This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577596930/0/3136332e35332e34372e302f32342d3234203d3e203633363033.roa
File:                     3136332e35332e34372e302f32342d3234203d3e203633363033.roa (raw, json)
Hash identifier:          Hxl8gNH8HGcPW0AIzRUHMHmAqEopI8mJHP8Oyz77B9k=
Subject key identifier:   91:BC:5F:A0:CB:81:71:98:94:35:8D:9F:D9:07:75:FC:43:B3:3F:F7
Certificate issuer:       /CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Certificate serial:       673DE1FBE7CD88CD28F387D6F94EAADE70A033B5
Authority key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/3136332e35332e34372e302f32342d3234203d3e203633363033.roa
Signing time:             Tue 20 Jan 2026 02:21:39 +0000
ROA not before:           Tue 20 Jan 2026 02:16:39 +0000
ROA not after:            Tue 19 Jan 2027 02:21:39 +0000
asID:                     63603
IP address blocks:        163.53.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3d:e1:fb:e7:cd:88:cd:28:f3:87:d6:f9:4e:aa:de:70:a0:33:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B75163A575523EE408D2A2F59F8DD509D80F164
        Validity
            Not Before: Jan 20 02:16:39 2026 GMT
            Not After : Jan 19 02:21:39 2027 GMT
        Subject: CN=91BC5FA0CB81719894358D9FD90775FC43B33FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:1c:7f:ed:99:e6:29:70:56:b1:55:de:af:
                    82:df:30:0c:c7:c1:87:e1:d3:43:72:8d:c2:af:a6:
                    77:48:20:0a:43:0a:66:12:9d:2a:c7:ad:ad:39:b4:
                    62:c3:05:43:1a:af:bb:e4:7c:33:2a:5b:7e:6e:c9:
                    b6:e8:aa:df:0e:04:94:63:59:df:b5:5b:af:39:18:
                    94:ad:f4:80:2b:d6:1e:ef:fc:72:73:b9:14:ce:64:
                    6c:1d:7d:fa:bc:c6:9a:95:30:ff:8a:64:7a:37:55:
                    8c:bd:d7:aa:f9:86:9d:44:a9:22:e5:71:0f:be:7d:
                    34:82:db:12:85:e6:15:05:1f:60:46:de:94:2f:ad:
                    a2:b4:b4:11:ed:d8:07:46:6b:2e:c9:28:28:37:c8:
                    6c:22:37:54:cc:c2:e7:66:2e:fc:f7:d6:28:b7:a2:
                    c4:24:b9:91:c8:45:ed:a0:2f:80:67:98:d6:a2:b1:
                    b3:d7:d9:76:ad:d2:89:1b:e0:4d:0f:35:26:39:c0:
                    7d:3e:cd:d4:89:2e:6a:c2:24:55:10:e8:ba:56:c3:
                    2a:21:9a:3d:18:9f:09:42:9a:7c:aa:fe:3a:27:66:
                    be:57:0f:63:27:c9:ff:74:6a:36:0f:a5:7a:12:c3:
                    67:38:6d:e1:75:08:da:4a:3a:72:3a:b0:76:67:ec:
                    0e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BC:5F:A0:CB:81:71:98:94:35:8D:9F:D9:07:75:FC:43:B3:3F:F7
            X509v3 Authority Key Identifier:
                keyid:8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/3136332e35332e34372e302f32342d3234203d3e203633363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:1d:80:80:be:d3:24:84:22:83:93:76:42:33:7d:b9:f2:9b:
         33:dd:6a:ac:c9:f0:e4:72:9b:03:3d:79:58:bc:b5:0c:20:f0:
         5f:c2:1b:81:4f:75:e7:be:85:55:1b:61:b2:ff:69:0b:12:28:
         20:0b:6d:71:c0:5c:46:25:10:88:9a:08:19:39:0e:d3:a8:61:
         38:77:6d:90:bf:0b:85:16:3b:95:ae:f9:67:85:9c:a6:6c:ec:
         1a:97:b9:5a:19:c4:c6:d0:18:03:9a:40:b2:ba:be:db:4c:af:
         ae:50:6a:90:fc:a9:64:57:0a:5d:8d:e3:9b:81:e8:01:69:1f:
         ad:14:9a:10:72:79:ce:a6:72:d8:6e:dc:f4:4a:6c:70:25:02:
         c8:e4:16:61:9f:1b:53:93:24:94:b3:16:45:ad:fc:87:7e:74:
         82:58:e3:ea:f6:ce:97:1b:a0:33:57:c5:42:04:90:be:ba:06:
         ca:26:ac:27:ee:4e:09:f3:42:61:1c:3b:b5:fc:65:e9:bd:c8:
         ef:20:15:eb:0d:d4:6e:3b:7f:2d:70:ed:21:49:13:9d:78:c5:
         bb:6a:2e:c2:11:a6:8c:a0:18:5b:a0:9c:2a:31:ea:66:8b:3a:
         41:0c:99:38:ae:48:e1:c8:11:b2:df:17:68:f1:a7:db:35:fb:
         e4:1a:08:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:18:58 2026 by rpki-client