This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130332e3233372e32382e302f32332d3233203d3e2034383131.roa
File:                     3130332e3233372e32382e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier:          lPN2e231J62BlgXToxcTwwqESFc3vUGp+YVPZet70XE=
Subject key identifier:   0F:51:63:09:A9:9F:D2:C2:BF:9F:D3:F8:38:DE:41:04:EA:75:A8:B3
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       5A44E1F68B293DC6D4EA8A558C0049BCE2B860B0
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130332e3233372e32382e302f32332d3233203d3e2034383131.roa
Signing time:             Tue 20 Jan 2026 02:10:46 +0000
ROA not before:           Tue 20 Jan 2026 02:05:46 +0000
ROA not after:            Tue 19 Jan 2027 02:10:46 +0000
asID:                     4811
IP address blocks:        103.237.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:44:e1:f6:8b:29:3d:c6:d4:ea:8a:55:8c:00:49:bc:e2:b8:60:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:46 2026 GMT
            Not After : Jan 19 02:10:46 2027 GMT
        Subject: CN=0F516309A99FD2C2BF9FD3F838DE4104EA75A8B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:77:8f:07:2f:4d:2a:20:b7:a5:17:a7:f1:
                    23:86:99:eb:1b:a1:fd:e7:a0:a1:9a:83:7e:96:e5:
                    03:2d:44:20:d3:00:c7:bb:96:8d:33:82:ec:ca:9f:
                    ab:95:41:27:4e:17:5f:20:39:68:43:9a:82:82:4a:
                    b0:d9:df:fe:7a:43:77:ef:73:ae:ff:d5:ed:ae:14:
                    14:49:f7:a2:73:aa:8b:97:d7:a2:b9:7e:d8:a0:27:
                    32:0e:73:1a:b7:41:84:5e:71:d1:87:b7:e4:8b:7c:
                    73:8e:5d:68:06:fd:7c:c4:90:1a:5d:05:5b:ce:22:
                    db:44:23:04:b9:e5:a4:86:f0:90:05:07:81:8f:c9:
                    c7:ef:91:2a:96:91:b5:bf:9a:52:da:19:5e:03:6c:
                    d7:11:47:16:6e:bf:58:d5:24:87:4f:0d:ac:ab:27:
                    48:91:96:26:03:8a:28:5d:02:c0:13:7f:1c:79:a0:
                    a5:bd:cd:57:32:63:90:d1:7e:fc:c3:ad:78:43:3e:
                    d9:39:a4:2c:82:ff:c4:de:d0:62:09:0d:f7:70:77:
                    b1:86:e4:54:b4:4a:3b:d7:5f:18:79:87:b5:bf:51:
                    48:37:3b:bf:08:0d:52:79:bd:c4:1f:17:66:4d:76:
                    cd:b7:08:b9:48:e7:c4:06:57:59:f8:92:90:59:be:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:51:63:09:A9:9F:D2:C2:BF:9F:D3:F8:38:DE:41:04:EA:75:A8:B3
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130332e3233372e32382e302f32332d3233203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:06:c9:21:81:93:ad:c3:68:e1:ae:1c:1e:3d:06:b4:85:53:
         a0:9e:df:fc:c2:ef:46:d4:40:0e:db:e9:ad:f6:3d:fd:06:f8:
         64:1b:eb:15:5c:8a:af:33:a4:e2:d8:d1:91:f6:17:ba:9d:46:
         b9:73:05:e8:c0:4a:1a:94:5d:fc:20:d7:62:b0:29:ea:b7:cd:
         fb:c3:6c:28:5b:05:58:98:a0:bf:e2:24:93:52:b3:7a:30:0d:
         f0:c7:59:7d:4b:85:92:59:a5:79:9e:12:ce:2d:30:9c:49:78:
         16:4d:79:f5:fd:2f:b5:77:cd:d6:74:68:c4:e8:a9:ab:d0:24:
         69:54:64:ad:64:12:cc:2f:a8:e0:bd:42:95:cf:43:4b:8b:16:
         b4:82:33:72:a9:ce:b1:e2:b9:35:13:dc:1a:70:3b:a1:18:b1:
         38:04:a2:55:3d:ad:ca:72:ff:b0:de:de:8d:07:8e:73:88:53:
         03:ca:c6:7f:f5:3f:a0:66:25:a6:da:ce:48:0d:55:74:44:f3:
         4f:b1:0e:45:9b:23:bc:43:6c:2b:ad:9e:e3:01:e2:5b:b2:f9:
         d8:21:0b:5b:18:8f:50:90:a5:59:43:f1:a7:aa:24:b5:2a:c2:
         20:f2:bf:45:3c:39:39:e1:9a:2f:7e:3e:8c:23:d5:7e:8a:bb:
         59:de:99:1f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUWkTh9ospPcbU6opVjABJvOK4YLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB
OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDZaFw0yNzAxMTkwMjEwNDZaMDMxMTAvBgNV
BAMTKDBGNTE2MzA5QTk5RkQyQzJCRjlGRDNGODM4REU0MTA0RUE3NUE4QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5aXePBy9NKiC3pRen8SOGmesb
of3noKGag36W5QMtRCDTAMe7lo0zguzKn6uVQSdOF18gOWhDmoKCSrDZ3/56Q3fv
c67/1e2uFBRJ96JzqouX16K5ftigJzIOcxq3QYRecdGHt+SLfHOOXWgG/XzEkBpd
BVvOIttEIwS55aSG8JAFB4GPycfvkSqWkbW/mlLaGV4DbNcRRxZuv1jVJIdPDayr
J0iRliYDiihdAsATfxx5oKW9zVcyY5DRfvzDrXhDPtk5pCyC/8Te0GIJDfdwd7GG
5FS0SjvXXxh5h7W/UUg3O78IDVJ5vcQfF2ZNds23CLlI58QGV1n4kpBZvue9AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUD1FjCamf0sK/n9P4ON5BBOp1qLMwHwYDVR0j
BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4
MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMDMzMmUzMjMz
MzcyZTMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWftHDANBgkqhkiG9w0BAQsFAAOCAQEARQbJIYGTrcNo4a4cHj0GtIVToJ7f
/MLvRtRADtvprfY9/Qb4ZBvrFVyKrzOk4tjRkfYXup1GuXMF6MBKGpRd/CDXYrAp
6rfN+8NsKFsFWJigv+Ikk1KzejAN8MdZfUuFklmleZ4Szi0wnEl4Fk159f0vtXfN
1nRoxOipq9AkaVRkrWQSzC+o4L1Clc9DS4sWtIIzcqnOseK5NRPcGnA7oRixOASi
VT2tynL/sN7ejQeOc4hTA8rGf/U/oGYlptrOSA1VdETzT7EORZsjvENsK62e4wHi
W7L52CELWxiPUJClWUPxp6oktSrCIPK/RTw5OeGaL34+jCPVfoq7Wd6ZHw==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:22:15 2026 by rpki-client