This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33322e302f32322d3232203d3e203234343236.roa
File:                     3130332e3233362e33322e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          R7yPsl3nWPeL4S8QHFFRbA+OFRe/0Q1iiYntOTY8aQM=
Subject key identifier:   81:E1:C9:FF:A6:97:A2:C2:B0:B6:CE:0D:B0:6A:D6:0A:36:CA:EA:4E
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       67853CEB16FE75A15437BC0A0894280D134A3FF3
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33322e302f32322d3232203d3e203234343236.roa
Signing time:             Tue 20 Jan 2026 01:19:05 +0000
ROA not before:           Tue 20 Jan 2026 01:14:05 +0000
ROA not after:            Tue 19 Jan 2027 01:19:05 +0000
asID:                     24426
IP address blocks:        103.236.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:85:3c:eb:16:fe:75:a1:54:37:bc:0a:08:94:28:0d:13:4a:3f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jan 20 01:14:05 2026 GMT
            Not After : Jan 19 01:19:05 2027 GMT
        Subject: CN=81E1C9FFA697A2C2B0B6CE0DB06AD60A36CAEA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:cc:32:40:42:06:32:97:d2:50:b4:de:cd:
                    e1:fc:f5:6a:e2:a5:1a:ad:da:7d:79:8f:b6:08:97:
                    db:cb:32:d2:2a:13:3a:13:b5:53:97:52:47:5b:52:
                    f2:f9:86:cf:a1:b2:e2:71:19:b7:1e:ba:4c:38:6a:
                    80:1e:62:ef:d5:e4:57:e9:e0:b4:1b:86:42:c9:cc:
                    71:28:26:da:00:bf:a3:f8:23:31:a2:ea:ab:94:23:
                    16:5f:07:37:22:d9:1f:0e:4f:7c:39:40:91:6e:80:
                    b1:86:c8:d2:17:41:f6:4a:d6:42:07:04:ff:aa:3c:
                    05:8a:96:6c:30:13:c1:e4:c8:87:0a:69:e3:f8:e2:
                    ac:e3:37:0e:e3:4d:4c:f6:00:7d:a6:35:1b:60:19:
                    ba:6e:65:2f:47:07:ba:7c:1c:16:ce:72:ee:f5:1b:
                    60:56:10:7a:04:52:9b:8d:04:16:20:11:b2:d4:f6:
                    4a:d6:55:dc:3d:0b:7b:5d:27:11:a0:8a:52:6b:dc:
                    a7:cf:96:fd:c2:9e:5b:1f:c3:43:e2:dc:10:8a:53:
                    41:12:94:28:02:5e:98:0c:b3:97:6c:3a:df:83:13:
                    98:4e:82:58:fd:14:74:5c:16:34:3d:e2:2a:c3:1e:
                    22:05:9a:33:ab:c6:4f:16:bf:fd:3f:53:23:72:25:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E1:C9:FF:A6:97:A2:C2:B0:B6:CE:0D:B0:6A:D6:0A:36:CA:EA:4E
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33322e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:ee:97:34:a7:03:e1:86:43:92:e2:ea:df:76:09:e4:36:f7:
         53:81:a3:4f:45:37:ea:0b:89:29:fa:13:0b:db:b4:97:43:b0:
         b3:3e:ce:b8:10:13:ea:bb:e0:4c:4a:84:83:fb:22:a0:f3:fe:
         60:24:00:fa:50:5e:1d:5b:b9:53:b9:db:f9:44:28:0e:04:d7:
         5b:9c:20:e4:77:f4:a0:ef:84:78:c6:7f:fc:2e:f6:07:3b:63:
         8b:73:23:ab:b4:6b:21:c4:7f:bc:f6:7b:f4:5e:36:50:19:91:
         38:c6:34:6a:3a:45:96:34:23:4b:71:3a:3a:cb:56:1c:d0:bd:
         b4:75:87:ee:6c:85:17:c5:44:e8:e4:b2:6e:ae:3e:26:7f:28:
         94:13:12:40:0a:7c:21:9f:e3:f3:69:73:ad:ce:23:4c:b2:8b:
         84:91:6c:b6:b6:39:b1:69:aa:a6:5f:d5:28:0d:da:0e:34:49:
         73:fe:51:12:d2:bb:8e:10:34:2c:cc:22:63:de:6d:55:f6:ba:
         08:d4:43:65:51:15:40:da:84:87:e6:a2:cd:e2:bb:3f:78:30:
         81:76:8a:05:38:ec:93:dd:01:c7:7e:b5:89:9a:0c:c4:d0:8f:
         06:f7:17:19:a6:30:cb:d3:78:d6:48:57:3a:23:50:91:64:c2:
         bd:e6:bd:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:15 2026 by rpki-client