This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134322e302f32342d3234203d3e203633363839.roa
File:                     3230322e3136302e3134322e302f32342d3234203d3e203633363839.roa (raw, json)
Hash identifier:          HA1qXHHQFPMT+9x707++mryGzipSzKQO/phTslWciiU=
Subject key identifier:   9C:B2:68:87:A0:24:A6:EF:34:69:21:44:6B:83:4A:29:0C:3E:6F:74
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       5538C187422817A3DEECD89BFCA75AFDC656E037
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134322e302f32342d3234203d3e203633363839.roa
Signing time:             Tue 20 Jan 2026 02:16:43 +0000
ROA not before:           Tue 20 Jan 2026 02:11:43 +0000
ROA not after:            Tue 19 Jan 2027 02:16:43 +0000
asID:                     63689
IP address blocks:        202.160.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:38:c1:87:42:28:17:a3:de:ec:d8:9b:fc:a7:5a:fd:c6:56:e0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:43 2026 GMT
            Not After : Jan 19 02:16:43 2027 GMT
        Subject: CN=9CB26887A024A6EF346921446B834A290C3E6F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9b:e5:2c:e2:c0:c9:d7:79:96:5c:96:88:79:
                    c2:ec:39:d9:28:6f:ed:18:a4:86:8b:e9:42:f6:5a:
                    f8:56:73:0c:32:b8:cc:90:cf:b3:1f:3f:61:a7:7e:
                    01:d4:7c:8c:fe:2b:dd:3d:93:d7:83:7d:fa:85:ee:
                    de:f3:25:ff:f9:db:b1:6e:a7:39:4f:e1:fd:c0:f6:
                    94:f6:61:ee:fb:72:18:ca:b9:ec:60:9a:dd:e1:4f:
                    79:73:94:9b:9d:ae:6c:84:bd:49:8e:17:46:1c:d8:
                    71:77:f3:4f:93:a5:7e:c3:0e:a7:b9:bc:bb:35:14:
                    0f:7e:1f:1f:71:a9:79:ee:82:18:71:72:99:1f:08:
                    8b:81:b5:28:89:b3:01:8c:4a:35:74:6d:e4:58:05:
                    d4:11:bd:be:71:be:84:5a:68:0b:7b:75:3e:65:3e:
                    29:25:0a:55:fa:b6:de:c2:a2:fc:d9:ce:b9:72:67:
                    4c:05:05:5c:96:1c:84:58:5c:07:11:38:02:f5:1f:
                    ca:88:95:c9:1c:30:4e:b7:ae:3a:17:39:e4:84:f1:
                    65:30:49:20:00:e5:12:b7:bd:9d:3a:a3:92:34:70:
                    86:90:72:d2:e4:aa:b2:2e:46:7e:6d:41:36:54:65:
                    9d:3f:a0:9e:53:cf:8b:c6:bc:60:c4:c1:b8:e6:85:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B2:68:87:A0:24:A6:EF:34:69:21:44:6B:83:4A:29:0C:3E:6F:74
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134322e302f32342d3234203d3e203633363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:ad:97:f7:d1:53:75:1e:3e:f7:bc:43:cc:8a:ea:d3:c5:86:
         59:71:e2:5b:d7:e4:67:4d:5c:6c:16:f7:8c:59:56:72:63:9b:
         bc:f4:a2:3d:5a:ee:99:4a:55:10:9f:f3:43:c9:7d:6c:32:dc:
         dc:47:3d:cb:b5:1e:8b:cf:19:f1:25:32:27:89:28:52:0f:7c:
         7a:7a:f2:fb:f1:bd:52:70:b9:a0:3c:4a:fa:ca:3d:8d:b3:27:
         5e:65:ae:21:b7:0d:b0:66:ce:d0:0b:e6:ae:dd:8d:f7:eb:0e:
         8c:f2:7d:07:28:0b:6a:10:9d:e2:ea:d7:23:af:9d:4e:58:0d:
         51:c9:d2:ef:ef:d7:64:0c:2c:91:d9:f0:92:cd:7f:59:5c:1f:
         28:2d:dd:8b:f5:c8:fd:7f:ba:90:ca:3f:d6:ad:09:52:5a:e7:
         55:0a:dc:77:ff:92:9c:47:e7:a0:c7:5c:9f:cd:36:2e:1f:bc:
         7a:02:e1:d3:ac:63:3c:9d:cd:7f:06:b6:09:59:62:d8:10:68:
         0a:85:55:98:22:89:8f:7c:d3:07:d1:64:37:86:fe:a0:28:e4:
         b1:64:c8:b2:35:20:c5:b2:74:6d:d1:98:aa:ec:94:bc:80:26:
         12:42:68:eb:ec:9c:5b:09:82:a4:5a:fd:66:4a:85:f7:e4:f5:
         79:19:6b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:00 2026 by rpki-client