This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3137362e302f32312d3231203d3e203538383334.roa
File:                     3230322e3136382e3137362e302f32312d3231203d3e203538383334.roa (raw, json)
Hash identifier:          VWECjG7ngy+i2GK9MLgKUQHb+gbBtN7Oswu3+csbu0w=
Subject key identifier:   AE:F0:95:39:6F:D9:4D:37:11:B3:4F:6F:97:6B:1E:3C:3D:F2:E3:F7
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       74848AB8FC5FDDD78766C687DD2EB4A913C92153
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3137362e302f32312d3231203d3e203538383334.roa
Signing time:             Tue 20 Jan 2026 02:13:07 +0000
ROA not before:           Tue 20 Jan 2026 02:08:07 +0000
ROA not after:            Tue 19 Jan 2027 02:13:07 +0000
asID:                     58834
IP address blocks:        202.168.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:84:8a:b8:fc:5f:dd:d7:87:66:c6:87:dd:2e:b4:a9:13:c9:21:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Jan 20 02:08:07 2026 GMT
            Not After : Jan 19 02:13:07 2027 GMT
        Subject: CN=AEF095396FD94D3711B34F6F976B1E3C3DF2E3F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:9d:e5:c6:be:0b:f0:25:39:9f:ac:d7:9b:
                    df:51:12:55:fd:8c:c6:35:db:e0:7d:14:a9:95:4f:
                    e3:f0:56:4a:5a:c0:e2:9f:d4:fe:c9:e7:ed:df:35:
                    50:a5:cb:9c:92:10:09:79:90:27:de:a7:f9:34:40:
                    68:d4:95:3e:62:9e:77:d9:4c:c6:be:f6:0a:7d:e0:
                    96:9c:36:60:a3:a4:24:2d:b5:8b:cb:d3:b1:dd:64:
                    13:e7:08:81:6a:0c:c5:c2:22:f9:bd:f4:8b:72:22:
                    79:ed:c7:e0:ea:9d:76:ae:a8:8c:b2:55:9f:ab:2e:
                    89:8d:6f:27:e5:e6:91:66:f7:3f:14:23:be:5c:ed:
                    7d:24:8e:55:0c:37:5b:cb:52:8e:f2:ca:dc:40:08:
                    32:eb:e6:20:a1:b0:29:41:6b:b2:0c:ac:35:13:6f:
                    73:95:2e:6c:37:4e:ed:0f:cf:b2:b9:81:a3:53:37:
                    7c:10:93:41:d7:ce:14:73:99:24:d3:54:fa:03:17:
                    1d:b1:3c:de:7f:50:e7:0d:e6:75:1a:21:56:e8:1e:
                    3e:93:1c:f1:49:2a:d0:44:b1:4c:4b:c0:eb:31:06:
                    9c:72:8c:5c:4b:94:0b:d7:40:2a:70:dd:1e:60:82:
                    c3:ff:42:20:0c:7e:84:bc:c3:44:36:a4:ca:dc:f0:
                    17:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F0:95:39:6F:D9:4D:37:11:B3:4F:6F:97:6B:1E:3C:3D:F2:E3:F7
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3137362e302f32312d3231203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.168.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:cf:44:f7:f8:a1:b9:a2:46:c5:00:23:4b:0f:c8:8d:e2:5e:
         57:fa:0e:fb:9c:f4:11:1b:e1:3f:e9:5e:e9:b2:a6:3f:ef:4c:
         ff:0f:6a:2e:db:80:27:e5:fd:a1:a9:00:be:f4:5a:a4:a7:d5:
         9d:c9:4e:cf:f5:05:1e:b5:ff:0d:ef:c5:cf:3a:d0:35:8a:80:
         3b:8c:ed:ec:6d:63:ab:0b:93:70:8c:02:19:fc:8b:71:02:dd:
         85:2f:5a:97:42:89:92:0d:19:8e:48:3d:02:8f:d7:ec:27:d3:
         66:26:97:29:1b:e3:8f:ae:8f:70:d2:d2:dc:1a:cb:97:5a:ab:
         36:38:43:e3:4d:9c:82:f5:fd:0a:8d:43:56:d6:a8:99:20:cf:
         1d:f6:8f:ef:d8:c6:10:a0:4d:2c:4f:85:9c:63:a8:2a:de:be:
         81:88:55:17:c9:f7:d8:a5:c2:f7:fc:09:1f:43:c4:55:ee:7f:
         ce:21:05:88:68:42:f2:01:12:31:36:0e:56:f7:c9:60:68:d7:
         86:79:de:50:7e:36:b3:01:87:d7:7e:6d:af:a4:9d:30:e9:52:
         2b:88:ca:b5:a8:30:52:71:82:de:5d:19:41:37:9b:ad:8b:1f:
         fa:7c:22:54:be:65:50:15:d3:77:60:cb:86:ce:d1:d4:1d:7c:
         7d:79:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:02:09 2026 by rpki-client