This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e33312e3233362e302f32322d3234203d3e20323132323337.roa
File:                     3130332e33312e3233362e302f32322d3234203d3e20323132323337.roa (raw, json)
Hash identifier:          bLJxeQ8+61BJwPAmZetOwstJ5wgQIRxzPvzazfvotXM=
Subject key identifier:   65:53:27:54:3D:64:C8:37:48:E8:B8:71:8A:BB:06:F6:D6:C3:A4:1F
Certificate issuer:       /CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8
Certificate serial:       176DF4CFF3FA72F1C7C94FA16E24DE501CD3EF80
Authority key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e33312e3233362e302f32322d3234203d3e20323132323337.roa
Signing time:             Tue 20 Jan 2026 02:08:21 +0000
ROA not before:           Tue 20 Jan 2026 02:03:21 +0000
ROA not after:            Tue 19 Jan 2027 02:08:21 +0000
asID:                     212237
IP address blocks:        103.31.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 13:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6d:f4:cf:f3:fa:72:f1:c7:c9:4f:a1:6e:24:de:50:1c:d3:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8
        Validity
            Not Before: Jan 20 02:03:21 2026 GMT
            Not After : Jan 19 02:08:21 2027 GMT
        Subject: CN=655327543D64C83748E8B8718ABB06F6D6C3A41F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:b4:9c:1b:22:97:dc:f7:96:c2:4e:28:33:
                    4d:ec:36:7f:82:9d:dd:2e:64:07:09:f1:4e:a8:6c:
                    95:4d:6b:85:98:7e:aa:9f:84:4e:89:71:8a:04:20:
                    09:96:d2:56:b8:7c:ce:02:38:4d:ce:6f:d5:46:f9:
                    ae:05:f2:e8:65:0f:fa:7b:8d:9f:ee:4a:95:21:b9:
                    59:fc:aa:a4:aa:38:0f:ef:88:46:17:c4:65:dc:7b:
                    75:8c:4b:fa:84:40:67:5f:a2:9b:4a:7a:f6:dd:b1:
                    d2:63:ce:73:8b:75:cf:e2:1a:8c:f5:63:5e:2c:eb:
                    1c:6a:5d:ea:fb:15:8c:2e:a2:62:5b:6e:78:9b:aa:
                    54:a9:03:20:6c:89:3d:47:f3:93:e4:d1:40:33:95:
                    5b:29:96:c6:4f:8c:17:b5:d7:6f:ad:5b:7a:8c:a8:
                    7d:ab:96:5d:78:06:3a:fb:e7:32:86:98:0b:6f:c6:
                    19:fb:22:20:79:53:b6:ec:43:5e:47:43:ca:10:d1:
                    52:3b:41:d8:30:27:6f:f6:62:6c:b8:d4:ca:53:4a:
                    0b:84:15:32:0c:13:b7:59:f6:83:ea:7c:41:58:ea:
                    2c:20:59:d6:72:5e:e2:fa:25:bf:1d:ac:c5:56:e8:
                    50:c3:fc:7e:ab:89:8c:44:45:1c:5f:27:3f:0c:b7:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:53:27:54:3D:64:C8:37:48:E8:B8:71:8A:BB:06:F6:D6:C3:A4:1F
            X509v3 Authority Key Identifier:
                keyid:9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e33312e3233362e302f32322d3234203d3e20323132323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:cb:4a:d3:d0:cf:06:8c:22:29:90:54:11:c3:19:a1:4a:df:
         e2:4a:29:94:86:fd:b7:12:fc:d9:02:25:4e:cb:3f:06:14:d7:
         89:35:ec:cf:c7:90:cc:0e:92:4c:86:2e:ac:29:1a:ca:d6:50:
         ca:b2:4f:e0:54:db:5e:65:fa:ca:e7:ee:4b:cf:74:fb:bc:1c:
         3b:75:c6:0b:c9:8d:5c:06:1b:be:4f:2b:44:cd:01:c2:06:5b:
         04:89:e6:a2:df:b2:cf:23:3c:d8:8f:b6:50:11:15:fc:70:34:
         27:e8:63:7f:81:42:98:a6:d8:23:a6:2a:aa:24:e6:75:e1:ec:
         ca:0a:a5:1e:79:a7:18:ff:26:4c:16:ff:09:fd:e6:0f:36:78:
         aa:68:86:a8:21:1a:40:e9:97:50:e5:d5:7d:f6:57:32:ee:08:
         4f:4d:42:92:10:37:f9:a0:ab:9a:2b:d8:3a:34:a1:c8:60:93:
         b4:c5:ed:55:af:77:2f:4e:98:f6:78:b1:ba:3d:aa:68:2d:60:
         4e:63:ff:66:d5:63:34:fd:53:5f:08:9a:07:96:3d:5e:ae:c9:
         1b:0d:b8:bd:2e:9c:dd:75:3f:fb:48:c0:74:3c:f9:70:38:20:
         94:2f:ec:b6:71:80:bb:25:66:fe:0d:6a:46:b9:f7:60:8b:26:
         31:5e:79:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 02:20:48 2026 by rpki-client