:08:3b:b6:48:f4:5f:77:
                    a0:45:3d:20:e6:2e:d4:70:2e:a4:d2:9e:0a:32:e3:
                    38:5a:f9:d7:ba:4d:e8:5e:36:d2:ef:d5:b8:ef:6a:
                    0b:63:9c:30:3c:85:56:17:9a:a0:51:3b:5f:57:c0:
                    3f:88:9f:96:42:6d:e4:a5:1e:99:33:39:75:44:a8:
                    79:e2:4d:bf:45:84:1d:e8:09:c1:2f:96:83:da:0d:
                    11:f5:bd:ea:c0:7a:b7:0f:02:b8:55:ca:b2:60:0c:
                    52:a3:a6:a4:87:79:b3:53:64:d8:07:e4:9a:ca:a8:
                    19:5b:89:46:9d:51:65:34:81:93:0a:40:a6:03:87:
                    cf:37:9e:4c:e0:25:67:d2:4f:34:d6:80:ce:36:99:
                    78:86:fd:b0:73:d0:41:a0:18:1f:93:4c:39:99:b9:
                    ef:72:0f:9d:ec:8c:ac:19:e3:65:ad:09:0e:47:8d:
                    7e:e3:ea:e3:f2:6c:ec:91:c7:05:b2:18:3f:56:bf:
                    9c:5f:6a:8a:33:32:32:86:b8:82:21:38:5f:8e:37:
                    14:c5:e9:73:50:b5:23:67:2d:e1:ea:87:b1:98:69:
                    fc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:29:58:6F:D2:55:3E:42:94:E3:A7:DD:A9:83:AB:6F:20:2C:2D:3B
            X509v3 Authority Key Identifier:
                keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232312e302f32342d3332203d3e203234343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.170.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:e9:73:c4:34:20:b6:86:36:49:a1:33:df:40:87:d1:d4:21:
         b6:6e:ad:de:9a:4d:b2:46:4b:42:18:48:bd:a5:7d:d0:f6:84:
         6e:60:2e:5e:c3:82:b1:e0:90:d1:26:5d:db:27:2e:4f:de:c7:
         8d:0c:ec:13:12:e7:f7:31:fa:02:2e:01:e1:d4:e4:1f:72:69:
         55:90:f9:9e:b4:dc:0f:15:41:31:b1:f3:78:4d:b8:8c:0b:1e:
         92:fc:4f:67:57:f7:60:8e:47:10:70:4b:60:3e:8d:25:5a:1e:
         18:f6:86:ee:6c:63:5f:b3:12:bf:b9:ef:26:4a:cf:9b:95:ef:
         ba:ca:af:b7:07:d1:9e:d3:0e:5c:0d:38:d1:3a:75:5c:c6:34:
         a8:d1:72:7b:39:19:8f:ba:86:1e:ad:62:c4:9c:36:a5:13:91:
         3d:d8:2c:f7:7e:e5:a5:85:f0:16:63:b3:07:50:e2:67:5a:cc:
         bf:22:48:b0:00:5f:32:e0:7d:8b:03:e6:43:04:53:1c:1e:28:
         1e:14:0e:9a:12:f9:9f:de:8c:a0:94:03:11:93:41:79:fc:a3:
         29:9f:9e:e6:49:32:96:1c:c5:96:8e:b7:2c:fd:c0:dd:85:86:
         fb:ac:68:5f:ec:80:07:cf:00:0f:58:9a:0c:a9:64:d3:84:36:
         e9:56:80:0d
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUCPPBEA2sm5tR1FVSAuHkrS1LCQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG
NDgyRDhENTAeFw0yNjAxMjAwMjIyMjBaFw0yNzAxMTkwMjI3MjBaMDMxMTAvBgNV
BAMTKEVBMjk1ODZGRDI1NTNFNDI5NEUzQTdEREE5ODNBQjZGMjAyQzJEM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XHm8Uor73x+i1pyKcHl8vI2N
wz/iGg8CUOSZ9ZT4oi+oxHH2CDu2SPRfd6BFPSDmLtRwLqTSngoy4zha+de6Tehe
NtLv1bjvagtjnDA8hVYXmqBRO19XwD+In5ZCbeSlHpkzOXVEqHniTb9FhB3oCcEv
loPaDRH1verAercPArhVyrJgDFKjpqSHebNTZNgH5JrKqBlbiUadUWU0gZMKQKYD
h883nkzgJWfSTzTWgM42mXiG/bBz0EGgGB+TTDmZue9yD53sjKwZ42WtCQ5HjX7j
6uPybOyRxwWyGD9Wv5xfaoozMjKGuIIhOF+ONxTF6XNQtSNnLeHqh7GYafw/AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU6ilYb9JVPkKU46fdqYOrbyAsLTswHwYDVR0j
BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB
RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8zMjMwMzIyZTMx
MzczMDJlMzIzMjMxMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNDM0MzIzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAMqq3TANBgkqhkiG9w0BAQsFAAOCAQEASelzxDQgtoY2SaEz30CH
0dQhtm6t3ppNskZLQhhIvaV90PaEbmAuXsOCseCQ0SZd2ycuT97HjQzsExLn9zH6
Ai4B4dTkH3JpVZD5nrTcDxVBMbHzeE24jAsekvxPZ1f3YI5HEHBLYD6NJVoeGPaG
7mxjX7MSv7nvJkrPm5XvusqvtwfRntMOXA040Tp1XMY0qNFyezkZj7qGHq1ixJw2
pRORPdgs937lpYXwFmOzB1DiZ1rMvyJIsABfMuB9iwPmQwRTHB4oHhQOmhL5n96M
oJQDEZNBefyjKZ+e5kkylhzFlo63LP3A3YWG+6xoX+yAB88AD1iaDKlk04Q26VaA
DQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:32 2026 by rpki-client