This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3137372e302f32342d3234203d3e203538383334.roa
File:                     3230322e3136382e3137372e302f32342d3234203d3e203538383334.roa (raw, json)
Hash identifier:          YWaAUz0DDA1m4egMup6uid/hdXy9CI87e/rD3Vwu2eU=
Subject key identifier:   50:FA:A2:89:7B:79:BB:2B:66:30:F3:DA:4C:8A:6F:C1:0D:57:E0:A1
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       307BA85FE98F7852599989757EEACFF5BB7FF265
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3137372e302f32342d3234203d3e203538383334.roa
Signing time:             Tue 20 Jan 2026 02:13:05 +0000
ROA not before:           Tue 20 Jan 2026 02:08:05 +0000
ROA not after:            Tue 19 Jan 2027 02:13:05 +0000
asID:                     58834
IP address blocks:        202.168.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7b:a8:5f:e9:8f:78:52:59:99:89:75:7e:ea:cf:f5:bb:7f:f2:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Jan 20 02:08:05 2026 GMT
            Not After : Jan 19 02:13:05 2027 GMT
        Subject: CN=50FAA2897B79BB2B6630F3DA4C8A6FC10D57E0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:da:d3:6a:95:b2:62:f0:22:a7:8e:f8:ab:
                    39:71:e2:2a:5b:4a:9a:d7:2b:cc:8f:39:7b:67:80:
                    f0:ab:23:a2:6b:66:ec:3f:a8:4d:eb:41:d6:9d:80:
                    ea:0e:0b:81:70:08:8d:d7:78:93:60:3a:3f:53:fd:
                    80:af:57:30:3e:1f:92:fb:fc:91:9a:0c:ca:e6:cd:
                    1c:21:43:fe:2b:20:da:7d:3e:e8:fd:85:f6:3d:ef:
                    ab:b6:00:86:e6:14:10:c7:f2:34:31:be:f2:16:f2:
                    91:23:52:c1:2a:5e:f7:73:e1:e7:05:f8:ab:73:95:
                    8b:c4:12:19:33:50:8a:c5:9d:5d:0e:90:dc:ed:17:
                    b1:29:ea:5d:da:66:28:bf:01:b6:06:64:e0:e4:d5:
                    7b:91:f4:eb:46:1d:af:67:8f:4f:69:28:45:8d:38:
                    69:97:4f:68:89:20:16:6b:9d:39:b2:5f:44:3b:78:
                    bd:e1:d7:3b:87:5f:01:1f:00:5e:c0:ca:69:3d:27:
                    e3:e8:80:9a:c6:fe:fa:cb:40:80:2c:53:61:24:f7:
                    71:39:6e:ea:3c:99:25:76:7f:20:d4:63:6f:67:4e:
                    9a:39:99:46:bc:66:47:06:6d:a4:6c:d5:2b:60:14:
                    7b:7c:18:0a:43:60:0b:ec:86:5b:d7:62:1b:94:06:
                    ce:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FA:A2:89:7B:79:BB:2B:66:30:F3:DA:4C:8A:6F:C1:0D:57:E0:A1
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3137372e302f32342d3234203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.168.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:ec:13:71:17:4e:c7:7e:b2:0a:c8:af:05:27:da:7b:33:70:
         a5:90:d6:0a:cc:6f:d8:46:6e:3a:1d:02:8c:1d:f5:d2:d1:43:
         dc:15:f1:0a:9e:66:dc:a6:37:e1:10:75:55:23:98:59:81:83:
         47:c3:61:5c:22:96:ed:20:f2:a3:c1:67:a5:dc:92:e5:1f:6b:
         b6:43:95:7b:6f:63:fb:35:ce:70:bc:01:84:25:e2:3a:e7:b5:
         b5:16:99:c4:56:f9:c9:21:82:76:46:7a:9e:bf:6c:7e:34:0a:
         cd:19:d2:e2:39:63:44:7f:25:c5:05:a6:90:fa:d5:49:4e:fb:
         0e:a4:2a:a5:c7:ec:d8:43:c3:72:38:eb:09:8e:09:b9:bf:2a:
         d9:b2:9f:03:58:a1:58:fa:21:e9:f8:cd:c7:7d:71:cf:6c:8c:
         86:f4:f5:d9:1e:f1:43:23:df:ff:71:5f:4c:69:78:97:da:95:
         1f:a1:26:86:b2:6e:2b:c0:90:d7:f3:a6:7b:c2:36:42:ca:23:
         0c:5f:e6:3e:28:a1:2c:c2:47:4a:e9:f8:90:e8:0b:8d:a3:8d:
         cc:5c:8d:11:09:72:f2:6d:d6:80:03:8a:fa:52:70:78:c4:f2:
         1a:46:3e:5f:a6:89:e0:16:89:29:91:7b:28:f5:f3:ff:b0:1c:
         f5:a9:4f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:02:07 2026 by rpki-client