This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e33322e302f31392d3139203d3e203538383334.roa
File:                     3230332e3133322e33322e302f31392d3139203d3e203538383334.roa (raw, json)
Hash identifier:          EFqrl2o76YS/zPoKLVSJxzCaBTXZkfA0MTxj3Nd41wg=
Subject key identifier:   6F:97:7E:60:A2:6C:C1:FB:B8:D8:78:E3:4C:42:F1:CD:46:54:36:B7
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       081DC7082A49E2CC3E4109E08FFBB939857DE18A
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e33322e302f31392d3139203d3e203538383334.roa
Signing time:             Tue 20 Jan 2026 02:13:07 +0000
ROA not before:           Tue 20 Jan 2026 02:08:07 +0000
ROA not after:            Tue 19 Jan 2027 02:13:07 +0000
asID:                     58834
IP address blocks:        203.132.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1d:c7:08:2a:49:e2:cc:3e:41:09:e0:8f:fb:b9:39:85:7d:e1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Jan 20 02:08:07 2026 GMT
            Not After : Jan 19 02:13:07 2027 GMT
        Subject: CN=6F977E60A26CC1FBB8D878E34C42F1CD465436B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:34:20:6d:d8:6e:82:04:e1:93:37:13:9a:
                    65:4d:58:2c:06:c3:b6:0d:5d:ee:69:de:ab:39:27:
                    78:88:9e:32:4c:e5:af:29:d2:1e:df:9b:61:c3:e9:
                    bd:70:0d:47:ce:3f:b9:dc:e5:60:c4:2f:62:f4:32:
                    42:a5:91:aa:cb:ff:ee:f8:13:74:26:e9:81:ca:ec:
                    65:9b:e2:97:79:19:f2:ed:a5:01:62:56:96:e1:78:
                    e6:7d:99:a0:f6:96:87:5c:44:af:a2:4f:60:3a:b5:
                    0a:0e:d4:5f:95:e0:0c:10:c9:54:ea:47:6f:38:15:
                    2c:98:28:d6:96:d0:20:63:1d:a9:f0:52:02:44:76:
                    a0:21:ca:a9:f5:ec:45:c8:e9:ac:f9:f0:42:24:25:
                    4c:bf:72:25:01:e7:de:7e:5c:65:b7:c3:24:e6:28:
                    75:21:a8:20:89:07:61:b8:e1:99:c3:23:ae:d0:7a:
                    97:67:c0:c2:67:c8:2d:04:b1:57:4a:90:33:79:c6:
                    d9:5e:24:14:59:e8:62:3a:34:89:aa:97:5a:d8:7a:
                    dd:e8:99:33:ae:ef:8c:29:81:67:0e:78:78:24:a9:
                    e5:57:57:64:ba:2c:3e:5c:be:72:be:85:ad:03:7d:
                    4a:92:9b:a7:a9:83:39:90:9a:19:9f:74:c3:05:99:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:97:7E:60:A2:6C:C1:FB:B8:D8:78:E3:4C:42:F1:CD:46:54:36:B7
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e33322e302f31392d3139203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.132.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:29:5a:d4:db:0a:3e:0d:80:ab:72:73:4b:60:1d:5d:aa:a5:
         65:20:43:60:2d:8d:ad:1a:49:cc:18:5a:be:2c:fb:ed:59:52:
         d9:ba:c8:66:e7:45:60:0d:91:33:98:e0:12:f5:55:0a:24:60:
         eb:ae:f8:49:87:8f:b8:13:21:8d:2d:f1:d5:a2:9b:74:eb:4b:
         a8:df:d9:5a:82:26:57:5e:f7:74:21:1e:ce:d4:c5:47:bf:a8:
         ab:d4:8b:10:17:a6:55:07:b6:36:cf:cd:15:a4:dc:57:47:3b:
         a9:74:b7:ac:61:77:49:24:cc:47:8a:40:20:e9:fc:3d:48:e6:
         cb:13:47:4f:2d:d5:fd:89:72:69:ab:76:ef:78:b2:db:f2:48:
         3c:61:e6:74:c1:41:34:02:72:9c:3d:5d:e6:69:43:fb:a4:ca:
         a7:cf:6c:eb:be:d5:11:02:de:5d:01:01:d6:70:86:1a:fc:75:
         10:ea:03:e6:f3:aa:f8:19:54:1f:27:aa:b0:ba:5a:e7:76:65:
         fa:53:9b:d8:2d:ee:ac:d3:11:17:34:ea:9f:15:c1:cd:b8:50:
         06:60:fd:ae:88:c9:ab:19:96:5c:25:7d:36:02:4e:f5:a5:c6:
         f3:41:02:f3:cb:8a:4f:ec:c5:cd:f7:ea:b8:09:6c:af:f6:5b:
         6a:70:6e:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:50:11 2026 by rpki-client