This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947406337/0/3230332e3230382e33322e302f31392d3234203d3e203234343234.roa
File:                     3230332e3230382e33322e302f31392d3234203d3e203234343234.roa (raw, json)
Hash identifier:          N2nkDTssJapb5MQQw+tYmzqkzQ0KoXd8OohRafzcbkM=
Subject key identifier:   1B:B9:C5:48:A6:8C:54:57:F1:74:AE:5D:C6:DD:28:2B:0A:CE:F2:EB
Certificate issuer:       /CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63
Certificate serial:       0B709CED5628FFB837B6C4ABE04D962CF1E10E4D
Authority key identifier: 0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/3230332e3230382e33322e302f31392d3234203d3e203234343234.roa
Signing time:             Tue 20 Jan 2026 02:23:46 +0000
ROA not before:           Tue 20 Jan 2026 02:18:46 +0000
ROA not after:            Tue 19 Jan 2027 02:23:46 +0000
asID:                     24424
IP address blocks:        203.208.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:70:9c:ed:56:28:ff:b8:37:b6:c4:ab:e0:4d:96:2c:f1:e1:0e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63
        Validity
            Not Before: Jan 20 02:18:46 2026 GMT
            Not After : Jan 19 02:23:46 2027 GMT
        Subject: CN=1BB9C548A68C5457F174AE5DC6DD282B0ACEF2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:0d:e0:5a:f3:81:14:ac:9f:05:b3:57:f5:
                    30:ba:d0:51:66:8a:75:1b:9b:22:66:82:2d:b6:cc:
                    7a:37:22:3c:c1:87:91:25:17:6c:70:9a:e3:41:53:
                    46:7a:6d:c8:82:00:0e:f2:89:67:4b:84:13:0b:38:
                    76:7c:89:c0:89:8a:e0:29:84:9f:ce:46:80:41:9f:
                    8f:6a:4c:5c:62:c8:2c:ab:44:07:d5:b0:cb:5c:96:
                    8d:3d:53:5a:43:1f:da:de:85:bf:54:d0:8f:70:7f:
                    b4:dc:fd:20:0a:97:86:e8:55:2a:c0:b5:e1:47:75:
                    3b:19:08:6d:b5:84:e8:b9:0e:14:e1:42:70:fe:e0:
                    f7:a0:59:b2:1a:10:2f:4c:d0:93:0b:d2:d7:52:8b:
                    90:27:f7:41:2f:ad:0a:84:1d:52:4c:4c:dc:be:3c:
                    8e:8e:10:3c:ba:5c:89:50:59:ab:6d:e1:26:e3:2d:
                    93:3b:10:36:d8:67:e4:26:1c:83:62:96:b4:69:f4:
                    53:eb:31:22:3f:0c:92:0c:23:e6:ae:fd:0b:27:0f:
                    a1:ab:35:8f:ed:14:ff:20:08:f3:2e:fc:ea:56:5e:
                    44:09:12:be:d2:91:3f:fc:d1:8f:05:b6:af:10:58:
                    d9:af:f2:bc:15:17:13:c8:e7:ba:8c:71:21:88:ac:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B9:C5:48:A6:8C:54:57:F1:74:AE:5D:C6:DD:28:2B:0A:CE:F2:EB
            X509v3 Authority Key Identifier:
