This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e31322e302f32322d3232203d3e203234343236.roa
File:                     3130332e3233362e31322e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          /pA6QE5aRGEPMc2PKunNvoU7F/vYCxNYguz3jNa5rXU=
Subject key identifier:   51:4C:51:F9:56:4F:E9:AD:23:97:34:32:E1:35:78:98:E3:3F:6E:B7
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       0AA1FADF3073338905C965538978A1E967861007
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e31322e302f32322d3232203d3e203234343236.roa
Signing time:             Tue 20 Jan 2026 01:19:05 +0000
ROA not before:           Tue 20 Jan 2026 01:14:05 +0000
ROA not after:            Tue 19 Jan 2027 01:19:05 +0000
asID:                     24426
IP address blocks:        103.236.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a1:fa:df:30:73:33:89:05:c9:65:53:89:78:a1:e9:67:86:10:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jan 20 01:14:05 2026 GMT
            Not After : Jan 19 01:19:05 2027 GMT
        Subject: CN=514C51F9564FE9AD23973432E1357898E33F6EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:05:44:db:77:6b:7c:7f:ce:28:9a:0a:a8:6d:
                    ca:bd:a2:59:68:c7:cb:f5:e6:37:7a:cd:b9:a2:0e:
                    f3:cb:b0:28:d3:e6:91:58:82:b8:e0:5b:d9:5a:b6:
                    3d:cf:3e:7c:da:70:3d:71:4f:20:95:07:ec:d9:41:
                    52:82:24:cc:a8:a2:39:92:45:ca:6b:63:fd:13:51:
                    65:61:bb:5c:f7:e9:9a:45:63:41:fb:6a:6e:f4:d0:
                    a1:34:8d:d0:ae:10:16:d4:78:5b:ee:54:96:61:b8:
                    95:b2:5b:6d:9e:e3:11:e2:de:f2:42:36:cc:80:95:
                    eb:ff:ed:78:70:37:73:42:ee:c0:d9:1c:a2:7c:2c:
                    d7:9a:01:db:f9:cd:e7:dd:e8:ac:72:b2:c9:68:d7:
                    d0:78:59:2a:bc:b4:1f:aa:32:f7:f6:62:32:35:01:
                    8b:15:30:0c:d0:0e:68:ab:c8:e6:0e:93:5c:d3:a8:
                    c3:a6:a4:3f:b3:fd:6b:ad:a8:5d:e4:0e:b2:d3:4c:
                    00:69:6a:ec:c9:07:07:d4:1a:66:a7:07:45:37:37:
                    b9:d1:22:95:c1:a7:f6:d1:27:94:bb:f0:f6:e7:d8:
                    ef:01:79:d3:85:1b:79:c0:5a:70:f3:79:27:a2:16:
                    3b:d9:30:8c:e7:a3:00:c7:2c:de:75:e6:2f:a8:7d:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4C:51:F9:56:4F:E9:AD:23:97:34:32:E1:35:78:98:E3:3F:6E:B7
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e31322e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:92:ee:eb:0c:bb:49:9f:fb:51:cb:ac:03:aa:c1:9b:2a:0d:
         11:ae:18:ee:8c:01:21:95:98:2f:86:da:13:a2:b7:1d:de:78:
         b6:43:6f:f1:02:12:d6:e0:7d:e6:f1:8d:63:ef:e2:23:b4:f4:
         69:15:8f:af:58:8b:cf:52:cb:d7:61:7c:3a:48:be:4c:c7:ee:
         0d:82:0f:a3:29:d5:9e:a4:e5:a3:40:7d:5c:6a:ee:ae:b3:d6:
         32:9b:8f:8f:df:82:e0:85:28:55:20:d4:22:e6:b4:62:82:31:
         ac:11:ce:05:c5:96:de:3e:f4:09:58:ea:58:32:b0:64:06:70:
         70:32:67:af:65:01:d0:db:cd:3d:7c:8c:fe:e3:2e:7f:9f:b2:
         fa:85:01:d9:c6:00:d7:d9:f1:33:ea:18:e3:7e:9f:e5:de:87:
         7a:e9:75:22:b1:fd:5f:a3:73:fb:ac:e3:c4:90:5a:dd:1b:91:
         19:18:c1:9c:95:18:65:46:d7:f9:a2:48:62:80:b7:ac:e4:2f:
         5b:b7:bd:55:6d:73:c2:1f:a6:87:49:72:b4:5b:2b:b6:69:54:
         61:d6:3e:6b:7b:ec:00:05:cd:bf:2e:3f:d7:be:d5:bc:59:68:
         2d:7f:3a:78:23:ca:82:5c:95:87:fa:d2:6f:59:f8:c4:6d:dc:
         ca:d3:c1:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:33 2026 by rpki-client