This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e35362e302f32312d3231203d3e203538383334.roa
File:                     3230332e3133322e35362e302f32312d3231203d3e203538383334.roa (raw, json)
Hash identifier:          tf6UXCrbI9Gu08I+ORnzUVUxvnMHgINYylMnexsPs3E=
Subject key identifier:   33:A2:6D:9D:9A:79:F6:5D:5E:13:A1:E5:6E:C5:29:37:F3:3D:20:33
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       29E5012FEE8471F8AFE1E78A14EF60A37A11310A
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e35362e302f32312d3231203d3e203538383334.roa
Signing time:             Tue 20 Jan 2026 02:13:05 +0000
ROA not before:           Tue 20 Jan 2026 02:08:05 +0000
ROA not after:            Tue 19 Jan 2027 02:13:05 +0000
asID:                     58834
IP address blocks:        203.132.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e5:01:2f:ee:84:71:f8:af:e1:e7:8a:14:ef:60:a3:7a:11:31:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Jan 20 02:08:05 2026 GMT
            Not After : Jan 19 02:13:05 2027 GMT
        Subject: CN=33A26D9D9A79F65D5E13A1E56EC52937F33D2033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:f1:03:fe:c3:2f:62:eb:81:e6:80:9e:82:
                    b6:c3:78:cd:0d:b1:d6:21:e1:b6:15:ba:d9:61:90:
                    90:15:5e:9d:5b:06:61:af:d5:50:5e:75:2e:22:91:
                    a5:74:37:22:8c:68:36:0f:67:b8:d3:9d:fa:cf:61:
                    8b:ce:7e:07:57:7e:f8:3c:17:03:31:01:c9:12:5f:
                    7c:e3:08:3f:34:aa:a4:03:ee:70:46:68:0e:a4:b5:
                    80:41:f8:ac:a0:8c:a5:8f:09:d2:93:62:64:90:b5:
                    ef:ad:b7:f0:06:68:33:4d:2e:27:92:ee:78:19:4b:
                    74:ae:9e:bd:90:11:76:15:85:2e:a4:2f:b0:a8:3f:
                    3f:fd:95:38:ff:55:87:00:49:f0:02:6d:57:f8:6e:
                    9f:ec:bb:4b:cc:70:0f:2c:4a:b7:06:1f:2b:6f:f3:
                    38:23:3a:1f:1f:76:37:15:fc:c7:06:9d:dc:35:4b:
                    5e:31:d4:37:13:e4:c2:5c:a0:4a:b6:bc:b0:3a:7a:
                    b4:89:06:ad:1e:b7:49:0c:3c:ed:5e:81:ec:c1:65:
                    d9:b6:ff:52:ec:4b:b3:08:5c:db:4e:c3:12:2b:26:
                    4b:ee:d7:7f:0a:0c:81:c7:66:44:4e:75:68:89:b8:
                    30:6f:a3:72:f1:0b:86:2e:39:42:45:86:c0:ce:2d:
                    80:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A2:6D:9D:9A:79:F6:5D:5E:13:A1:E5:6E:C5:29:37:F3:3D:20:33
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e35362e302f32312d3231203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.132.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:c4:48:99:6a:34:cd:35:1e:a6:33:d1:dd:6c:bd:66:8f:ae:
         ef:ce:76:30:53:a3:ab:40:a5:a6:e6:05:7c:67:f5:29:ff:24:
         d6:a1:01:54:a9:97:c8:56:3d:70:c5:27:2d:3a:32:70:1a:8c:
         b9:a8:41:b5:fc:de:d7:ac:ce:2f:4d:23:b7:b0:81:1b:52:af:
         94:50:5b:3b:c3:ab:a7:cb:0b:7c:62:10:ce:14:f9:83:01:13:
         ab:19:88:a4:1f:71:a4:ff:02:55:b2:9a:48:40:0d:1d:a9:c9:
         87:93:9e:7e:2a:39:d7:0a:8f:f3:0c:57:87:e0:79:92:c4:c4:
         59:d2:92:72:83:58:dd:2e:88:08:cc:5f:95:f9:97:a6:f7:91:
         b1:1a:a9:95:4f:d2:c1:f2:d4:bf:e2:33:50:6b:53:93:50:a6:
         86:4a:d6:f4:9c:fc:22:ea:47:f6:d1:1b:ff:3a:86:07:38:26:
         02:0f:e1:21:2f:92:26:fe:bf:13:bd:73:38:f3:14:25:97:22:
         5c:24:61:2c:59:dc:a4:f7:0a:8d:66:d3:22:40:13:de:c5:21:
         f1:8d:81:91:b3:f5:19:e6:0a:98:ba:c6:29:d1:ea:ee:10:98:
         0b:49:c0:62:32:6c:5d:78:b8:ce:df:67:5a:ac:aa:47:69:31:
         11:c0:90:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:18:58 2026 by rpki-client