                keyid:0D:B8:3B:8B:4A:01:EA:23:65:0D:85:DA:4B:B5:DB:43:FE:E7:8C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DB83B8B4A01EA23650D85DA4BB5DB43FEE78C63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947406337/0/3230332e3230382e33322e302f31392d3234203d3e203234343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.208.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:aa:77:95:6a:e1:bf:ef:59:50:a8:0f:99:a0:be:f2:70:ad:
         44:93:3b:77:a1:6c:79:ed:97:4a:e2:aa:94:0e:ae:98:d0:f7:
         3f:32:18:a7:e5:70:ed:2f:02:43:4b:66:8b:ea:d9:8b:e7:6c:
         89:53:e5:7c:4c:83:0a:56:11:0e:e9:85:eb:30:c0:e4:cb:1d:
         0b:0e:6e:da:13:61:1e:ec:ca:b7:c9:0e:c4:72:64:e0:4e:05:
         45:dc:3c:10:da:20:b4:74:a2:59:19:7c:66:b0:e5:df:20:2d:
         d6:54:74:78:e9:29:33:6b:9c:73:0b:f2:6f:9d:3e:20:3e:a1:
         51:30:6f:7c:b7:8d:1d:85:d6:76:08:a9:97:c2:8b:0a:47:de:
         e7:e8:a0:22:4a:85:92:34:f4:08:19:1b:c8:d7:b1:ba:d2:af:
         0f:4e:7f:13:0b:4d:67:76:ea:ff:06:e6:ab:9e:75:1d:31:91:
         a4:b5:39:3c:c6:a5:c1:59:cb:6e:ac:1c:aa:da:76:c0:5a:32:
         05:98:dd:b8:e8:f0:2a:16:e2:01:76:f6:f6:75:70:bb:3c:2b:
         6a:88:ca:42:9f:4a:c1:20:e9:57:3d:49:65:5c:39:4b:75:86:
         7a:1d:64:9f:43:7c:57:7d:0a:ef:93:dc:a1:3c:52:1c:c3:f3:
         f7:55:22:4f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUC3Cc7VYo/7g3tsSr4E2WLPHhDk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNG
RUU3OEM2MzAeFw0yNjAxMjAwMjE4NDZaFw0yNzAxMTkwMjIzNDZaMDMxMTAvBgNV
BAMTKDFCQjlDNTQ4QTY4QzU0NTdGMTc0QUU1REM2REQyODJCMEFDRUYyRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHsQ3gWvOBFKyfBbNX9TC60FFm
inUbmyJmgi22zHo3IjzBh5ElF2xwmuNBU0Z6bciCAA7yiWdLhBMLOHZ8icCJiuAp
hJ/ORoBBn49qTFxiyCyrRAfVsMtclo09U1pDH9rehb9U0I9wf7Tc/SAKl4boVSrA
teFHdTsZCG21hOi5DhThQnD+4PegWbIaEC9M0JML0tdSi5An90EvrQqEHVJMTNy+
PI6OEDy6XIlQWatt4SbjLZM7EDbYZ+QmHINilrRp9FPrMSI/DJIMI+au/QsnD6Gr
NY/tFP8gCPMu/OpWXkQJEr7SkT/80Y8Ftq8QWNmv8rwVFxPI57qMcSGIrJt9AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUG7nFSKaMVFfxdK5dxt0oKwrO8uswHwYDVR0j
BBgwFoAUDbg7i0oB6iNlDYXaS7XbQ/7njGMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzQwNjMzNy8wLzBEQjgzQjhCNEEwMUVBMjM2NTBEODVEQTRCQjVE
QjQzRkVFNzhDNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMERCODNCOEI0QTAxRUEyMzY1MEQ4NURBNEJCNURCNDNGRUU3OEM2My5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzQwNjMzNy8wLzMyMzAzMzJlMzIz
MDM4MmUzMzMyMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzNDM0MzIzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBcvQIDANBgkqhkiG9w0BAQsFAAOCAQEAdqp3lWrhv+9ZUKgPmaC+8nCt
RJM7d6Fsee2XSuKqlA6umND3PzIYp+Vw7S8CQ0tmi+rZi+dsiVPlfEyDClYRDumF
6zDA5MsdCw5u2hNhHuzKt8kOxHJk4E4FRdw8ENogtHSiWRl8ZrDl3yAt1lR0eOkp
M2uccwvyb50+ID6hUTBvfLeNHYXWdgipl8KLCkfe5+igIkqFkjT0CBkbyNexutKv
D05/EwtNZ3bq/wbmq551HTGRpLU5PMalwVnLbqwcqtp2wFoyBZjduOjwKhbiAXb2
9nVwuzwraojKQp9KwSDpVz1JZVw5S3WGeh1kn0N8V30K75PcoTxSHMPz91UiTw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:31:46 2026 by rpki-client