This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136382e302f32312d3231203d3e203538383334.roa
File:                     3230322e3136382e3136382e302f32312d3231203d3e203538383334.roa (raw, json)
Hash identifier:          VeKWwLx3Rc6IwJhRckSYobJLIp8lW4Ryn/iwEYHSkQo=
Subject key identifier:   0A:E6:96:CC:6A:CD:60:CE:4A:FA:D9:D1:79:04:BF:7D:E8:00:FD:FC
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       7415221338B1C0933FCCCCD3FC2645F0BC1385E2
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136382e302f32312d3231203d3e203538383334.roa
Signing time:             Tue 20 Jan 2026 02:13:06 +0000
ROA not before:           Tue 20 Jan 2026 02:08:06 +0000
ROA not after:            Tue 19 Jan 2027 02:13:06 +0000
asID:                     58834
IP address blocks:        202.168.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:15:22:13:38:b1:c0:93:3f:cc:cc:d3:fc:26:45:f0:bc:13:85:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Jan 20 02:08:06 2026 GMT
            Not After : Jan 19 02:13:06 2027 GMT
        Subject: CN=0AE696CC6ACD60CE4AFAD9D17904BF7DE800FDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8a:03:bf:41:e6:a4:3e:f3:92:d5:56:c7:59:
                    58:27:2d:f8:6b:cb:dd:a8:22:ec:b8:8c:58:11:1c:
                    cc:06:2c:18:11:5d:b1:15:52:ef:77:06:87:6e:c7:
                    cf:8d:ca:25:bf:81:b0:e7:91:08:ff:c0:b5:d4:cc:
                    c8:1f:90:08:ad:b8:4c:a6:c0:36:7b:ee:ac:d6:73:
                    ab:96:01:0f:a4:c3:ca:5e:8d:92:ab:29:f4:fd:87:
                    a7:73:84:8e:1d:0f:b4:f3:45:08:38:37:0f:af:e3:
                    5e:3a:4c:92:32:ac:67:1c:cf:43:f8:f5:b5:b9:27:
                    2d:c4:08:b4:2c:07:83:c9:6c:87:4d:7a:04:c4:40:
                    d9:e6:0c:82:db:a0:44:c1:10:a6:8b:ae:d2:ed:1f:
                    b9:08:d3:cd:ef:9b:fc:1f:e3:7f:e2:70:fc:57:ec:
                    fc:14:7b:53:f5:0f:d1:bf:c6:8e:98:95:52:76:fb:
                    fd:0a:ec:eb:82:43:ac:a9:66:be:e4:d1:58:ad:2e:
                    b6:bc:e0:3b:1f:6b:fd:55:56:7f:49:9e:f7:c7:84:
                    a8:07:fb:9c:16:1b:a7:e6:72:d2:f2:f8:6c:64:2e:
                    48:55:0d:04:a3:0d:f0:21:d6:a6:5d:f3:c8:91:09:
                    26:13:2f:ca:fa:74:00:95:8a:69:4d:68:6f:55:f5:
                    df:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E6:96:CC:6A:CD:60:CE:4A:FA:D9:D1:79:04:BF:7D:E8:00:FD:FC
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136382e302f32312d3231203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.168.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:24:41:1c:45:58:d9:f3:ab:6a:3b:05:eb:2c:1f:89:99:9f:
         3a:68:ae:61:09:86:79:fb:d1:df:c8:eb:06:fe:3c:19:75:c4:
         33:18:f8:fa:2e:6f:70:80:60:e1:6e:2d:16:f4:b6:e5:c4:d4:
         59:21:c1:96:9d:6b:4c:ea:94:4e:eb:1f:3f:d2:72:fe:6e:26:
         2f:d7:5e:1e:af:ed:09:3c:54:e8:ee:f0:62:f5:1b:33:92:6a:
         9f:24:50:7b:e1:56:2b:1c:88:c8:d6:37:ab:ec:41:1c:af:c4:
         a7:5e:63:65:7d:be:1e:64:48:90:04:73:b1:b0:eb:c2:18:01:
         35:9e:fc:c9:0f:f4:5c:5f:a9:e5:87:89:29:4d:46:aa:15:a4:
         af:ff:b1:12:fd:fc:9b:ba:ba:5f:95:d8:61:6e:a7:b1:eb:2d:
         9d:1c:ba:a8:fb:66:54:2a:50:1c:b6:41:57:c3:06:f3:65:39:
         48:46:c5:d0:06:9b:11:a9:88:00:f2:41:86:43:bd:44:e2:de:
         ba:5e:4f:02:9a:84:6a:c7:56:15:d7:44:d1:e3:5e:3d:96:66:
         bf:79:c8:9e:0e:c9:a5:41:67:a9:32:f7:a9:4d:a4:e9:cd:c4:
         3e:cf:b9:8b:b9:44:ef:34:ef:c0:1e:6c:6d:7d:9c:6b:cb:ff:
         2e:7c:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:02:17 2026 by rpki-client