This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134332e302f32342d3234203d3e203633363839.roa
File:                     3230322e3136302e3134332e302f32342d3234203d3e203633363839.roa (raw, json)
Hash identifier:          p15UFJ5gbxigm9w5yBCyY5hLYHnp/CBaedjOCUHIif4=
Subject key identifier:   B0:7C:A7:55:E5:28:B2:1F:52:E7:74:3A:54:54:9D:58:1C:E6:FE:D4
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       056F0A37E16D077513ED490B2644B2A07CA3B4AE
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134332e302f32342d3234203d3e203633363839.roa
Signing time:             Tue 20 Jan 2026 02:16:48 +0000
ROA not before:           Tue 20 Jan 2026 02:11:48 +0000
ROA not after:            Tue 19 Jan 2027 02:16:48 +0000
asID:                     63689
IP address blocks:        202.160.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6f:0a:37:e1:6d:07:75:13:ed:49:0b:26:44:b2:a0:7c:a3:b4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:48 2026 GMT
            Not After : Jan 19 02:16:48 2027 GMT
        Subject: CN=B07CA755E528B21F52E7743A54549D581CE6FED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:68:3f:43:aa:f5:ca:84:6a:2d:01:c2:5e:
                    a2:7d:27:d2:4e:f6:e0:1d:9a:fe:06:9f:81:b3:5e:
                    96:f7:43:e4:0d:d0:4f:41:17:69:3c:c5:ba:e4:bc:
                    0a:3c:b6:0d:05:83:de:c8:a0:06:2c:6e:02:32:7c:
                    c2:f8:34:4f:51:5f:19:06:14:0a:f0:25:42:60:63:
                    f3:05:f2:56:98:f4:b6:f3:9a:c8:3b:60:22:68:00:
                    59:d8:63:9d:8a:e1:e4:06:f5:b7:a6:43:ce:16:05:
                    0d:75:5d:bc:5e:2b:05:53:10:53:da:ed:9d:af:90:
                    57:4d:c2:55:3f:2b:a5:61:e3:fb:e9:7c:fa:d6:11:
                    ed:d0:ec:37:b6:08:b6:06:13:3f:b5:94:03:81:6a:
                    ee:68:7e:65:05:f0:0b:fa:0d:d3:83:24:bd:34:97:
                    b9:0d:a6:1c:ae:b1:78:7a:c3:08:87:7b:21:9f:e6:
                    e8:06:a5:64:91:79:f1:24:c3:ae:13:38:04:45:63:
                    17:5a:d6:8a:83:15:04:26:1b:96:06:25:68:81:69:
                    e8:ea:79:38:a9:70:26:d9:f8:38:50:35:6e:81:8f:
                    0a:fc:fc:a6:fb:b2:40:ab:8f:e4:9c:79:5d:ce:1a:
                    cc:94:8c:c5:8a:8f:9e:ae:18:04:39:c9:24:d8:66:
                    ae:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7C:A7:55:E5:28:B2:1F:52:E7:74:3A:54:54:9D:58:1C:E6:FE:D4
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3230322e3136302e3134332e302f32342d3234203d3e203633363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:6b:80:16:60:40:e0:18:92:e6:00:38:fc:b4:14:26:74:56:
         5a:7f:e8:e6:89:9e:2e:4c:bd:6f:10:ab:08:f2:3e:f0:fb:cd:
         c2:f4:2e:8e:19:f9:68:56:fc:a1:13:f3:a6:d4:de:a5:35:f9:
         e0:18:60:4c:c8:fd:32:57:ee:ad:a1:74:c8:00:84:e1:4f:de:
         61:fa:15:96:78:a9:ff:dc:b9:bf:4c:79:5b:fb:a2:34:74:d1:
         d0:ae:9d:2d:38:ba:84:d7:1c:dc:66:57:2f:03:a2:38:4b:a1:
         b4:63:2b:52:e1:45:de:5c:e2:b2:26:74:e4:2e:71:40:6e:2d:
         b8:4d:c6:10:a3:06:07:01:7a:e7:ef:53:94:49:a9:9e:fd:ac:
         5d:73:b6:d2:93:1d:b6:6d:1e:91:e7:1e:7a:0f:a0:14:45:52:
         2d:00:0d:78:bf:f3:39:0d:76:e5:96:5c:53:f2:5e:ec:9d:9a:
         40:9a:c1:a5:5c:6e:ba:9c:e8:07:f8:b5:82:0c:3f:da:ce:38:
         96:70:fd:b8:46:46:3a:c2:f6:b5:fd:e2:95:a9:aa:4a:92:8e:
         f5:16:82:86:cd:c2:20:19:64:1d:7b:db:99:e8:69:c7:0a:ed:
         38:84:4e:9f:31:ce:5f:1b:00:b2:94:63:b2:8d:27:7a:63:d8:
         25:f6:90:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:33:31 2026 by rpki-client