This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232342e302f32342d3234203d3e20313331333134.roa
File:                     3130332e3230302e3232342e302f32342d3234203d3e20313331333134.roa (raw, json)
Hash identifier:          1C/L6TcWpvNm22ZzgpqJuGe58/EqXsxE5aPKEEX53xA=
Subject key identifier:   CF:76:C0:0D:4E:7E:54:67:37:9A:7E:CA:E9:5B:25:FF:4D:63:DD:C5
Certificate issuer:       /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial:       1F8A2CDECAD929860E812BC8A119215521A090A0
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232342e302f32342d3234203d3e20313331333134.roa
Signing time:             Tue 20 Jan 2026 01:19:14 +0000
ROA not before:           Tue 20 Jan 2026 01:14:14 +0000
ROA not after:            Tue 19 Jan 2027 01:19:14 +0000
asID:                     131314
IP address blocks:        103.200.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8a:2c:de:ca:d9:29:86:0e:81:2b:c8:a1:19:21:55:21:a0:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
        Validity
            Not Before: Jan 20 01:14:14 2026 GMT
            Not After : Jan 19 01:19:14 2027 GMT
        Subject: CN=CF76C00D4E7E5467379A7ECAE95B25FF4D63DDC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:76:22:b0:9c:b0:bc:de:3a:62:c4:fd:dd:
                    56:82:e4:d5:44:80:95:a2:a6:26:93:c1:48:0b:ae:
                    dd:9c:cb:cb:9e:d1:39:79:4e:33:9f:e9:1b:14:2f:
                    2a:fb:84:bd:3b:bc:17:13:a6:d0:3e:f0:0b:38:d7:
                    49:2f:10:28:6b:b1:0c:2f:c0:b8:87:83:50:a6:9f:
                    e8:54:71:44:72:45:01:29:e8:d0:a3:8f:a7:cf:37:
                    82:2b:d1:0b:a9:e5:a2:0b:ce:46:f2:4a:22:f0:f4:
                    42:ed:46:57:ae:d1:a9:93:61:a4:60:6c:a5:4c:88:
                    2b:3e:98:2d:12:d4:b3:82:2f:6a:6d:f7:8f:ba:b7:
                    b1:48:3d:17:0f:b1:a3:9c:a3:df:2f:7a:5c:4a:60:
                    e2:39:a9:2a:98:a0:a2:c4:3c:44:32:39:6f:08:83:
                    00:6d:e7:5c:e6:67:fe:f5:18:31:c0:4c:b6:02:59:
                    00:0a:62:56:19:d0:e8:9c:c4:29:f7:ba:35:d6:d4:
                    e5:29:74:cb:36:30:a9:fb:f6:c9:5e:28:cd:5b:8d:
                    a8:a0:45:eb:b4:dc:b9:c9:9d:0a:e1:77:44:4c:a3:
                    15:52:5a:8a:95:e2:d5:e2:f1:b0:02:3c:5b:e1:a3:
                    fa:5a:d9:77:72:f0:5d:09:80:85:44:fb:d5:21:00:
                    f3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:76:C0:0D:4E:7E:54:67:37:9A:7E:CA:E9:5B:25:FF:4D:63:DD:C5
            X509v3 Authority Key Identifier:
                keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232342e302f32342d3234203d3e20313331333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:b0:ed:6a:8a:32:14:4d:1e:61:ac:ca:b4:a5:fc:bd:7e:5f:
         c0:5b:4e:27:f1:bc:3e:19:29:7a:b0:7e:90:07:76:90:9e:35:
         05:60:07:a4:5d:d8:92:7b:29:da:8d:6f:ea:59:c9:50:84:30:
         8b:33:8f:cb:e4:f4:86:c1:bc:15:6c:66:52:ff:12:f1:44:58:
         10:1e:e1:70:aa:9b:c5:ed:f8:26:e9:24:6c:b3:5e:2d:4c:70:
         4d:19:ba:2c:7a:29:46:dc:15:f2:8c:b4:e8:5d:a2:7c:00:65:
         cb:06:37:c1:8a:b4:d5:c5:48:a5:cc:8f:55:bc:36:39:72:0e:
         3e:72:62:a1:5c:11:36:90:9a:3d:36:9d:61:a8:64:1d:de:f5:
         d1:ab:be:88:f0:13:d2:a0:13:0f:0b:34:8f:18:4f:72:fd:76:
         f7:ab:67:00:2a:1e:4f:a5:08:96:80:cf:3c:28:53:60:5a:fe:
         38:76:50:cd:cc:57:59:70:14:3c:11:c9:6b:8b:41:4f:57:95:
         83:62:6c:21:0a:43:c8:4d:09:94:05:54:96:e2:c8:4c:27:90:
         d6:38:89:50:41:17:fd:7a:02:e6:84:ff:98:22:39:f7:7a:10:
         71:d0:ad:aa:8f:4c:6f:66:96:b5:e6:4d:2a:f0:40:c4:ff:e4:
         03:c3:28:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:01:41 2026 by rpki-client