This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e31312e302f32342d3234203d3e20313332383833.roa
File:                     3230332e38332e31312e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier:          OyoHEG8o3gNVgxiZc7NpaX+LGXqgquCj5WWVQUqvufA=
Subject key identifier:   64:20:82:38:D8:35:FD:9D:C8:71:64:10:B1:F9:AB:DC:FB:85:BA:99
Certificate issuer:       /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial:       3D4776F1494165ABE01F1F9A18FCB9A7FA4CB7CE
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e31312e302f32342d3234203d3e20313332383833.roa
Signing time:             Tue 20 Jan 2026 02:16:49 +0000
ROA not before:           Tue 20 Jan 2026 02:11:49 +0000
ROA not after:            Tue 19 Jan 2027 02:16:49 +0000
asID:                     132883
IP address blocks:        203.83.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:47:76:f1:49:41:65:ab:e0:1f:1f:9a:18:fc:b9:a7:fa:4c:b7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
        Validity
            Not Before: Jan 20 02:11:49 2026 GMT
            Not After : Jan 19 02:16:49 2027 GMT
        Subject: CN=64208238D835FD9DC8716410B1F9ABDCFB85BA99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6a:3b:b4:33:70:30:08:b3:34:a4:41:5c:de:
                    14:ee:f9:9f:48:99:30:3f:33:3b:f2:1e:0c:6c:49:
                    4c:cd:10:1e:29:ff:d4:1f:6d:1b:a3:20:0d:99:2b:
                    54:61:6b:ef:fb:ef:dd:63:19:79:15:6f:7c:e7:d7:
                    f7:31:dc:53:77:8d:57:70:bb:3c:20:3b:98:8c:69:
                    66:5d:b2:08:3f:91:13:1d:c7:2f:7e:65:53:f9:ce:
                    1a:eb:f0:9b:e6:fe:75:5e:83:ca:a5:b9:1f:30:52:
                    f8:31:d4:b1:7d:1c:42:04:7b:1a:45:21:57:08:b0:
                    e8:b1:af:9c:07:94:cf:d6:fd:d7:45:72:27:ca:38:
                    e5:0c:bb:65:12:57:59:1c:f9:09:b0:9e:3f:39:91:
                    85:8f:a4:e4:d5:13:76:c4:fe:07:94:07:40:10:96:
                    57:bb:02:7c:83:84:5f:fc:6a:fb:23:88:dc:f4:5f:
                    7a:49:22:ea:bf:f7:71:39:35:c7:27:6a:c8:5d:4c:
                    b8:64:45:82:2f:74:81:91:c1:a9:7a:72:02:1b:31:
                    74:6d:96:b7:7f:f5:8c:78:a6:82:26:fb:ba:61:0d:
                    94:d5:b1:2b:91:a6:1d:8f:18:dd:ce:e6:53:2b:21:
                    2d:9c:40:46:34:9e:9f:48:2e:1b:c7:b6:8d:73:e2:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:20:82:38:D8:35:FD:9D:C8:71:64:10:B1:F9:AB:DC:FB:85:BA:99
            X509v3 Authority Key Identifier:
                keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e31312e302f32342d3234203d3e20313332383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.83.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:46:7c:6b:53:ef:47:b8:39:72:50:a8:c9:a4:4b:e6:f5:48:
         04:4e:7a:6a:f1:27:63:22:35:f0:ed:1a:f8:d6:be:9a:4a:b7:
         8f:41:d1:95:fa:62:e5:fc:fc:86:e5:d3:db:51:43:be:a7:de:
         76:01:d1:06:95:98:0a:f4:17:6b:e1:77:29:b6:bb:c9:d7:45:
         a1:28:b7:c4:1d:e1:2d:d9:e7:c5:db:6a:01:3f:29:10:fe:91:
         49:e8:3b:77:86:29:1e:1a:59:e6:42:e8:ca:3d:10:c4:0a:bf:
         28:01:c8:02:97:b1:cd:db:02:a5:cb:c1:29:a7:07:64:b8:89:
         85:bd:5c:e4:6e:e0:1a:29:0b:77:83:ea:75:1a:12:7a:e0:d0:
         0a:49:52:51:e1:2a:99:24:51:fe:4c:20:b4:af:75:7d:8b:47:
         90:49:56:00:00:fb:a4:ba:c6:a5:7e:d7:ea:f1:f6:02:d5:5e:
         ce:72:1a:4a:c3:c8:76:cf:a5:b3:f7:db:c3:c5:a5:ef:de:a9:
         f2:00:c4:af:32:79:d0:d5:37:9a:c2:17:5d:b9:df:9a:43:d2:
         97:35:f4:06:9a:41:f5:cb:be:7a:8f:f0:c4:2a:be:4e:b0:f1:
         47:64:fa:ce:82:d8:a6:c2:18:90:c6:07:9f:f2:cf:77:7c:e4:
         8e:b9:87:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:27 2026 by rpki-client