This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131362e302f32322d3234203d3e20313339363438.roa
File:                     3130332e3234342e3131362e302f32322d3234203d3e20313339363438.roa (raw, json)
Hash identifier:          aJCjt30ki/I5WNM4VFb0tnalFQM6ZpPEw6hLGkL0fmk=
Subject key identifier:   02:5E:77:E2:0A:BF:2F:EA:E8:78:45:35:10:CF:A7:F4:59:82:0D:22
Certificate issuer:       /CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8
Certificate serial:       4EFD13F37BA8B4B98EA074E80FF7A91F28451A96
Authority key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131362e302f32322d3234203d3e20313339363438.roa
Signing time:             Tue 20 Jan 2026 02:08:20 +0000
ROA not before:           Tue 20 Jan 2026 02:03:20 +0000
ROA not after:            Tue 19 Jan 2027 02:08:20 +0000
asID:                     139648
IP address blocks:        103.244.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 13:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fd:13:f3:7b:a8:b4:b9:8e:a0:74:e8:0f:f7:a9:1f:28:45:1a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8
        Validity
            Not Before: Jan 20 02:03:20 2026 GMT
            Not After : Jan 19 02:08:20 2027 GMT
        Subject: CN=025E77E20ABF2FEAE878453510CFA7F459820D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:46:35:e5:d2:f7:ce:bf:46:8e:88:65:ee:
                    a6:83:87:5a:24:6a:5f:da:1e:a0:47:d4:48:a0:56:
                    5f:96:48:cb:3f:5f:e3:dc:09:05:3f:eb:31:c0:f5:
                    f7:6f:cf:bf:d9:24:25:7d:c0:4f:53:d7:7e:5f:fc:
                    e4:53:ec:64:f5:3e:5e:cb:97:50:39:e4:92:ce:dc:
                    05:28:cf:7d:2f:30:b2:e2:3f:84:d2:06:df:96:1b:
                    a2:bd:ea:2d:2c:1f:08:38:b8:d3:8f:f0:98:ed:1f:
                    44:66:4f:b2:d9:62:33:9b:b5:28:23:dd:7d:96:00:
                    61:c0:9a:2d:ab:b6:80:88:f3:58:5a:22:c8:27:5f:
                    c6:71:a7:5f:d3:88:b0:51:5e:22:4e:44:10:0b:4e:
                    9e:12:1a:e3:94:35:2a:39:9d:67:08:66:1c:f1:35:
                    d7:d3:f5:57:1c:0b:46:1c:09:9c:db:37:0d:62:f6:
                    16:7c:ca:cc:5b:f9:d4:7f:94:d3:02:bd:1e:95:0a:
                    31:7d:24:8c:09:09:41:f0:fa:b3:cc:3c:24:8b:3c:
                    d4:d5:47:c2:19:6a:24:dd:8c:ea:b0:93:87:fd:7b:
                    76:f7:48:61:75:dd:8f:c7:f2:57:53:eb:43:e3:28:
                    37:14:b6:24:72:9c:bf:ba:86:23:b8:32:99:84:b2:
                    3e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5E:77:E2:0A:BF:2F:EA:E8:78:45:35:10:CF:A7:F4:59:82:0D:22
            X509v3 Authority Key Identifier:
