This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3230322e38392e3233322e302f32312d3231203d3e203539303637.roa
File:                     3230322e38392e3233322e302f32312d3231203d3e203539303637.roa (raw, json)
Hash identifier:          LxmwgqIyXKQ1LvD6HPrtkI+bgscVtAKEfia1kE5S16I=
Subject key identifier:   B3:61:CE:C4:E6:BA:7A:9A:05:8B:13:31:C9:80:CF:59:9E:B9:35:90
Certificate issuer:       /CN=4B9663C98FB267EE767D89354546CFB5F1950080
Certificate serial:       0BCDB850716B1B981EBBD390086BE9A628B50079
Authority key identifier: 4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3230322e38392e3233322e302f32312d3231203d3e203539303637.roa
Signing time:             Tue 20 Jan 2026 02:15:31 +0000
ROA not before:           Tue 20 Jan 2026 02:10:31 +0000
ROA not after:            Tue 19 Jan 2027 02:15:31 +0000
asID:                     59067
IP address blocks:        202.89.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:cd:b8:50:71:6b:1b:98:1e:bb:d3:90:08:6b:e9:a6:28:b5:00:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9663C98FB267EE767D89354546CFB5F1950080
        Validity
            Not Before: Jan 20 02:10:31 2026 GMT
            Not After : Jan 19 02:15:31 2027 GMT
        Subject: CN=B361CEC4E6BA7A9A058B1331C980CF599EB93590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:79:52:67:5f:42:0c:25:b6:a9:d3:5b:24:15:
                    ac:a2:c1:25:0e:b3:7e:57:7d:ef:6d:7d:98:d2:c2:
                    67:62:ca:32:f6:a1:31:1d:1d:51:7f:e6:3f:2e:cd:
                    76:bf:4a:61:ae:63:35:88:c9:67:2d:69:c4:02:55:
                    b5:af:35:b6:f6:a2:e9:8a:1b:32:01:bf:6a:9f:31:
                    e6:a6:c6:95:6b:ac:d7:f4:b7:69:6c:d8:6c:ee:2f:
                    2a:58:37:bb:12:87:ca:57:65:fd:c9:e8:91:7a:7e:
                    46:71:e3:c6:88:70:d4:66:57:28:04:3e:ab:15:f3:
                    38:13:cf:39:d4:6d:a8:58:a4:4e:f8:80:eb:a9:5c:
                    2b:e4:b5:be:e2:30:ad:10:79:d4:6e:80:ce:52:b4:
                    48:8c:4b:22:d1:9c:c0:9a:6c:90:cb:f8:42:fa:87:
                    d4:55:ff:8d:09:78:9f:14:4b:b1:59:48:67:5d:51:
                    75:de:eb:c0:64:4c:2c:f0:83:72:f8:d5:47:8e:7e:
                    e6:e3:ab:48:f9:76:36:63:0d:26:74:42:73:e3:1c:
                    63:de:8d:29:8d:0b:06:4e:1a:43:41:12:4c:3e:e5:
                    29:1e:dc:13:21:bb:fb:37:4e:b2:fa:df:6a:c1:b4:
                    99:29:e4:7c:f7:81:10:5d:7e:a6:95:ab:d5:78:ce:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:61:CE:C4:E6:BA:7A:9A:05:8B:13:31:C9:80:CF:59:9E:B9:35:90
            X509v3 Authority Key Identifier:
                keyid:4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3230322e38392e3233322e302f32312d3231203d3e203539303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.89.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:a1:8b:c9:60:56:9c:4c:24:47:bb:1b:c0:b3:9e:b3:3c:0a:
         ca:d3:e6:8c:04:64:32:53:f1:a0:43:ea:87:4f:49:c5:31:ac:
         47:4b:36:55:f4:6e:c8:7d:1f:a0:22:19:c1:0e:d5:6e:e4:fb:
         41:2a:64:aa:bf:ff:95:3e:9a:12:6e:c6:2f:89:33:74:f3:2f:
         d1:55:75:85:a5:1e:c0:d7:74:9e:5b:e8:05:cc:59:ad:0c:c7:
         cd:51:3a:93:66:7a:ed:ff:b1:e7:f1:c6:0d:bf:a9:46:4f:87:
         5e:9c:f6:6e:cd:d0:3b:39:bf:3f:50:db:83:e0:d4:1c:24:f7:
         c2:d3:1a:e1:58:da:c6:78:7b:91:13:74:f4:0b:e5:26:f4:5a:
         c1:8b:38:3c:46:28:4e:a6:30:07:79:9c:7d:2e:67:f1:1a:85:
         75:43:70:b8:d2:f3:d5:52:d9:44:ed:e5:54:10:2d:85:bd:da:
         f1:01:50:ee:63:fd:2f:9e:7c:f1:36:c0:40:2c:0f:dd:20:f6:
         08:0e:32:fa:ed:6c:96:b7:25:91:95:d4:9b:5d:75:79:eb:53:
         70:ca:8a:bd:be:6d:38:17:53:85:82:b2:eb:c6:6f:1b:bf:e5:
         38:05:8c:d8:53:96:9c:c9:64:9f:ff:21:8c:f5:cc:48:46:de:
         d4:1f:93:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:08:06 2026 by rpki-client