This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e392e302f32342d3234203d3e20313332383833.roa
File:                     3230332e38332e392e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier:          dHvh7EAR3ukAg4TNNo+1CAfQbE6hwuaVlWKsy7btzzw=
Subject key identifier:   CE:6E:E8:EC:CE:BA:D4:7B:BD:20:F9:AE:21:9B:AA:A4:19:2E:CA:FA
Certificate issuer:       /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial:       7F6AAF8AF789D80889417796E35A67E46142FB4E
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e392e302f32342d3234203d3e20313332383833.roa
Signing time:             Tue 20 Jan 2026 02:16:48 +0000
ROA not before:           Tue 20 Jan 2026 02:11:48 +0000
ROA not after:            Tue 19 Jan 2027 02:16:48 +0000
asID:                     132883
IP address blocks:        203.83.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6a:af:8a:f7:89:d8:08:89:41:77:96:e3:5a:67:e4:61:42:fb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
        Validity
            Not Before: Jan 20 02:11:48 2026 GMT
            Not After : Jan 19 02:16:48 2027 GMT
        Subject: CN=CE6EE8ECCEBAD47BBD20F9AE219BAAA4192ECAFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:62:54:39:ef:05:a7:18:b9:6c:3f:d7:fc:
                    e9:45:63:20:3b:27:d7:bb:26:22:31:fd:3f:2f:40:
                    6f:87:59:a7:03:66:e9:84:cf:22:fe:88:8e:0d:0c:
                    73:c6:9c:0e:f1:2d:b9:0f:d9:0d:7e:e7:e4:2f:97:
                    97:bd:30:88:a7:65:c5:8c:38:6e:4c:a4:1c:7d:94:
                    6f:df:fe:ae:b8:4a:65:81:6f:42:99:5b:3a:e9:cc:
                    7b:b0:b4:f7:4e:5a:ae:39:ff:65:21:32:42:3f:b3:
                    fb:a9:e3:94:bd:31:0a:37:49:e6:8d:b4:08:7f:dd:
                    5a:d8:38:0b:d5:d5:1d:4b:ec:23:ae:0f:96:b1:e4:
                    3e:cf:7b:13:14:67:03:2e:7e:39:2d:c4:99:42:4a:
                    02:69:77:ce:37:6d:3e:dc:67:64:7b:19:0a:35:e5:
                    85:d9:dc:05:51:d5:9c:42:e8:af:0e:fc:40:91:da:
                    d9:7b:52:11:c6:62:db:ec:1a:2f:6c:e9:98:65:26:
                    fd:e1:b4:18:ac:0f:e5:84:6f:9d:3f:c8:64:9a:86:
                    ea:09:77:44:d8:cd:47:bb:15:d7:77:bb:26:36:b6:
                    82:b0:51:9d:1c:59:c0:68:06:2c:1a:6f:9c:b9:78:
                    46:58:27:69:01:f5:17:58:24:70:27:a1:27:36:c8:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6E:E8:EC:CE:BA:D4:7B:BD:20:F9:AE:21:9B:AA:A4:19:2E:CA:FA
            X509v3 Authority Key Identifier:
                keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3230332e38332e392e302f32342d3234203d3e20313332383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.83.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:26:45:77:fa:ab:21:03:74:55:2f:19:f8:68:63:0b:80:a8:
         6a:d0:bc:c6:d4:90:c6:a5:59:14:a1:2e:64:4b:1f:5e:69:3f:
         e2:39:1d:06:29:67:03:65:70:f7:05:2d:89:aa:81:4d:40:f0:
         1e:dc:95:f4:93:57:e1:00:09:aa:f3:53:7d:5b:41:ea:60:a8:
         a3:28:ef:bc:e7:b0:d4:d1:21:cb:56:5d:a0:8b:81:4b:09:a5:
         58:01:4c:c1:f3:6f:32:42:a5:9f:a9:bd:f7:f2:d1:c9:6b:64:
         77:05:02:29:1f:da:37:ba:17:2d:3e:cb:f2:dd:92:9f:4e:5b:
         c3:a5:f3:c6:f7:cf:7f:4d:f7:22:95:00:51:e1:8c:e0:d7:78:
         c1:d6:6d:42:97:73:de:f3:16:66:dc:fe:99:88:b0:6b:69:95:
         16:dd:aa:38:a3:31:b8:26:c3:ef:6c:29:01:63:48:05:c5:bf:
         3f:80:ae:0f:cf:32:c3:47:c6:12:34:31:bf:73:2a:14:76:4e:
         62:b8:45:77:50:01:d0:c4:c5:e9:f7:2d:9b:94:3f:56:3a:37:
         75:77:5f:9b:37:65:51:9a:d3:93:d5:d3:95:d0:e9:f5:9d:3d:
         6f:e4:34:d7:10:b5:16:04:2c:0d:ca:fa:c7:bb:c1:0a:20:03:
         7e:43:fd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:29 2026 by rpki-client