This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e31302e302f32342d3234203d3e20313332383833.roa
File:                     3230332e38332e31302e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier:          FKZpZHJPFv7MN6aC3zTHDQHiGVZHy4K5UA40BFhhR10=
Subject key identifier:   5B:05:3F:C9:BF:F6:07:BD:C8:82:B9:19:5A:9C:ED:DF:9F:41:46:E4
Certificate issuer:       /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial:       16275656D5D73B8B5A250D3BBB589099BA33579E
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e31302e302f32342d3234203d3e20313332383833.roa
Signing time:             Tue 20 Jan 2026 02:16:48 +0000
ROA not before:           Tue 20 Jan 2026 02:11:48 +0000
ROA not after:            Tue 19 Jan 2027 02:16:48 +0000
asID:                     132883
IP address blocks:        203.83.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:27:56:56:d5:d7:3b:8b:5a:25:0d:3b:bb:58:90:99:ba:33:57:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
        Validity
            Not Before: Jan 20 02:11:48 2026 GMT
            Not After : Jan 19 02:16:48 2027 GMT
        Subject: CN=5B053FC9BFF607BDC882B9195A9CEDDF9F4146E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d4:11:c8:b3:ec:58:18:06:03:7f:2a:71:91:
                    00:a1:e3:7b:6a:f6:9f:3c:7e:6c:99:49:03:f2:00:
                    6c:2b:5a:d8:51:af:31:f6:d6:23:b8:c5:76:3b:4e:
                    cd:32:96:de:56:bd:7d:4a:c4:d6:41:3a:ea:e2:48:
                    f6:34:90:2f:d8:88:8a:7d:4b:96:e0:b4:ac:42:c0:
                    08:0c:64:ad:8f:bb:a2:1c:c3:6f:b6:cd:7d:1e:6e:
                    8c:4b:a8:a7:be:b5:95:95:4c:18:b6:d4:31:ed:0a:
                    5c:e9:68:ad:7f:85:03:37:85:dc:c5:3b:f3:c9:37:
                    87:c5:e5:a6:b5:96:7d:33:12:3e:f1:02:4d:69:f9:
                    05:09:4a:4b:c1:2f:cb:8b:4a:c0:75:f3:8b:f0:0d:
                    24:7c:8c:7a:e9:8b:56:04:20:e4:3a:18:53:ab:7d:
                    f4:9e:98:3f:4d:2c:51:43:45:1c:8c:8d:d0:88:2c:
                    d1:44:d3:0e:5b:8f:4b:2c:22:1a:f6:eb:ac:b4:32:
                    66:72:71:88:3c:82:db:c0:b6:2e:cb:bf:f9:c7:68:
                    3f:9d:da:67:2b:40:2a:bf:8a:ca:c7:1a:b9:43:37:
                    7f:0b:a9:fc:7e:c4:1a:05:53:e8:f3:ef:b0:36:87:
                    1f:3d:6e:9b:fd:a4:72:91:68:e0:28:8e:f8:87:4a:
                    35:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:05:3F:C9:BF:F6:07:BD:C8:82:B9:19:5A:9C:ED:DF:9F:41:46:E4
            X509v3 Authority Key Identifier:
                keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e31302e302f32342d3234203d3e20313332383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.83.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:13:d7:73:1e:11:12:5e:a9:7c:d8:f5:f4:23:ff:b3:15:95:
         cb:a1:e4:40:14:1c:aa:42:09:24:cc:af:36:5d:05:cf:32:27:
         16:f8:98:1e:85:ad:c1:c1:42:c9:54:b6:89:b5:0d:ad:e0:1b:
         2a:4a:78:18:d0:9a:f0:71:77:0b:25:6d:eb:d3:06:4b:1c:19:
         78:28:82:7f:dd:ac:a9:a4:9e:aa:e6:55:be:a8:be:84:fe:99:
         fb:bc:05:67:d3:13:4d:7f:06:c4:51:85:1e:9f:71:a6:a4:82:
         6d:cc:7f:79:fb:7f:cd:03:68:9d:2e:09:34:15:39:1b:fc:e1:
         b8:3a:c3:62:4b:56:d0:dc:c8:6d:b0:ee:ff:ec:50:c3:a9:13:
         39:82:bb:fa:32:80:1b:a3:74:85:cf:89:76:8b:62:26:db:02:
         c6:18:74:18:5c:73:1c:3b:8d:82:ea:2d:7b:e5:b5:d4:9c:79:
         e6:be:5f:db:bb:52:4e:35:af:9b:01:e9:6e:be:88:19:33:51:
         4f:86:88:e4:5e:ec:61:45:00:ea:a0:ae:c6:9f:09:d1:6b:11:
         93:f0:12:89:d0:fb:95:9a:6c:38:b1:2b:7a:23:91:97:4c:e2:
         64:66:dd:63:7b:1a:6c:58:d9:bb:a9:5e:29:dd:79:94:17:ac:
         f0:e8:45:ca
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUFidWVtXXO4taJQ07u1iQmbozV54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4
ODJFNzhBMDAeFw0yNjAxMjAwMjExNDhaFw0yNzAxMTkwMjE2NDhaMDMxMTAvBgNV
BAMTKDVCMDUzRkM5QkZGNjA3QkRDODgyQjkxOTVBOUNFRERGOUY0MTQ2RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61BHIs+xYGAYDfypxkQCh43tq
9p88fmyZSQPyAGwrWthRrzH21iO4xXY7Ts0ylt5WvX1KxNZBOuriSPY0kC/YiIp9
S5bgtKxCwAgMZK2Pu6Icw2+2zX0eboxLqKe+tZWVTBi21DHtClzpaK1/hQM3hdzF
O/PJN4fF5aa1ln0zEj7xAk1p+QUJSkvBL8uLSsB184vwDSR8jHrpi1YEIOQ6GFOr
ffSemD9NLFFDRRyMjdCILNFE0w5bj0ssIhr266y0MmZycYg8gtvAti7Lv/nHaD+d
2mcrQCq/isrHGrlDN38Lqfx+xBoFU+jz77A2hx89bpv9pHKRaOAojviHSjVxAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUWwU/yb/2B73IgrkZWpzt359BRuQwHwYDVR0j
BBgwFoAUcn9kX8j+FY6ydV1/kUpDJYgueKAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODI4ODAwMi8wLzcyN0Y2NDVGQzhGRTE1OEVCMjc1NUQ3RjkxNEE0
MzI1ODgyRTc4QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4ODJFNzhBMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODI4ODAwMi8wLzMyMzAzMzJlMzgz
MzJlMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjM4MzgzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMtTCjANBgkqhkiG9w0BAQsFAAOCAQEARhPXcx4REl6pfNj19CP/sxWV
y6HkQBQcqkIJJMyvNl0FzzInFviYHoWtwcFCyVS2ibUNreAbKkp4GNCa8HF3CyVt
69MGSxwZeCiCf92sqaSequZVvqi+hP6Z+7wFZ9MTTX8GxFGFHp9xpqSCbcx/eft/
zQNonS4JNBU5G/zhuDrDYktW0NzIbbDu/+xQw6kTOYK7+jKAG6N0hc+JdotiJtsC
xhh0GFxzHDuNguote+W11Jx55r5f27tSTjWvmwHpbr6IGTNRT4aI5F7sYUUA6qCu
xp8J0WsRk/ASidD7lZpsOLEreiORl0ziZGbdY3sabFjZu6leKd15lBes8OhFyg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:26 2026 by rpki-client