This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa
File:                     3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (raw, json)
Hash identifier:          SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=
Subject key identifier:   17:8B:A7:FC:F1:01:16:44:A4:8F:B3:2C:67:5A:E6:E4:24:89:89:FF
Certificate issuer:       /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7
Certificate serial:       73614916FA6674324EFA9481CE7EEBC5A5D384DB
Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa
Signing time:             Tue 20 Jan 2026 02:15:33 +0000
ROA not before:           Tue 20 Jan 2026 02:10:33 +0000
ROA not after:            Tue 19 Jan 2027 02:15:33 +0000
asID:                     135061
IP address blocks:        202.46.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:61:49:16:fa:66:74:32:4e:fa:94:81:ce:7e:eb:c5:a5:d3:84:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7
        Validity
            Not Before: Jan 20 02:10:33 2026 GMT
            Not After : Jan 19 02:15:33 2027 GMT
        Subject: CN=178BA7FCF1011644A48FB32C675AE6E4248989FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:7b:6f:80:39:b3:15:f6:c2:de:49:e6:3b:
                    54:2f:ba:77:ca:64:ce:6e:19:0e:1d:a5:30:37:db:
                    35:51:27:66:17:fd:c4:5e:7b:4c:2b:61:fc:61:a3:
                    ba:1f:f8:d4:88:c2:56:f7:0c:8b:11:50:cb:85:71:
                    94:bb:01:89:a8:d9:75:87:2e:fb:4c:31:41:6d:13:
                    06:d6:c3:19:da:1a:49:50:c4:9c:7b:30:f1:b4:74:
                    16:1a:85:70:7d:1f:06:a6:96:d3:b6:91:c9:9b:a0:
                    98:f0:4c:e0:3a:19:29:b5:28:1c:d1:c2:f7:f3:2b:
                    90:ce:d9:b7:70:74:23:59:47:c3:0d:5d:6b:e0:cf:
                    e4:c1:3c:da:51:02:7c:e9:f4:5e:26:86:db:34:9c:
                    32:23:a0:8d:10:56:dd:0b:67:4e:c2:a7:20:a5:96:
                    1e:3b:cb:a4:5c:f7:ea:37:a9:96:7b:73:b5:83:99:
                    8e:1e:71:65:c0:91:a9:59:9e:8b:b5:ce:56:53:59:
                    2d:25:4e:f4:59:dd:64:f5:78:e4:79:21:4f:85:8d:
                    e1:23:1b:d0:90:20:37:29:63:07:2f:b8:15:68:a2:
                    e8:71:a5:be:49:17:62:21:6b:cb:f0:86:09:5a:f0:
                    d9:86:ba:3c:74:15:45:4d:a6:e1:8b:13:26:c9:c0:
                    5f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8B:A7:FC:F1:01:16:44:A4:8F:B3:2C:67:5A:E6:E4:24:89:89:FF
            X509v3 Authority Key Identifier:
                keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.46.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:c1:52:45:2a:40:a9:66:ce:47:28:88:f6:00:af:47:56:80:
         f0:00:e9:44:9b:54:c2:af:32:65:8e:c8:ad:3d:46:9e:88:86:
         cd:c6:93:ae:f9:4d:18:8c:51:fa:ad:f3:71:87:d4:96:d7:65:
         e4:f1:70:77:6c:53:e1:4f:10:5d:32:86:7f:18:93:75:d0:23:
         fa:01:e0:ce:5a:25:df:30:ab:dd:2d:c8:e7:83:ab:e5:cf:cb:
         fb:07:3e:75:2b:27:fd:09:31:fc:8d:bd:47:84:e6:52:e1:94:
         10:88:eb:12:f3:49:55:b5:d8:d9:0a:38:8e:fd:6f:5d:5f:b4:
         3f:b4:08:ee:56:44:91:c4:e2:35:87:89:f2:c2:74:ab:1e:36:
         b7:7b:69:7c:f9:61:7f:c3:7e:5f:d5:72:40:6f:a6:b0:b2:83:
         9e:b0:1d:75:1c:8c:0e:83:ee:5c:3e:b7:0d:49:0a:87:5e:9d:
         1a:bb:e9:e7:01:43:c1:e8:ce:31:b9:07:b5:c8:6d:ba:5c:45:
         aa:1f:fe:c6:33:61:f2:f9:4e:b2:db:48:50:49:bd:b0:02:cf:
         6f:69:80:ab:fb:46:59:ee:22:02:e3:95:76:1b:b3:d2:7c:d6:
         ed:bc:56:20:1f:9f:7a:75:14:eb:fb:50:d2:39:91:e6:93:49:
         da:04:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:06:05 2026 by rpki-client