This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134312e302f32342d3234203d3e203539303333.roa
File:                     3230322e3136302e3134312e302f32342d3234203d3e203539303333.roa (raw, json)
Hash identifier:          StaK6SSeiprmWoau8OYObABPFlZse2KFADia3kz1qt8=
Subject key identifier:   74:C5:03:77:50:09:2F:3A:1D:5D:AF:83:03:D9:7F:D5:68:9E:21:F5
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       46E55838BB0EE105A80BF5BB46382E6DCE1B7B85
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134312e302f32342d3234203d3e203539303333.roa
Signing time:             Tue 20 Jan 2026 02:16:45 +0000
ROA not before:           Tue 20 Jan 2026 02:11:45 +0000
ROA not after:            Tue 19 Jan 2027 02:16:45 +0000
asID:                     59033
IP address blocks:        202.160.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e5:58:38:bb:0e:e1:05:a8:0b:f5:bb:46:38:2e:6d:ce:1b:7b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:45 2026 GMT
            Not After : Jan 19 02:16:45 2027 GMT
        Subject: CN=74C5037750092F3A1D5DAF8303D97FD5689E21F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:7c:fd:bc:71:dc:17:5f:26:3d:31:39:9a:
                    c6:90:0f:9d:1a:63:49:60:c5:4d:7d:75:69:55:8b:
                    c2:94:46:e4:6b:79:74:f7:df:5c:67:2b:57:4e:ea:
                    23:d0:30:cb:33:0a:2c:13:db:70:67:40:40:7c:84:
                    7b:c8:96:8b:25:c5:5f:5c:d3:b8:d7:24:7c:0c:67:
                    bf:35:14:a0:f3:22:d1:12:6b:fb:89:5c:11:68:6c:
                    bb:ef:93:1a:ef:18:12:28:f5:df:4c:32:30:05:6f:
                    a5:58:11:5d:40:5e:af:f2:2f:11:4b:23:18:de:6a:
                    2e:1b:8e:3a:67:fd:eb:44:48:8d:75:ee:fd:96:a4:
                    f0:58:41:4e:3d:3a:54:00:53:70:14:39:f2:88:a9:
                    fe:45:37:f3:5d:2f:01:4e:78:63:50:f1:d3:d2:f4:
                    eb:22:f6:ef:ea:bc:20:e3:c9:a5:f1:51:ae:34:75:
                    2f:62:76:cd:e3:ed:0b:db:4d:b7:b6:03:1d:9a:6e:
                    dc:14:49:77:72:f6:94:24:ac:be:63:95:13:b5:32:
                    ae:71:4b:03:4e:1e:ab:47:d2:8c:a9:a3:9b:f2:72:
                    37:b0:13:10:a1:d6:cc:be:44:33:10:18:86:4f:8d:
                    0d:b4:52:47:b1:a1:12:4a:a3:df:83:db:ad:36:f4:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C5:03:77:50:09:2F:3A:1D:5D:AF:83:03:D9:7F:D5:68:9E:21:F5
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134312e302f32342d3234203d3e203539303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:9d:41:22:14:4e:ce:38:c3:80:a2:f9:ec:2e:8a:84:75:08:
         57:4b:20:e6:67:cd:77:9d:d8:63:1f:8c:4a:83:20:5d:42:6e:
         5f:fd:06:07:b9:47:75:5e:50:73:5c:04:4b:d1:b5:52:c0:65:
         ae:5a:3e:ef:8b:e0:a9:c0:76:83:5d:63:ca:19:9b:37:61:fd:
         11:0c:e6:bc:1d:67:33:50:62:d6:51:4e:25:6a:89:74:bb:f9:
         44:a2:f6:36:55:63:8d:fc:4f:b0:3a:37:50:40:5e:b0:d0:72:
         b0:1a:34:c2:7f:54:f8:33:6c:e6:2a:ec:0a:d3:20:59:e6:f3:
         42:66:92:e8:02:2c:95:31:af:96:be:c3:75:5d:f4:90:26:91:
         76:eb:e1:ff:e2:a9:5b:42:2d:70:3f:9f:65:ae:3a:de:a9:24:
         78:26:87:4c:a8:0d:a1:ae:af:0b:0a:85:7c:57:71:7c:f8:de:
         de:c4:1a:18:ee:29:19:7f:7d:a4:4a:cd:48:56:85:bf:ae:6a:
         48:11:ac:00:ce:21:82:d6:ba:2a:a4:70:e2:97:04:5e:98:be:
         99:b8:3e:11:d6:d8:84:9b:b4:69:6e:a7:3c:16:ec:8a:a5:b9:
         89:a7:0e:88:9b:82:94:92:e9:0c:08:27:da:fd:e7:58:65:24:
         45:37:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:13 2026 by rpki-client