This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e34342e302f32322d3232203d3e203234343236.roa
File:                     3130332e3233362e34342e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          RUzoar3bWsmJNMwHRecT6NYtOuPb5BVHdkM7WZzu02c=
Subject key identifier:   83:1E:F0:47:CF:60:26:A3:9E:C2:7F:A8:AD:4E:9C:B4:2E:F5:88:03
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       377C2DF9DC86A123EDDC8EF9AB40D983E49CD9CE
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e34342e302f32322d3232203d3e203234343236.roa
Signing time:             Tue 20 Jan 2026 01:19:07 +0000
ROA not before:           Tue 20 Jan 2026 01:14:07 +0000
ROA not after:            Tue 19 Jan 2027 01:19:07 +0000
asID:                     24426
IP address blocks:        103.236.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7c:2d:f9:dc:86:a1:23:ed:dc:8e:f9:ab:40:d9:83:e4:9c:d9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jan 20 01:14:07 2026 GMT
            Not After : Jan 19 01:19:07 2027 GMT
        Subject: CN=831EF047CF6026A39EC27FA8AD4E9CB42EF58803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:51:88:d2:3c:4b:43:4e:99:a0:d2:03:e2:
                    c5:16:c5:6b:d0:1f:70:0f:10:b3:ed:8d:b8:f1:4f:
                    81:36:21:60:d3:6b:bf:62:d3:52:4b:40:0e:82:df:
                    bb:97:82:8a:79:a3:ca:86:aa:13:ce:50:23:e4:3a:
                    d9:d9:e3:e2:7e:d0:8c:70:99:6e:20:c3:4d:46:ac:
                    30:38:8e:ed:de:1a:03:1c:4a:04:fe:d2:2f:00:4e:
                    cb:db:14:cf:f9:ac:d2:d0:67:a4:45:cd:2f:d7:1f:
                    1e:7a:54:9c:16:13:62:5e:6c:fc:60:ce:a2:87:0e:
                    3a:23:d6:af:fa:cc:4e:57:c2:65:98:34:52:23:f5:
                    32:a9:01:87:b8:54:78:e4:75:06:0a:76:01:c4:27:
                    13:10:32:53:da:ad:55:c3:0a:f3:1d:0d:74:ee:96:
                    93:be:30:7e:e7:e6:64:7c:4e:15:c4:bf:62:e7:5e:
                    05:82:3d:13:9f:fe:3f:8a:e9:3b:ed:01:63:a8:6a:
                    b9:17:89:07:00:b9:5f:fa:5c:ea:a1:69:c1:7b:c4:
                    00:15:b0:0f:4b:a6:f4:8a:46:f6:db:fb:1a:25:c2:
                    4c:da:59:72:7c:4e:dc:86:dd:0f:20:06:e7:5d:4e:
                    f1:c5:ba:93:d8:5a:f0:1d:95:23:df:35:d7:68:ce:
                    9d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1E:F0:47:CF:60:26:A3:9E:C2:7F:A8:AD:4E:9C:B4:2E:F5:88:03
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e34342e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:bf:8c:38:cc:28:77:26:ac:39:25:55:d4:fd:af:41:05:c2:
         ef:48:33:3e:3a:be:77:ea:18:e2:6a:55:a9:92:96:5e:f8:01:
         e7:28:89:d1:47:38:d0:3b:17:7f:4e:f1:52:fb:0e:be:a3:d3:
         2c:c3:cc:98:c8:8e:77:35:99:36:35:09:7a:20:67:4f:50:fb:
         cd:8c:30:17:bb:12:d7:f9:ea:1f:c6:14:42:8d:82:36:80:54:
         42:72:f3:f6:2a:a3:e3:de:55:66:32:31:94:ba:7d:1a:b6:e8:
         37:bf:92:c4:82:0d:17:68:39:3b:96:d3:8b:8f:20:4f:62:af:
         81:90:b5:9d:e4:cb:d3:42:27:f9:38:15:ee:d4:fc:df:9f:92:
         7d:cb:c3:4b:be:b1:52:62:f6:e7:25:8c:df:0a:55:09:63:a3:
         9a:bc:97:0c:81:1d:b4:b7:2a:c6:73:08:f7:10:66:eb:a6:bf:
         4d:be:80:6d:50:ed:80:26:aa:23:e1:d8:fa:b9:b3:da:37:da:
         52:4f:27:e0:ae:90:d9:85:5a:be:1d:4a:e1:b4:d7:8c:15:0a:
         86:22:cb:27:d2:2a:22:aa:8d:8a:22:45:84:35:56:04:df:28:
         24:6a:a1:6a:80:2c:93:9a:e0:ec:30:e9:82:75:eb:77:b7:70:
         be:be:39:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:05:36 2026 by rpki-client