This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136322e302f32332d3234203d3e203538383334.roa
File:                     3230322e3136382e3136322e302f32332d3234203d3e203538383334.roa (raw, json)
Hash identifier:          /QTte4AelqFcE1Wl3E5NFedfpelAcu1lz1Z0+lWm8/c=
Subject key identifier:   20:EB:F4:55:D1:3C:AD:D9:05:71:8A:39:EF:DC:26:88:35:2E:46:36
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       51B22B1BB34490C23B70D989035C026C47ED02F5
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136322e302f32332d3234203d3e203538383334.roa
Signing time:             Tue 20 Jan 2026 02:13:05 +0000
ROA not before:           Tue 20 Jan 2026 02:08:05 +0000
ROA not after:            Tue 19 Jan 2027 02:13:05 +0000
asID:                     58834
IP address blocks:        202.168.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b2:2b:1b:b3:44:90:c2:3b:70:d9:89:03:5c:02:6c:47:ed:02:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Jan 20 02:08:05 2026 GMT
            Not After : Jan 19 02:13:05 2027 GMT
        Subject: CN=20EBF455D13CADD905718A39EFDC2688352E4636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b1:d2:41:94:1b:1e:6f:b9:fb:cd:37:05:a3:
                    3d:aa:e8:90:ad:5a:b9:ed:9f:b2:3b:e2:18:96:9b:
                    69:46:37:3f:6e:6f:b7:f0:bd:af:f2:94:72:20:73:
                    26:f1:58:4b:4c:21:57:38:db:d4:13:ae:4b:0d:f1:
                    28:3c:58:51:62:40:2e:eb:af:db:58:b4:4f:f6:1d:
                    27:f9:85:d8:fd:73:72:ce:80:63:75:4b:68:c3:94:
                    02:eb:0a:17:ee:dc:b6:17:60:bd:e6:f8:55:bc:20:
                    7c:03:38:34:9d:e2:79:db:bd:9e:fe:bc:f6:15:f1:
                    de:79:77:05:5d:3d:ed:16:1b:55:41:a3:0b:6c:a4:
                    39:05:55:5f:0d:47:0f:ac:a0:e4:5d:58:f5:7e:7c:
                    a7:4f:c2:cd:21:49:0b:2f:5c:1f:b7:85:90:b9:94:
                    b8:28:27:3f:d2:8e:e5:2c:bd:76:5b:60:89:af:9f:
                    d2:fb:f2:3a:d9:14:37:2f:d4:3a:ce:4d:ad:da:bb:
                    1d:56:a6:77:f8:14:86:4d:9b:28:93:38:86:86:66:
                    1c:ac:98:64:bb:6e:a8:c3:2e:4c:18:90:d4:56:c8:
                    6b:04:56:de:11:dc:a3:90:93:59:57:9a:d2:bc:34:
                    bf:72:45:73:73:ee:01:08:74:63:28:2e:98:a7:5a:
                    1e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EB:F4:55:D1:3C:AD:D9:05:71:8A:39:EF:DC:26:88:35:2E:46:36
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136322e302f32332d3234203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.168.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:3e:b6:01:ee:5b:89:65:3a:dd:d2:3b:6f:69:f4:fa:ec:0f:
         d7:7c:d3:50:45:50:cc:26:42:f0:a3:5a:69:cf:0f:0b:40:67:
         f2:56:77:5f:d1:39:e0:ca:5a:d1:90:74:e7:1f:61:65:e4:ba:
         5f:c0:74:e7:d8:aa:77:e5:91:e9:bc:76:8b:40:5f:96:34:ca:
         5a:59:3a:6d:7a:d4:c7:52:ed:13:45:03:83:b0:2e:3f:02:ea:
         27:41:49:28:69:36:d4:24:57:51:13:4e:e1:ad:13:7a:ac:9f:
         37:a6:0e:a9:c5:f5:3b:82:66:80:b6:bb:35:36:29:8d:0e:dd:
         c9:d9:27:d4:34:09:30:b9:3f:4a:e1:37:1a:c7:c9:19:a6:8c:
         7c:c8:04:b1:f0:5f:ee:15:b8:1c:a0:f8:b0:43:31:6a:d4:63:
         96:05:2f:f4:3c:83:d4:4a:37:38:a5:4b:8c:89:4b:90:2c:1d:
         92:75:59:42:37:99:52:5e:d5:2d:46:80:37:b4:8a:0d:ac:bc:
         69:19:a3:be:5d:96:a4:57:b9:50:6b:25:a1:39:a3:a9:de:4e:
         ed:df:87:25:ff:4d:53:68:3d:5f:0f:5e:d4:b0:7f:16:82:ab:
         2d:0c:1e:69:c5:94:53:74:8e:8a:72:55:81:da:3d:47:04:27:
         dd:6b:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:46 2026 by rpki-client