This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971877891/0/3136332e3232382e302e302f31362d3136203d3e203538353933.roa
File:                     3136332e3232382e302e302f31362d3136203d3e203538353933.roa (raw, json)
Hash identifier:          McQVkD6zpkjnYd8Gth5kQsmIhEdOBEHwxMGRARJU1cE=
Subject key identifier:   D1:CC:BD:B2:15:73:59:3E:1E:9E:1F:2B:FB:99:E9:9D:2E:13:36:EB
Certificate issuer:       /CN=7505D5D0FC8DB66FC48DA4A64839077551466B62
Certificate serial:       0132BF91EAFA578BFC19B9B9515C0F45D2F6C008
Authority key identifier: 75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/3136332e3232382e302e302f31362d3136203d3e203538353933.roa
Signing time:             Tue 20 Jan 2026 02:08:22 +0000
ROA not before:           Tue 20 Jan 2026 02:03:22 +0000
ROA not after:            Tue 19 Jan 2027 02:08:22 +0000
asID:                     58593
IP address blocks:        163.228.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:32:bf:91:ea:fa:57:8b:fc:19:b9:b9:51:5c:0f:45:d2:f6:c0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7505D5D0FC8DB66FC48DA4A64839077551466B62
        Validity
            Not Before: Jan 20 02:03:22 2026 GMT
            Not After : Jan 19 02:08:22 2027 GMT
        Subject: CN=D1CCBDB21573593E1E9E1F2BFB99E99D2E1336EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:41:d9:de:10:4c:3a:75:eb:ae:74:15:b1:
                    d8:b0:49:c8:94:05:ec:e5:fb:99:21:b0:23:a2:da:
                    3f:58:d2:70:0f:50:1b:b7:82:bf:1d:05:e7:d0:2a:
                    d2:6e:6b:67:ba:25:dc:01:c9:de:aa:71:5a:9a:7e:
                    72:9f:ce:cd:c5:d7:10:f6:31:b0:2e:d8:96:a7:db:
                    0a:62:10:ba:ff:3b:56:71:82:37:fe:00:ed:8e:35:
                    fb:57:77:f3:4b:66:1c:1c:68:f7:e7:85:01:3a:6f:
                    b3:0e:ab:39:9a:27:ad:75:0a:02:15:91:12:26:db:
                    8b:f3:1c:89:6b:64:13:2c:5c:12:4c:77:9d:88:e1:
                    ec:15:ab:25:5b:64:c1:0d:05:28:72:89:bc:20:a4:
                    de:f6:c1:cd:15:69:e0:00:ff:5b:cb:4c:75:9d:25:
                    fb:8f:b9:fe:fa:fd:16:2c:71:67:82:98:c4:7d:a7:
                    94:94:66:2f:fe:a7:17:b7:d5:85:6f:5e:f0:61:40:
                    e2:9a:a9:be:48:da:61:15:1b:e8:2a:41:23:9b:12:
                    96:80:60:f2:d4:d0:86:5f:72:e6:75:b8:46:d2:bd:
                    02:b3:d7:fe:c7:57:11:a1:48:65:a4:aa:2c:fb:2c:
                    20:e7:69:15:97:49:ed:7b:a6:90:32:5b:93:61:1a:
                    45:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CC:BD:B2:15:73:59:3E:1E:9E:1F:2B:FB:99:E9:9D:2E:13:36:EB
            X509v3 Authority Key Identifier:
                keyid:75:05:D5:D0:FC:8D:B6:6F:C4:8D:A4:A6:48:39:07:75:51:46:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/7505D5D0FC8DB66FC48DA4A64839077551466B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7505D5D0FC8DB66FC48DA4A64839077551466B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/0/3136332e3232382e302e302f31362d3136203d3e203538353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.228.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         04:a5:30:9c:78:b9:b0:ff:da:1f:86:45:fb:3f:0e:9b:3c:c4:
         9b:38:45:68:b4:91:98:ea:bf:8b:49:f5:82:15:f2:a9:83:87:
         56:ac:26:3b:17:6d:6a:cc:05:91:dd:43:5a:b0:15:99:40:8d:
         f5:b9:36:b2:07:e0:50:fa:56:bc:20:43:bf:60:55:ec:3c:30:
         d6:92:16:b8:35:aa:91:ba:e1:02:ba:af:1e:59:66:82:86:7d:
         c1:b7:f1:53:c8:fe:b0:03:87:f0:a5:07:3c:40:6b:36:98:5e:
         2c:0a:f2:d9:2e:f6:cb:fb:52:c9:35:a5:a3:56:8e:78:c2:e2:
         e5:53:09:a4:fb:83:7e:89:24:72:d0:e0:23:7f:68:a9:c7:f9:
         88:1e:cc:39:62:e2:f9:c4:93:cf:a9:52:ee:55:3c:2d:a9:b7:
         13:96:39:48:f8:c9:d3:02:69:77:6b:57:20:5d:2b:a4:dc:25:
         ba:3c:29:dd:a8:57:43:f3:11:ad:c8:28:b1:28:5c:74:d5:36:
         a2:30:29:ce:6f:71:e4:0c:dc:72:80:3a:4a:9a:d6:61:d6:8d:
         78:23:49:ed:4e:3e:7c:6b:87:b5:f9:6a:14:ae:b8:cd:8f:c5:
         27:80:7f:40:a7:aa:f4:7a:14:b6:1c:c5:e2:2c:32:fa:ce:6b:
         a2:46:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:55:48 2026 by rpki-client