This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e33322e302f32302d3230203d3e203234343236.roa
File:                     3130332e33352e33322e302f32302d3230203d3e203234343236.roa (raw, json)
Hash identifier:          B5yBz7TpHaCkdwg9ZSfSm0coNCl2hMts7/cV8VsDskk=
Subject key identifier:   2E:6D:70:58:57:18:13:7F:BD:C4:DD:12:52:AE:E9:88:A2:0F:CF:BE
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       27FF1A22C2C1F96907E3793AFF712E5EA9B0DF40
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e33322e302f32302d3230203d3e203234343236.roa
Signing time:             Tue 20 Jan 2026 01:19:07 +0000
ROA not before:           Tue 20 Jan 2026 01:14:07 +0000
ROA not after:            Tue 19 Jan 2027 01:19:07 +0000
asID:                     24426
IP address blocks:        103.35.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ff:1a:22:c2:c1:f9:69:07:e3:79:3a:ff:71:2e:5e:a9:b0:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jan 20 01:14:07 2026 GMT
            Not After : Jan 19 01:19:07 2027 GMT
        Subject: CN=2E6D70585718137FBDC4DD1252AEE988A20FCFBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:e3:bb:ec:64:cd:08:20:d9:c4:08:14:7a:
                    3c:7a:b2:84:14:1b:d1:4f:28:83:b9:a6:56:70:d4:
                    62:40:26:e1:32:c9:bb:66:ee:86:0e:92:5f:54:d7:
                    84:08:ff:90:a7:fc:64:d0:f0:62:1b:93:05:c7:06:
                    b8:ff:6b:ce:d0:5b:75:25:d1:46:76:a6:c6:82:4a:
                    85:46:56:5e:6f:73:1e:65:d4:62:99:d5:ce:7a:e8:
                    5b:e9:7e:de:b5:58:76:3a:44:a0:3a:0e:15:47:9d:
                    92:88:cb:d8:b8:73:50:39:ee:d7:ea:9a:c9:22:68:
                    bd:d8:6f:6d:bd:fb:6b:1d:a4:c8:e1:0d:07:b2:d2:
                    a6:38:cf:f6:e1:f0:39:16:b6:fb:d6:6d:b8:01:51:
                    73:27:a9:cf:0d:f1:c4:b5:10:e3:92:89:97:d4:c4:
                    fe:c2:1e:16:f6:69:d6:b8:f7:ce:b1:f4:1a:12:76:
                    be:30:52:9e:f3:f2:4b:7c:a1:cd:80:aa:ad:77:cb:
                    74:4f:f5:e4:73:b0:42:c8:27:f2:18:fc:91:e9:25:
                    26:bc:70:2d:d3:e4:4a:02:3b:4a:7b:82:9e:7d:c3:
                    ba:6f:d2:77:76:4a:0c:22:bb:22:75:c2:0a:7c:7a:
                    9f:82:d2:89:27:1a:ab:fc:cc:18:88:00:fc:77:3f:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6D:70:58:57:18:13:7F:BD:C4:DD:12:52:AE:E9:88:A2:0F:CF:BE
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e33322e302f32302d3230203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:96:06:16:6d:20:5e:48:5e:57:00:ab:f4:f7:65:95:e2:7d:
         fa:d8:7c:4c:d4:ca:de:86:e7:5c:f0:1c:b4:5e:9e:a0:87:85:
         a2:12:4a:9f:16:16:fd:71:48:65:2b:f2:a5:7e:b2:3b:ee:2d:
         85:d4:4a:46:c0:f7:88:83:c8:9e:4b:b7:c5:85:28:f9:79:2b:
         0b:10:59:4f:4f:db:d9:57:24:69:79:12:68:c8:fa:f8:da:01:
         d8:ec:4d:eb:f9:9d:ed:63:9e:79:ef:8d:20:9b:f1:85:d6:cb:
         52:4e:72:18:86:06:79:5c:e4:f5:50:19:cb:52:c6:fd:32:6b:
         a6:67:e3:ac:3a:1d:15:e1:9c:45:7d:a7:58:fe:1d:2c:ec:e0:
         56:d2:1b:f3:d4:eb:ba:ba:20:24:c5:2f:29:10:40:a2:00:a8:
         2b:38:02:62:9a:3e:33:4b:d2:b4:6d:1a:c1:26:66:76:1a:ba:
         b3:25:52:ed:4a:93:9a:87:51:2d:3b:70:a1:5c:76:fc:23:74:
         1d:60:9c:72:09:28:20:2e:d9:55:92:cc:34:df:2d:03:7e:bf:
         0a:3e:7d:9b:5c:ee:80:0f:7b:1a:98:b9:98:25:a4:fe:41:28:
         76:90:dd:e8:be:72:3c:a4:40:30:f0:cb:2f:90:a3:b4:be:1f:
         a9:91:d4:fe
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUJ/8aIsLB+WkH43k6/3EuXqmw30AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx
OEQ2QjM2MDAeFw0yNjAxMjAwMTE0MDdaFw0yNzAxMTkwMTE5MDdaMDMxMTAvBgNV
BAMTKDJFNkQ3MDU4NTcxODEzN0ZCREM0REQxMjUyQUVFOTg4QTIwRkNGQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ReO77GTNCCDZxAgUejx6soQU
G9FPKIO5plZw1GJAJuEyybtm7oYOkl9U14QI/5Cn/GTQ8GIbkwXHBrj/a87QW3Ul
0UZ2psaCSoVGVl5vcx5l1GKZ1c566Fvpft61WHY6RKA6DhVHnZKIy9i4c1A57tfq
mskiaL3Yb229+2sdpMjhDQey0qY4z/bh8DkWtvvWbbgBUXMnqc8N8cS1EOOSiZfU
xP7CHhb2ada4986x9BoSdr4wUp7z8kt8oc2Aqq13y3RP9eRzsELIJ/IY/JHpJSa8
cC3T5EoCO0p7gp59w7pv0nd2SgwiuyJ1wgp8ep+C0oknGqv8zBiIAPx3P2hTAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQULm1wWFcYE3+9xN0SUq7piKIPz74wHwYDVR0j
BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx
NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzEzMDMzMmUzMzM1
MmUzMzMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBGcjIDANBgkqhkiG9w0BAQsFAAOCAQEAnZYGFm0gXkheVwCr9PdlleJ9+th8
TNTK3obnXPActF6eoIeFohJKnxYW/XFIZSvypX6yO+4thdRKRsD3iIPInku3xYUo
+XkrCxBZT0/b2VckaXkSaMj6+NoB2OxN6/md7WOeee+NIJvxhdbLUk5yGIYGeVzk
9VAZy1LG/TJrpmfjrDodFeGcRX2nWP4dLOzgVtIb89TrurogJMUvKRBAogCoKzgC
Ypo+M0vStG0awSZmdhq6syVS7UqTmodRLTtwoVx2/CN0HWCccgkoIC7ZVZLMNN8t
A36/Cj59m1zugA97Gpi5mCWk/kEodpDd6L5yPKRAMPDLL5CjtL4fqZHU/g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:32:43 2026 by rpki-client