This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3139322e302f32302d3230203d3e203538383334.roa
File:                     3131392e322e3139322e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier:          E/nYbGjsM/ERpG2eOWYYm+FcrdcnyqGy0H7qbNyYDMY=
Subject key identifier:   43:3B:80:FD:13:36:66:09:01:47:44:FF:60:87:E2:03:A8:92:9C:24
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       311711227FF81CF351866A5E2C417B90CEB5B94A
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3139322e302f32302d3230203d3e203538383334.roa
Signing time:             Tue 20 Jan 2026 02:13:07 +0000
ROA not before:           Tue 20 Jan 2026 02:08:07 +0000
ROA not after:            Tue 19 Jan 2027 02:13:07 +0000
asID:                     58834
IP address blocks:        119.2.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:17:11:22:7f:f8:1c:f3:51:86:6a:5e:2c:41:7b:90:ce:b5:b9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Jan 20 02:08:07 2026 GMT
            Not After : Jan 19 02:13:07 2027 GMT
        Subject: CN=433B80FD13366609014744FF6087E203A8929C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:02:be:94:a1:4a:10:d6:ff:31:df:7e:e3:
                    56:4a:8e:da:f6:39:2a:d1:0a:f5:ea:58:65:21:32:
                    62:86:dc:a3:70:c3:10:65:70:4d:4b:50:ab:d0:10:
                    e3:60:d2:a4:e8:c6:eb:bd:88:6a:47:9d:fc:47:20:
                    ec:76:82:f2:ff:fd:a2:ab:ce:13:b9:2d:38:0a:83:
                    51:54:cc:3f:ce:d8:e8:3d:54:8c:d6:fe:bd:9d:64:
                    66:e3:61:cc:ca:ce:a7:d2:f4:99:0f:38:65:83:e7:
                    51:04:d3:dc:18:36:68:7e:ac:eb:ac:66:56:52:78:
                    e3:7c:41:74:6d:70:31:65:e0:ff:d4:f3:8a:9f:1b:
                    24:92:02:f7:66:27:94:34:e5:24:6b:76:11:da:56:
                    2e:03:f2:f3:ad:47:a8:1a:6c:e2:8a:fe:c1:28:fa:
                    dd:0a:74:ad:fc:64:74:ec:97:6a:89:d5:f2:48:d9:
                    56:6d:36:55:fe:bd:ab:30:73:1f:53:b5:4f:5f:ff:
                    ef:aa:f9:2c:66:e6:79:42:6a:3f:94:8f:14:09:d8:
                    f3:0b:d2:b8:28:4c:02:a6:b5:2a:f3:bc:50:c2:a4:
                    c1:3f:c2:00:5e:66:aa:4a:ff:a3:21:1d:ae:cf:8b:
                    6d:1b:71:e6:5d:de:c8:a4:5b:00:58:2c:28:1c:bc:
                    ae:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3B:80:FD:13:36:66:09:01:47:44:FF:60:87:E2:03:A8:92:9C:24
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3139322e302f32302d3230203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.2.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:ed:8f:02:33:e1:d2:f1:a2:29:fe:68:a9:71:54:4f:45:d1:
         0b:d9:a2:f0:86:8e:80:7f:14:a1:f3:e2:89:5e:6e:b7:25:1a:
         35:aa:81:b9:56:b0:9c:3a:22:bb:94:47:79:b2:70:c5:55:c3:
         43:94:49:44:e7:c9:7e:cd:41:7c:d1:7c:53:4d:3c:f1:be:1b:
         93:08:f7:d0:29:61:f0:95:38:7d:8c:c5:fb:93:e9:e7:4b:d3:
         cb:21:91:e8:70:c7:45:09:44:f3:93:f5:c1:6f:06:1a:56:fd:
         68:5c:8e:96:3d:73:bd:a6:bb:9d:e0:40:46:d1:2a:11:3f:d8:
         4a:3a:c7:2e:00:db:7d:6d:2b:4b:93:3a:18:9c:1c:22:53:61:
         cb:b8:bd:6d:07:be:65:09:f2:5f:21:41:ef:eb:e5:7e:d2:16:
         9e:d2:90:13:0a:6b:8d:55:69:30:c9:fb:8b:96:a3:d5:0a:02:
         9a:bb:7c:32:a6:49:ff:7b:6c:75:46:08:23:49:50:6a:b0:ca:
         f3:e1:fd:51:65:59:c5:6e:92:4d:a8:3f:aa:7a:d4:25:13:83:
         cd:7f:a0:b5:76:06:0a:39:0f:cc:b0:ff:ea:f3:02:87:f3:87:
         87:63:f9:f6:a4:23:d4:47:51:78:f5:48:10:92:df:6c:ce:d4:
         90:e3:9f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:08 2026 by rpki-client