This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233322e302f32342d3234203d3e203536303032.roa
File:                     3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (raw, json)
Hash identifier:          O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=
Subject key identifier:   D1:91:28:A3:53:E5:C3:6E:93:D9:4B:42:18:AB:05:04:7B:9E:9B:71
Certificate issuer:       /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Certificate serial:       77BF57331CCC26A1E89887DF090CCD52C0382812
Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233322e302f32342d3234203d3e203536303032.roa
Signing time:             Tue 20 Jan 2026 02:20:17 +0000
ROA not before:           Tue 20 Jan 2026 02:15:17 +0000
ROA not after:            Tue 19 Jan 2027 02:20:17 +0000
asID:                     56002
IP address blocks:        103.12.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bf:57:33:1c:cc:26:a1:e8:98:87:df:09:0c:cd:52:c0:38:28:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
        Validity
            Not Before: Jan 20 02:15:17 2026 GMT
            Not After : Jan 19 02:20:17 2027 GMT
        Subject: CN=D19128A353E5C36E93D94B4218AB05047B9E9B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:60:75:3f:59:ab:e3:c0:11:7f:84:95:4e:
                    51:d8:ea:26:f9:77:60:a5:d0:ad:19:3f:96:6c:e0:
                    c0:6b:0f:c3:ab:ab:66:2c:b0:7c:45:9d:3b:33:05:
                    64:07:88:e8:30:9f:3f:79:56:de:48:80:3f:79:48:
                    28:f3:35:44:98:c9:2b:07:73:32:4b:e0:90:7d:e6:
                    a8:ba:ba:fd:04:88:05:7a:5a:ec:a4:0d:54:9e:7c:
                    7d:7d:d1:93:6a:76:0c:2e:20:2f:90:be:67:c5:10:
                    1d:cb:06:56:5a:e0:e3:d3:47:46:4f:1f:3f:ac:e8:
                    c5:42:ca:60:e7:8e:f8:60:91:4f:d8:20:59:bd:27:
                    1b:de:63:dc:39:3e:dc:7c:0a:34:7b:48:51:b8:3f:
                    f6:e2:e7:d3:58:09:8b:f2:33:f7:25:ff:ee:82:8b:
                    14:f3:74:37:bf:58:c5:29:ed:3f:5b:0a:ca:63:82:
                    a8:bd:b0:90:5a:e3:5e:0a:30:82:20:f9:5e:2a:d3:
                    de:7b:39:4a:16:b9:09:5f:95:1f:e2:f8:4b:5d:e3:
                    0e:21:b8:96:c2:0b:0f:9c:c9:35:11:08:71:a7:ef:
                    c4:6b:29:93:a9:37:3f:9c:07:71:cd:5d:fd:44:a6:
                    01:e2:ac:26:10:f9:e6:16:97:11:46:46:ba:6c:4e:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:91:28:A3:53:E5:C3:6E:93:D9:4B:42:18:AB:05:04:7B:9E:9B:71
            X509v3 Authority Key Identifier:
                keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233322e302f32342d3234203d3e203536303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:32:6d:ab:ee:77:9e:2d:10:06:17:51:f2:ce:54:e3:b2:57:
         bd:6c:d3:c3:4e:08:3d:21:73:81:c3:8f:0b:93:c3:64:8b:b6:
         9b:d5:ba:de:8e:30:8f:c6:7f:bd:d4:12:9b:5f:b0:05:01:0c:
         8b:b3:e8:b0:6b:db:6e:2d:72:a5:0e:c8:75:16:79:ae:92:eb:
         d3:a3:ad:31:00:df:46:8c:b7:a1:40:96:c0:c9:6d:c4:91:d9:
         5f:ab:84:3d:d0:3d:38:56:5a:21:8d:0d:a3:10:17:71:e6:98:
         3d:31:02:cc:3b:26:57:94:4a:44:06:f7:df:7b:35:83:46:75:
         ee:f4:1a:b2:d0:bf:65:4e:d1:b4:ac:19:3e:de:fc:53:2a:87:
         7b:84:c3:c5:c0:05:81:d3:70:9d:9e:8b:ea:1d:c2:75:32:30:
         e3:6f:e9:a8:6f:00:78:84:d2:c4:42:56:2d:30:82:66:cf:19:
         db:ce:16:1e:0a:bd:87:58:9e:29:1c:0f:11:88:12:2d:93:ed:
         e7:25:58:80:d4:e1:02:36:9c:0c:ba:9f:8a:55:6d:9a:4a:86:
         63:30:03:f6:1f:3b:fd:cd:3c:36:e3:51:f9:02:81:37:a5:8b:
         b4:28:c6:5e:73:15:91:d0:4e:ac:bb:04:2d:61:54:a1:77:df:
         5e:a4:47:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:32:38 2026 by rpki-client