This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32332d3233203d3e203633363839.roa
File:                     3230322e3136302e3134302e302f32332d3233203d3e203633363839.roa (raw, json)
Hash identifier:          xy7xooXB+PVidNPWLl7qUWndqTspUgFVS6wN9vWLbZs=
Subject key identifier:   C0:83:8C:91:79:95:7D:E1:28:58:93:BD:63:DD:CF:F0:C4:C5:46:21
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       575CCE63684E88029533FA28186F8E75869649C8
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32332d3233203d3e203633363839.roa
Signing time:             Tue 20 Jan 2026 02:16:46 +0000
ROA not before:           Tue 20 Jan 2026 02:11:46 +0000
ROA not after:            Tue 19 Jan 2027 02:16:46 +0000
asID:                     63689
IP address blocks:        202.160.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5c:ce:63:68:4e:88:02:95:33:fa:28:18:6f:8e:75:86:96:49:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:46 2026 GMT
            Not After : Jan 19 02:16:46 2027 GMT
        Subject: CN=C0838C9179957DE1285893BD63DDCFF0C4C54621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a6:59:d1:fb:8d:1d:ee:13:7d:40:86:c0:7f:
                    a6:71:7d:9f:d8:21:33:e2:96:81:2a:95:21:6b:d0:
                    bb:dd:3a:53:dc:f3:b0:88:b9:4f:f7:a1:6d:a4:47:
                    a2:11:ee:a3:9b:5e:83:2e:f3:9b:dd:12:9d:81:47:
                    59:93:9f:70:5f:97:09:2a:6f:ae:12:6e:3f:9d:4c:
                    af:a2:5c:69:c8:f3:cf:7f:1d:95:90:c9:d2:49:3b:
                    84:03:c2:28:d7:44:f7:51:aa:9f:ce:49:a7:10:a0:
                    76:98:0e:ab:fd:ca:69:7b:79:17:eb:a5:94:29:fa:
                    ff:ed:43:b8:16:c7:87:df:3c:99:c7:78:6e:3d:46:
                    4c:cc:91:d5:bd:d1:d6:ff:f5:9b:f8:77:5c:c1:fd:
                    43:ee:46:80:83:8f:63:05:01:82:77:7a:8f:6d:75:
                    87:ef:c4:8c:da:28:2d:87:34:8f:8f:9b:d0:13:00:
                    34:20:73:96:57:e4:ec:96:4a:85:20:c8:93:26:b1:
                    06:8a:6a:77:76:c3:06:3a:95:95:43:fb:4b:ba:30:
                    c5:fa:d3:de:15:9f:56:92:7e:3b:4b:88:d1:a3:a5:
                    f6:09:ed:49:a9:85:f8:39:f1:42:87:53:07:72:ae:
                    93:e8:5e:57:53:5b:68:63:63:ed:2b:56:28:ae:d7:
                    ff:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:83:8C:91:79:95:7D:E1:28:58:93:BD:63:DD:CF:F0:C4:C5:46:21
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134302e302f32332d3233203d3e203633363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:70:38:f7:d9:18:aa:bb:9e:41:bc:cf:01:ad:e7:69:6c:06:
         cb:d6:ba:1a:7a:cb:43:dd:d7:5b:39:ca:73:f6:0c:aa:0b:8a:
         2e:cc:ad:60:ba:55:74:57:ec:54:6e:5b:0b:a1:5e:c2:f6:9f:
         6b:19:7a:16:21:ae:e0:04:8e:35:85:fc:49:59:2a:fb:ea:44:
         14:75:11:9f:d3:e5:6b:97:5d:77:65:a6:b3:f9:cf:b2:b9:fc:
         4e:f0:ce:ef:c9:14:0d:8a:9b:a7:3a:8e:7f:09:14:67:ff:71:
         f6:85:e7:65:79:64:9a:d9:8d:c1:f6:ab:08:30:a6:9a:aa:fb:
         00:c4:cf:20:f2:a1:f2:e3:3c:68:ee:50:16:d4:3a:7b:e3:b3:
         15:ab:9f:4c:c2:f4:68:71:98:08:66:08:7f:03:66:1e:16:58:
         b9:d5:5c:31:6e:f6:f5:8b:7d:7b:44:cf:e7:83:5e:1f:6a:94:
         12:86:2d:1e:82:d1:4e:bc:25:b7:81:2c:ed:7a:dd:c1:70:a0:
         ba:c0:89:b9:0b:61:fc:d6:ed:e6:fa:53:db:c0:23:4f:79:b9:
         96:d0:63:fb:f5:61:9a:a9:8f:61:c6:c5:23:7f:3f:74:c5:51:
         74:f4:d5:f7:92:0e:c4:9a:f7:fb:0a:68:ee:09:d6:cb:31:89:
         44:4e:6b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:41 2026 by rpki-client