                keyid:9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131362e302f32322d3234203d3e20313339363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:4c:79:0a:e3:4c:43:0a:48:04:95:c5:c0:d2:89:b3:9f:35:
         27:54:b9:80:3b:20:83:bf:ce:35:80:5d:31:24:3e:d1:4b:aa:
         e5:02:7e:88:6f:e3:04:41:ec:34:0c:19:f7:a8:ca:79:31:72:
         26:ec:ed:2f:9c:ad:99:90:b3:58:6d:a9:76:39:c8:61:34:72:
         a2:0c:1c:21:61:b0:8c:2b:5f:d0:61:ef:2b:13:87:f6:cd:67:
         dc:96:92:2e:f1:e8:e7:94:a1:da:79:25:ba:97:b1:e3:24:29:
         63:1f:2a:81:7c:aa:b3:15:48:1c:de:4b:6c:56:fd:72:38:cd:
         b3:07:95:e7:69:d7:aa:ea:25:03:28:73:87:c4:68:cf:3d:57:
         50:1d:32:c3:57:26:59:18:3a:a6:3f:ff:39:86:3d:5c:2e:9e:
         52:50:5f:7a:63:b6:9e:3b:7f:f2:e0:0c:26:49:c3:79:74:0a:
         53:90:a7:20:b2:13:a1:32:0a:b4:a6:00:73:2b:a4:c6:b5:84:
         ca:fa:ac:eb:17:f2:a2:df:fc:af:20:4d:3a:78:2b:ed:e9:f9:
         d6:db:0a:cc:18:b0:8e:78:d5:e1:37:a7:90:95:78:2b:73:c9:
         59:02:64:05:c9:7f:86:f6:07:7e:32:a5:b4:b6:27:7e:a4:bc:
         aa:0a:32:d2
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUTv0T83uotLmOoHToD/epHyhFGpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMz
OERCQzVDODAeFw0yNjAxMjAwMjAzMjBaFw0yNzAxMTkwMjA4MjBaMDMxMTAvBgNV
BAMTKDAyNUU3N0UyMEFCRjJGRUFFODc4NDUzNTEwQ0ZBN0Y0NTk4MjBEMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuUY15dL3zr9Gjohl7qaDh1ok
al/aHqBH1EigVl+WSMs/X+PcCQU/6zHA9fdvz7/ZJCV9wE9T135f/ORT7GT1Pl7L
l1A55JLO3AUoz30vMLLiP4TSBt+WG6K96i0sHwg4uNOP8JjtH0RmT7LZYjObtSgj
3X2WAGHAmi2rtoCI81haIsgnX8Zxp1/TiLBRXiJORBALTp4SGuOUNSo5nWcIZhzx
NdfT9VccC0YcCZzbNw1i9hZ8ysxb+dR/lNMCvR6VCjF9JIwJCUHw+rPMPCSLPNTV
R8IZaiTdjOqwk4f9e3b3SGF13Y/H8ldT60PjKDcUtiRynL+6hiO4MpmEsj4ZAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUAl534gq/L+roeEU1EM+n9FmCDSIwHwYDVR0j
BBgwFoAUnnvrgQIzNppH1C2Bp/UIQzjbxcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTgyMTY5OC8wLzlFN0JFQjgxMDIzMzM2OUE0N0Q0MkQ4MUE3RjUw
ODQzMzhEQkM1QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMzOERCQzVDOC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxODIxNjk4LzAvMzEzMDMzMmUz
MjM0MzQyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzOTM2MzQz
OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmf0dDANBgkqhkiG9w0BAQsFAAOCAQEAbkx5CuNMQwpIBJXF
wNKJs581J1S5gDsgg7/ONYBdMSQ+0Uuq5QJ+iG/jBEHsNAwZ96jKeTFyJuztL5yt
mZCzWG2pdjnIYTRyogwcIWGwjCtf0GHvKxOH9s1n3JaSLvHo55Sh2nklupex4yQp
Yx8qgXyqsxVIHN5LbFb9cjjNsweV52nXquolAyhzh8Rozz1XUB0yw1cmWRg6pj//
OYY9XC6eUlBfemO2njt/8uAMJknDeXQKU5CnILIToTIKtKYAcyukxrWEyvqs6xfy
ot/8ryBNOngr7en51tsKzBiwjnjV4TenkJV4K3PJWQJkBcl/hvYHfjKltLYnfqS8
qgoy0g==
-----END CERTIFICATE-----
Generated at Thu Jan 22 23:35:17 2026 by rpki-client