This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131382e302f32342d3234203d3e20323039323432.roa
File:                     3130332e3234342e3131382e302f32342d3234203d3e20323039323432.roa (raw, json)
Hash identifier:          jtdhKVajjO7i3gcLpLZQQ7uQjXqBR0hJCb7kPRr4BFw=
Subject key identifier:   A5:BB:5A:60:2E:55:6F:B1:10:43:7E:7A:CC:17:24:B2:5C:82:44:79
Certificate issuer:       /CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8
Certificate serial:       0ABD0D56A92E7A6E1D369B398DAB402A93BF252F
Authority key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131382e302f32342d3234203d3e20323039323432.roa
Signing time:             Tue 20 Jan 2026 02:08:20 +0000
ROA not before:           Tue 20 Jan 2026 02:03:20 +0000
ROA not after:            Tue 19 Jan 2027 02:08:20 +0000
asID:                     209242
IP address blocks:        103.244.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 13:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bd:0d:56:a9:2e:7a:6e:1d:36:9b:39:8d:ab:40:2a:93:bf:25:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8
        Validity
            Not Before: Jan 20 02:03:20 2026 GMT
            Not After : Jan 19 02:08:20 2027 GMT
        Subject: CN=A5BB5A602E556FB110437E7ACC1724B25C824479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:67:2f:d5:b9:73:b8:02:db:c4:70:4d:b8:
                    88:82:47:a2:9a:24:ac:07:01:7d:3c:4b:68:64:60:
                    c0:e3:0c:21:e0:17:44:a9:bf:5e:68:74:fb:71:eb:
                    35:4c:ca:63:33:7e:1d:8d:ce:50:77:03:36:32:8c:
                    61:42:67:ec:37:a4:62:5d:e6:b5:4a:03:c9:85:c2:
                    0c:aa:c5:fc:97:9e:12:a2:e7:10:ff:ff:bd:2e:d3:
                    37:52:93:35:b3:b9:61:1e:7d:f5:ef:7b:3c:b5:e9:
                    25:07:76:81:91:5c:88:38:ff:00:d3:7b:6b:b2:f3:
                    b8:88:7e:f4:fa:6f:c5:47:38:86:23:2a:c2:3a:3e:
                    c4:a9:37:8a:2b:e2:1a:68:7b:73:c9:d6:bb:48:97:
                    79:cd:18:17:9e:fe:de:e7:bd:48:71:96:7a:a6:30:
                    c8:63:5e:90:4e:e2:14:b0:6e:34:9b:33:2f:50:0c:
                    3a:90:2b:10:33:4c:57:2e:1e:0e:83:d2:10:0e:6e:
                    fd:5e:1c:a0:0a:55:f5:cc:30:62:33:01:ca:09:b1:
                    db:0b:11:d1:4b:1e:ad:08:f0:d0:aa:6e:a2:6c:46:
                    a2:67:29:43:5f:18:4c:a4:ce:2f:ee:b4:7f:2b:94:
                    a4:bc:f0:df:b4:62:5a:eb:8c:6c:56:20:47:78:15:
                    5a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BB:5A:60:2E:55:6F:B1:10:43:7E:7A:CC:17:24:B2:5C:82:44:79
            X509v3 Authority Key Identifier:
