This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134322e302f32332d3233203d3e203633363839.roa
File:                     3230322e3136302e3134322e302f32332d3233203d3e203633363839.roa (raw, json)
Hash identifier:          FjT9wlmRvV7FRP4ISqfC1z6eMGQ44p+Gr6NJM3JM69c=
Subject key identifier:   EE:BD:81:CD:F2:00:68:5D:20:67:B0:02:A0:A3:03:A7:ED:03:3A:AB
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       37550C816B5C45DC4B83D31618DE31F52144BB0D
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134322e302f32332d3233203d3e203633363839.roa
Signing time:             Tue 20 Jan 2026 02:16:47 +0000
ROA not before:           Tue 20 Jan 2026 02:11:47 +0000
ROA not after:            Tue 19 Jan 2027 02:16:47 +0000
asID:                     63689
IP address blocks:        202.160.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:55:0c:81:6b:5c:45:dc:4b:83:d3:16:18:de:31:f5:21:44:bb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:47 2026 GMT
            Not After : Jan 19 02:16:47 2027 GMT
        Subject: CN=EEBD81CDF200685D2067B002A0A303A7ED033AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:ef:64:43:6e:44:1f:eb:47:53:b8:2b:4d:
                    90:dd:fb:24:43:43:d2:07:dd:e4:5c:6f:52:16:68:
                    8b:25:65:85:9c:c0:a7:a9:82:23:36:96:c5:9b:c2:
                    7c:da:70:1a:24:75:5e:cc:a8:b9:24:55:b3:ff:25:
                    c7:91:bd:96:21:e3:80:9c:57:b9:d5:4e:c9:a9:95:
                    a7:27:b2:cf:18:09:8a:60:cc:bd:49:bf:2d:f8:bd:
                    1e:97:35:af:64:9e:be:47:89:8e:b5:42:a9:ed:57:
                    1a:44:d7:5c:a5:1a:cd:92:ca:ed:13:0d:cb:d6:03:
                    18:56:18:9c:68:7e:5e:bf:2e:e6:6b:91:40:25:97:
                    11:05:9f:06:19:3c:24:41:4b:d7:c6:2d:fc:45:7c:
                    5d:76:92:7b:41:97:17:f9:83:ee:ee:4a:ab:63:20:
                    09:7e:ae:d6:cb:d7:e7:c1:da:3e:3d:d4:fe:e0:82:
                    e1:8b:f9:43:65:30:a9:8c:00:57:c0:32:7d:ad:71:
                    99:6f:d9:34:51:19:53:84:26:89:f9:24:61:e6:59:
                    69:50:cb:a1:4e:e2:59:72:0f:8d:cb:40:2d:de:33:
                    29:5d:e2:a9:e3:4a:db:3d:02:2a:cb:eb:77:87:80:
                    f9:14:20:86:92:8b:aa:65:4a:ed:1a:92:8d:9f:37:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BD:81:CD:F2:00:68:5D:20:67:B0:02:A0:A3:03:A7:ED:03:3A:AB
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134322e302f32332d3233203d3e203633363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:28:03:c2:70:8f:30:27:0e:dd:25:42:b7:62:ac:29:0a:ac:
         7a:8c:4b:fe:83:56:18:f7:ef:fc:54:04:9f:97:34:7a:58:be:
         e1:25:6a:48:7b:84:2b:3d:d9:d4:18:f3:6b:b6:e3:12:14:f5:
         46:94:53:29:c5:fb:6f:4e:a4:48:88:bb:95:49:12:20:3e:4f:
         89:53:90:5d:7f:55:76:6a:c4:2c:78:5c:29:70:38:b7:eb:1e:
         35:e5:a0:0c:c6:eb:91:75:61:ae:7f:b4:0d:b4:2e:0f:7d:f5:
         92:8a:e8:5d:4f:2a:bf:fc:23:ac:c3:b3:08:c1:2d:11:85:6c:
         37:12:10:00:b4:6c:de:40:84:a4:13:37:a7:c2:f2:66:cf:10:
         88:eb:ad:98:92:7a:5a:02:45:db:d2:7b:51:a8:4c:64:72:30:
         d4:75:b3:0c:05:d6:67:04:10:75:e0:18:5e:6d:f4:3f:32:71:
         a0:ad:a3:6d:52:c0:09:d9:a4:9d:31:fb:0b:1e:70:b2:6b:34:
         e7:ba:06:2d:ec:c3:74:ac:e5:c2:65:1b:b9:5d:d9:23:d8:73:
         4a:dd:e7:50:9c:d7:89:a3:13:2a:79:bd:80:02:33:70:4c:83:
         3a:ec:6b:a3:50:79:48:cb:a6:8f:bc:1e:d1:60:85:1b:1d:73:
         42:ec:04:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:42 2026 by rpki-client