This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e34382e302f32322d3332203d3e20313337363930.roa
File:                     3230322e3138392e34382e302f32322d3332203d3e20313337363930.roa (raw, json)
Hash identifier:          GLXCMV8i6iC0hMUqv1DgfKc7/30lWg0has6n1lO1ySU=
Subject key identifier:   2D:35:8F:DF:AA:59:47:CA:80:1D:7A:22:93:21:E3:EB:22:14:E3:A6
Certificate issuer:       /CN=8E80FA24E5DFF3073621050FF18487025A2A5198
Certificate serial:       5A99F917FF770FFBE0D44849D053DEFA219AD87F
Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e34382e302f32322d3332203d3e20313337363930.roa
Signing time:             Tue 20 Jan 2026 02:20:16 +0000
ROA not before:           Tue 20 Jan 2026 02:15:16 +0000
ROA not after:            Tue 19 Jan 2027 02:20:16 +0000
asID:                     137690
IP address blocks:        202.189.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 13:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:99:f9:17:ff:77:0f:fb:e0:d4:48:49:d0:53:de:fa:21:9a:d8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198
        Validity
            Not Before: Jan 20 02:15:16 2026 GMT
            Not After : Jan 19 02:20:16 2027 GMT
        Subject: CN=2D358FDFAA5947CA801D7A229321E3EB2214E3A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:66:ae:a3:11:c2:57:2e:c2:00:53:c8:f3:
                    61:48:ec:b9:b1:7d:30:7c:c5:fb:f1:65:8b:d5:b6:
                    7c:a0:f2:b7:87:71:aa:51:35:01:76:2c:11:6f:8d:
                    be:8e:47:20:f4:8b:01:d1:f8:7d:bb:e2:fe:79:39:
                    1c:70:e2:64:1f:30:4d:fe:6b:8e:30:3a:c5:f0:2d:
                    86:f2:9f:12:dd:20:58:38:d8:fe:4b:a2:24:3e:cb:
                    3e:14:66:3e:56:be:2e:7d:f8:58:34:67:b8:dc:80:
                    11:07:c2:64:60:97:77:99:d9:43:7a:d4:00:4f:89:
                    70:ab:7d:8b:1b:b2:96:3e:3e:42:61:03:40:86:44:
                    41:3d:76:59:9c:d1:20:be:ec:8e:84:c6:28:be:50:
                    0a:ce:a9:53:10:e8:c2:9e:ac:33:df:43:f0:ce:8f:
                    c1:24:0e:38:ed:16:7e:23:0c:8a:3e:18:b0:d9:38:
                    8d:e5:4f:ef:68:9c:9a:97:68:1d:fc:dc:e9:92:f7:
                    f4:60:a4:64:28:a9:cb:6c:1e:51:59:f0:28:a3:d0:
                    01:23:c2:73:46:90:e4:c8:db:a2:5d:69:55:94:65:
                    1c:ce:00:a7:83:a3:09:d6:27:1d:01:f6:6c:c6:f5:
                    73:f1:66:d9:eb:54:aa:f7:63:4b:d2:f7:ae:c2:f4:
                    2f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:35:8F:DF:AA:59:47:CA:80:1D:7A:22:93:21:E3:EB:22:14:E3:A6
            X509v3 Authority Key Identifier:
                keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e34382e302f32322d3332203d3e20313337363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.189.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:52:e2:1a:18:c8:4f:ce:32:88:58:5d:da:78:f3:2c:4f:86:
         ca:e1:d5:0c:e0:79:74:9d:4e:df:1e:e1:9a:7c:08:4c:8d:79:
         e9:69:9e:e6:1d:8a:a2:90:f4:ad:d8:bf:eb:0d:3b:05:f8:db:
         17:27:07:39:bb:0e:44:25:be:e5:9c:ed:90:f5:8c:a6:9d:ba:
         92:8b:ed:cb:b4:3d:0e:33:d5:48:a3:8a:a2:76:7f:40:c1:73:
         a3:fa:f3:4a:e9:a6:30:33:c1:99:e6:6d:c0:63:ae:34:a1:42:
         d1:e2:af:91:99:30:4e:03:c3:bb:9d:1f:0d:de:dd:c2:4a:7d:
         85:41:ad:5b:a3:7c:86:05:09:5c:e6:70:8f:fc:12:e0:0a:04:
         bd:2e:52:98:b3:56:0b:c6:ce:74:8b:d8:17:27:3b:15:1f:d7:
         d2:55:cd:da:a6:80:6c:a2:9b:ee:70:4b:71:01:79:4b:42:6f:
         90:98:c5:71:22:9b:24:33:aa:b2:d6:37:60:ee:0f:b0:e3:11:
         31:32:eb:ee:bc:49:b5:10:65:e8:f0:0e:30:29:6c:a5:4f:10:
         66:64:f1:f3:44:e8:80:4d:e0:45:3a:fb:0d:7a:f5:60:f8:a3:
         05:30:1b:fe:6d:e8:d9:c3:a5:30:52:b1:05:39:37:9a:4b:34:
         73:a4:08:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:02:42 2026 by rpki-client