                keyid:9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131382e302f32342d3234203d3e20323039323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:78:2e:04:67:e9:75:20:4f:c1:52:b1:d8:20:a2:e8:7d:53:
         de:38:6e:25:d9:b6:a6:55:58:c8:97:c9:04:89:0f:2d:82:60:
         1b:7d:f5:91:46:8b:36:ba:f4:22:1f:10:4b:52:21:af:3d:04:
         aa:ff:29:2e:81:6c:9b:72:ba:a5:91:90:9c:ea:e4:14:b6:4b:
         59:2c:76:80:f9:38:37:10:b4:22:cb:6c:ee:00:09:2a:c4:a8:
         37:82:cb:3c:e8:d1:e5:59:55:2e:84:68:7d:ea:88:54:60:61:
         d2:b8:b1:1a:27:df:ed:19:e7:53:d7:0c:af:eb:e2:21:bb:22:
         5b:8b:89:87:29:17:19:a3:f7:61:a1:24:11:fc:d0:d5:12:31:
         d3:3d:3b:1d:9f:01:88:e1:c5:cf:c6:17:bc:4b:f2:13:81:96:
         d5:5c:9e:21:de:eb:fd:4b:23:e3:0f:c0:1d:22:5a:12:2e:38:
         9f:c7:7a:db:30:74:31:0d:d2:ad:f5:9c:59:8b:da:f1:c6:6d:
         e4:8a:93:31:a3:20:96:db:5e:d2:4c:82:f4:54:dd:21:36:ea:
         78:3b:32:51:fc:c5:e3:8b:a0:f3:71:43:77:b7:4a:27:02:ef:
         9e:1f:db:00:fb:31:ca:25:00:91:9a:53:29:3d:08:c1:a1:0b:
         1c:69:ae:92
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUCr0NVqkuem4dNps5jatAKpO/JS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMz
OERCQzVDODAeFw0yNjAxMjAwMjAzMjBaFw0yNzAxMTkwMjA4MjBaMDMxMTAvBgNV
BAMTKEE1QkI1QTYwMkU1NTZGQjExMDQzN0U3QUNDMTcyNEIyNUM4MjQ0NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClEWcv1blzuALbxHBNuIiCR6Ka
JKwHAX08S2hkYMDjDCHgF0Spv15odPtx6zVMymMzfh2NzlB3AzYyjGFCZ+w3pGJd
5rVKA8mFwgyqxfyXnhKi5xD//70u0zdSkzWzuWEeffXvezy16SUHdoGRXIg4/wDT
e2uy87iIfvT6b8VHOIYjKsI6PsSpN4or4hpoe3PJ1rtIl3nNGBee/t7nvUhxlnqm
MMhjXpBO4hSwbjSbMy9QDDqQKxAzTFcuHg6D0hAObv1eHKAKVfXMMGIzAcoJsdsL
EdFLHq0I8NCqbqJsRqJnKUNfGEykzi/utH8rlKS88N+0YlrrjGxWIEd4FVqPAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUpbtaYC5Vb7EQQ356zBckslyCRHkwHwYDVR0j
BBgwFoAUnnvrgQIzNppH1C2Bp/UIQzjbxcgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTgyMTY5OC8wLzlFN0JFQjgxMDIzMzM2OUE0N0Q0MkQ4MUE3RjUw
ODQzMzhEQkM1QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUU3QkVCODEwMjMzMzY5QTQ3RDQyRDgxQTdGNTA4NDMzOERCQzVDOC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxODIxNjk4LzAvMzEzMDMzMmUz
MjM0MzQyZTMxMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTMyMzQz
Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGf0djANBgkqhkiG9w0BAQsFAAOCAQEATHguBGfpdSBPwVKx
2CCi6H1T3jhuJdm2plVYyJfJBIkPLYJgG331kUaLNrr0Ih8QS1Ihrz0Eqv8pLoFs
m3K6pZGQnOrkFLZLWSx2gPk4NxC0Ists7gAJKsSoN4LLPOjR5VlVLoRofeqIVGBh
0rixGiff7RnnU9cMr+viIbsiW4uJhykXGaP3YaEkEfzQ1RIx0z07HZ8BiOHFz8YX
vEvyE4GW1VyeId7r/Usj4w/AHSJaEi44n8d62zB0MQ3SrfWcWYva8cZt5IqTMaMg
ltte0kyC9FTdITbqeDsyUfzF44ug83FDd7dKJwLvnh/bAPsxyiUAkZpTKT0IwaEL
HGmukg==
-----END CERTIFICATE-----
Generated at Fri Jan 23 02:20:49 2026 by rpki-client