This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3235203d3e203234343039.roa
File:                     3130332e3234352e32332e302f32342d3235203d3e203234343039.roa (raw, json)
Hash identifier:          469hlmLm2KpSSrorT8OTR9mMQNHKpexMeaWyKztbia4=
Subject key identifier:   13:3F:EB:A6:FD:92:08:5D:FD:A3:06:8A:10:10:9D:09:43:59:19:A7
Certificate issuer:       /CN=A918C4250000/serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF
Certificate serial:       5F01BDFDBFB850ACFE6F5F583ACA038185BE4E54
Authority key identifier: 2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3235203d3e203234343039.roa
Signing time:             Thu 25 Dec 2025 02:40:56 +0000
ROA not before:           Thu 25 Dec 2025 02:35:56 +0000
ROA not after:            Thu 24 Dec 2026 02:40:56 +0000
asID:                     24409
IP address blocks:        103.245.23.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Jan 2026 01:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:01:bd:fd:bf:b8:50:ac:fe:6f:5f:58:3a:ca:03:81:85:be:4e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C4250000, serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF
        Validity
            Not Before: Dec 25 02:35:56 2025 GMT
            Not After : Dec 24 02:40:56 2026 GMT
        Subject: CN=133FEBA6FD92085DFDA3068A10109D09435919A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:07:42:f8:33:b9:78:ea:df:ba:ac:c8:2d:8e:
                    66:10:d5:6a:f1:a4:16:de:90:3f:31:ad:cb:66:c4:
                    07:06:01:51:1e:45:e9:72:fb:3e:96:e4:cb:df:0f:
                    14:9d:bc:f6:a8:5a:07:0a:ee:4b:56:e1:cd:d9:46:
                    9d:af:49:77:bc:c7:26:27:07:93:a1:a6:82:b7:ed:
                    13:17:09:a7:26:c2:7d:d7:dd:66:1f:f7:b7:ee:c6:
                    bd:8d:80:38:db:c7:ed:9d:e4:01:db:ec:a8:42:09:
                    37:15:6c:a1:03:43:6c:16:ba:ac:8a:f7:34:24:75:
                    1c:6e:22:87:74:cb:11:53:8c:15:db:59:84:9b:83:
                    49:59:20:88:07:3f:b1:b2:27:b4:5c:0d:c3:30:ae:
                    b4:ad:2e:06:5b:d0:8a:ff:3f:20:5c:bd:89:94:c9:
                    cc:05:18:05:b3:75:5f:f7:bf:e1:73:3a:66:22:28:
                    b8:a0:cb:79:b0:ea:0a:ae:67:3e:12:7e:43:97:bd:
                    6d:3b:e3:f7:f8:a4:61:22:93:73:1b:fc:23:cc:7f:
                    34:66:b6:0d:79:a7:36:70:c6:2b:fb:93:c0:a4:f4:
                    dc:fe:95:c2:4a:b7:61:1c:8a:bf:d1:c7:e0:67:16:
                    d6:58:17:40:11:32:0d:0a:c6:90:7d:d6:72:cc:bd:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3F:EB:A6:FD:92:08:5D:FD:A3:06:8A:10:10:9D:09:43:59:19:A7
            X509v3 Authority Key Identifier:
                keyid:2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3235203d3e203234343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:74:2b:90:45:b3:75:83:43:ed:62:28:99:e4:d9:3e:61:46:
         e3:3d:88:2f:39:3d:83:dd:08:a1:e5:cd:dc:51:c8:76:cb:05:
         ce:a0:0b:0e:13:8b:8c:41:88:59:06:91:4d:68:e5:bc:5f:2b:
         47:2d:c9:74:e3:63:1f:1b:b7:35:4e:86:30:12:9b:d6:65:61:
         d1:c7:0b:dc:38:9a:75:bf:c7:9f:76:c3:8e:18:9d:58:5a:cf:
         63:56:74:fb:ef:a8:5e:11:af:71:73:af:5b:36:cc:c1:9e:84:
         62:2d:44:26:70:44:8e:b1:21:84:0b:21:5c:25:cb:fd:ed:de:
         30:0b:e6:42:1a:6f:92:22:7d:3a:25:29:ff:b7:d1:f4:a3:9f:
         27:4e:0e:6a:83:d7:a7:41:72:51:53:9f:95:8f:62:f2:2b:9e:
         3d:42:23:a6:f6:a6:db:6a:33:0c:ce:89:4b:78:8e:fb:2f:ca:
         77:8e:6c:5a:bd:a1:16:dd:2e:1f:99:c1:bb:67:5b:8a:16:89:
         83:91:9e:9f:ea:f6:92:10:1e:ae:17:1d:4a:0f:b8:f1:5c:c1:
         f5:96:22:82:0a:a2:e0:4f:0f:53:3d:d9:e2:83:ad:6f:eb:8e:
         7b:92:48:11:69:41:33:9b:f6:f9:ce:25:94:d1:9c:07:8d:f8:
         d0:05:98:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 09:15:02 2026 by rpki-client