This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131362e302f32322d3234203d3e20323039323432.roa
File:                     3130332e3234342e3131362e302f32322d3234203d3e20323039323432.roa (raw, json)
Hash identifier:          TAf5eO8aCX9DVhSQuGgnuYk9qZ2yITguOs5Cc0wIBCM=
Subject key identifier:   6A:6D:90:F2:CE:EF:B1:31:8B:B8:DA:89:87:80:A6:9C:C3:7A:4D:45
Certificate issuer:       /CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8
Certificate serial:       3BF75FDF7958008813F616D8FC3C4D544EA1FC45
Authority key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131362e302f32322d3234203d3e20323039323432.roa
Signing time:             Tue 20 Jan 2026 02:08:19 +0000
ROA not before:           Tue 20 Jan 2026 02:03:19 +0000
ROA not after:            Tue 19 Jan 2027 02:08:19 +0000
asID:                     209242
IP address blocks:        103.244.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 13:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f7:5f:df:79:58:00:88:13:f6:16:d8:fc:3c:4d:54:4e:a1:fc:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8
        Validity
            Not Before: Jan 20 02:03:19 2026 GMT
            Not After : Jan 19 02:08:19 2027 GMT
        Subject: CN=6A6D90F2CEEFB1318BB8DA898780A69CC37A4D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2e:09:16:df:d4:63:e9:15:69:df:47:92:6f:
                    89:1a:e1:bd:21:a0:36:80:76:b9:f3:6a:bc:08:82:
                    37:fa:7a:a5:f0:f4:75:6c:d9:d5:ea:69:58:31:72:
                    1c:06:77:64:f8:28:d8:88:f6:84:b3:fb:54:3d:83:
                    4b:d2:43:12:a6:a8:7d:84:99:81:58:3e:71:c0:0c:
                    51:97:3f:ee:58:a2:00:14:a2:45:e3:05:7b:1a:85:
                    c3:95:71:6c:b4:78:84:6e:b0:ed:67:dd:d1:cd:c4:
                    85:b5:69:cb:48:65:bd:a6:b0:3f:c9:9f:1d:45:03:
                    e5:64:9e:4a:69:a6:f9:ec:13:b9:34:ae:1a:21:ff:
                    f9:1d:e6:36:e6:ce:63:c0:8b:2f:0b:7b:b5:3c:15:
                    bb:35:60:36:a0:bb:eb:eb:8f:95:9e:92:82:22:83:
                    d8:83:ac:e7:b2:0c:25:9e:e3:c1:e3:ed:ea:4e:11:
                    aa:d5:8a:7d:c0:84:b7:c7:5d:86:22:86:4d:35:5c:
                    86:c5:f0:7e:b8:66:66:65:4d:47:d6:62:3f:22:7f:
                    97:c2:8a:dc:a6:a3:f8:25:34:ea:b1:ab:b2:b4:0d:
                    ad:f5:8c:58:c1:bb:4f:0b:8b:5e:de:df:78:cf:82:
                    7f:81:5b:20:fb:70:f8:e1:25:0a:d4:02:c8:3e:95:
                    7b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6D:90:F2:CE:EF:B1:31:8B:B8:DA:89:87:80:A6:9C:C3:7A:4D:45
            X509v3 Authority Key Identifier:
                keyid:9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131362e302f32322d3234203d3e20323039323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:65:f6:8a:fe:f5:24:b8:ad:b4:80:14:ae:23:30:c5:d4:af:
         7f:87:67:8b:b6:3f:b5:37:33:25:8f:6f:b5:a0:75:66:92:03:
         3e:40:92:66:51:cb:b8:56:2d:96:6e:87:3e:60:59:c1:1b:1e:
         73:c6:68:1e:74:92:ee:01:4d:d1:75:04:6d:ad:bc:b2:1a:e7:
         94:e5:45:89:de:fa:6d:1a:de:4c:90:a5:3c:42:ec:d3:f3:ff:
         82:ad:6a:07:83:f2:0a:1a:1e:16:d1:8c:e8:40:99:ad:55:d3:
         f8:4e:3f:29:8e:c8:9f:84:f8:b3:40:e1:8f:c3:6b:5c:8f:6e:
         a0:41:f3:55:3d:7a:62:a4:6c:86:70:67:95:42:1d:c2:fd:ad:
         f4:92:6b:b3:9a:e9:e8:82:98:c7:cf:27:f0:22:64:49:23:34:
         13:f5:ea:11:b5:58:58:b4:08:ce:41:93:47:ad:9f:4d:d6:dc:
         8d:d3:c3:92:af:42:e8:82:a7:ad:e0:1c:5d:e5:30:ce:1c:87:
         e6:f2:4e:69:9c:a8:27:87:ec:d0:67:fd:fd:ed:b6:df:ee:d7:
         9e:6d:c7:a4:09:57:d6:7f:3b:51:9d:72:f4:16:fd:e1:4d:82:
         c6:c9:ed:cd:85:34:7f:83:91:63:31:d4:35:cb:42:96:20:26:
         63:1f:82:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 02:20:48 2026 by rpki-client