This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/3130332e34332e3234312e302f32342d3234203d3e2034383038.roa
File:                     3130332e34332e3234312e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          GzguvVAUN/QsRFgpZbpng5ljs24N7/shA4iD6/un6DY=
Subject key identifier:   E5:88:3F:73:71:9D:F4:BC:A2:44:DD:DD:31:14:02:AC:35:22:E5:80
Certificate issuer:       /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
Certificate serial:       6F01127F4D5092ECEA8B152B8365D0443DB60D75
Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/3130332e34332e3234312e302f32342d3234203d3e2034383038.roa
Signing time:             Tue 20 Jan 2026 02:10:55 +0000
ROA not before:           Tue 20 Jan 2026 02:05:55 +0000
ROA not after:            Tue 19 Jan 2027 02:10:55 +0000
asID:                     4808
IP address blocks:        103.43.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 22:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:01:12:7f:4d:50:92:ec:ea:8b:15:2b:83:65:d0:44:3d:b6:0d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
        Validity
            Not Before: Jan 20 02:05:55 2026 GMT
            Not After : Jan 19 02:10:55 2027 GMT
        Subject: CN=E5883F73719DF4BCA244DDDD311402AC3522E580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:c0:ca:d9:00:b4:dc:28:2b:3b:57:92:e5:
                    5c:18:9f:91:e1:f4:c7:35:9d:f7:6d:07:cd:a3:4e:
                    59:c4:cf:b3:6e:f0:aa:ad:93:e4:7a:bb:f2:8f:02:
                    e8:1c:15:99:a9:a3:d0:77:37:67:e1:12:ea:f8:31:
                    46:48:ad:1d:37:07:cc:ec:a8:b6:31:9a:94:79:bc:
                    2f:15:df:ae:87:4c:db:d7:8f:6b:dc:8b:6b:a3:25:
                    ce:36:02:e7:24:88:d0:72:ee:6a:99:ff:10:6a:c1:
                    b9:b6:a3:ac:e2:3d:08:c4:c4:64:5d:ab:e2:2c:53:
                    3f:e4:ce:a6:55:2f:47:ba:28:11:ff:79:d4:d0:6c:
                    f0:e0:d5:9d:ec:da:6f:d8:d3:5b:01:d4:d1:4b:61:
                    26:58:c7:dd:8a:9b:ac:9e:20:be:4b:a3:42:d9:84:
                    5b:87:66:36:aa:18:0e:ea:a1:b7:98:57:65:f1:fe:
                    e1:39:a9:a2:55:b4:df:55:ac:1c:ce:52:8d:c6:df:
                    de:22:93:bd:95:19:7b:f8:4e:86:eb:dd:ff:91:31:
                    cd:30:8c:08:76:81:c1:18:55:c4:96:5b:5e:38:57:
                    77:ce:27:ed:5b:b0:be:18:d3:6f:6d:f4:51:7f:72:
                    95:6c:0f:97:dd:e2:a8:ec:f1:78:72:36:7c:ff:4f:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:88:3F:73:71:9D:F4:BC:A2:44:DD:DD:31:14:02:AC:35:22:E5:80
            X509v3 Authority Key Identifier:
                keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/3130332e34332e3234312e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:ae:3b:0f:2a:52:b4:38:77:60:12:18:db:bb:e3:0b:8a:d3:
         d9:76:0c:84:ec:47:36:13:32:7a:a1:41:b7:19:f2:e4:32:34:
         68:2f:f0:80:10:66:73:9f:d9:d4:c1:ed:b0:4f:26:8e:6c:f6:
         37:d1:6c:82:3a:54:a8:56:81:5f:9e:25:90:be:26:65:0b:eb:
         8d:61:33:04:27:c1:b2:dc:12:f7:ed:af:b7:97:9d:27:82:a8:
         d8:3c:98:66:af:54:98:26:c7:e4:a8:e0:3c:c7:45:b2:fe:ea:
         c8:45:a5:43:5e:86:5e:bb:47:e2:5c:1d:f9:8d:12:12:c9:6e:
         6a:ea:60:da:bf:f6:69:d0:f3:3a:fc:71:3b:ec:77:11:9b:65:
         ca:71:8b:41:d7:8e:62:ca:65:82:39:24:3f:15:03:72:69:d3:
         9c:76:d3:0c:3b:18:1a:f3:8f:12:2c:85:a8:27:2c:fc:e5:01:
         e3:42:a2:98:d7:6f:42:5e:fe:9f:c6:07:8a:22:a1:41:e1:d2:
         e3:bb:14:28:a4:77:68:6d:8e:bc:21:e0:6a:20:0a:52:fc:2c:
         02:76:1b:12:15:5a:31:0e:54:37:63:5f:ef:cd:61:af:50:ce:
         42:fc:3b:a5:1c:60:cd:a3:cb:01:28:80:c6:91:01:d9:64:9f:
         aa:33:b4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 16:29:23 2026 by rpki-client