This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233332e302f32342d3234203d3e203536303032.roa
File:                     3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (raw, json)
Hash identifier:          sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=
Subject key identifier:   00:8E:D8:9A:6D:23:37:46:B6:B4:49:A9:C7:77:AF:E7:E7:C1:6F:06
Certificate issuer:       /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Certificate serial:       7BC045F65FB86CBAD30C93EAF2C1694B22F65E1F
Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233332e302f32342d3234203d3e203536303032.roa
Signing time:             Tue 20 Jan 2026 02:20:18 +0000
ROA not before:           Tue 20 Jan 2026 02:15:18 +0000
ROA not after:            Tue 19 Jan 2027 02:20:18 +0000
asID:                     56002
IP address blocks:        103.12.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c0:45:f6:5f:b8:6c:ba:d3:0c:93:ea:f2:c1:69:4b:22:f6:5e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
        Validity
            Not Before: Jan 20 02:15:18 2026 GMT
            Not After : Jan 19 02:20:18 2027 GMT
        Subject: CN=008ED89A6D233746B6B449A9C777AFE7E7C16F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:ee:cd:b5:af:5c:16:13:2a:fe:95:3c:1c:
                    f7:0b:7d:d6:df:b9:36:ba:1a:87:04:a4:44:ea:8b:
                    ab:ac:2b:b4:2c:ed:ef:e8:f3:5e:bd:6d:12:09:d0:
                    70:cb:08:4d:81:5f:e8:ca:02:9e:ae:97:96:3f:ac:
                    f0:04:0e:d2:32:76:a4:ab:f8:00:f1:18:1d:48:47:
                    d7:5f:b3:ae:1a:5f:b5:87:11:3e:92:13:ec:60:2c:
                    d3:d4:48:07:d4:50:39:9c:82:e3:36:e9:a2:9d:61:
                    3f:c4:87:42:3c:32:0c:94:01:c9:38:0a:2b:2e:c2:
                    3d:74:e3:ba:24:31:94:e5:50:69:c7:36:e9:c4:c0:
                    c0:7d:73:f1:76:2d:6d:cc:e2:af:33:32:f7:4f:2e:
                    c1:ce:ed:ef:40:34:ba:ff:34:f1:e3:e7:b6:60:09:
                    8d:13:a8:17:6b:87:f8:ce:37:8a:8b:27:fc:67:c9:
                    f4:ad:53:62:e1:28:3b:d2:e6:c4:88:27:38:72:91:
                    53:f3:33:59:9e:82:1a:1a:ff:ad:bd:12:14:d7:bb:
                    15:9e:28:02:95:83:af:d2:0e:43:c6:44:f1:81:ba:
                    67:a1:b0:a7:ae:1d:6a:17:4a:a9:8f:80:68:75:69:
                    85:34:5d:af:f7:4b:1d:a4:53:2c:2d:7d:4c:6d:16:
                    83:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8E:D8:9A:6D:23:37:46:B6:B4:49:A9:C7:77:AF:E7:E7:C1:6F:06
            X509v3 Authority Key Identifier:
                keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233332e302f32342d3234203d3e203536303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:b9:1e:3f:fc:22:c4:40:48:dc:51:0f:44:b3:af:90:09:1f:
         7b:c0:a3:a6:64:c2:33:15:06:a1:0d:18:cf:af:31:aa:81:d4:
         71:3a:78:08:74:f8:d0:e4:fb:f9:01:d0:be:90:c6:2b:14:91:
         17:f4:c6:e3:1a:da:8f:e3:40:64:9a:97:56:bf:09:18:75:c5:
         50:6e:35:33:1d:d2:e8:ab:15:f6:a5:2b:ca:80:35:ca:2d:31:
         ea:e2:e8:4b:3e:b7:51:a4:f0:3d:56:5a:9b:c9:00:1b:93:62:
         c9:ee:d0:c0:10:c0:dc:b4:f3:d2:03:60:40:d8:c5:0a:d6:05:
         8c:0e:32:ae:f1:d7:74:01:f6:3e:55:bf:5f:42:63:fd:2a:ec:
         44:28:d6:a3:87:15:18:d4:83:fa:f1:46:83:40:f4:ed:aa:5b:
         b6:5f:27:f1:33:6d:56:fe:ed:66:d2:8c:dd:c4:81:f5:af:2f:
         db:80:27:df:93:97:55:b8:24:54:e8:ec:76:fe:aa:d3:9e:5e:
         20:82:86:6e:f0:fc:2b:20:e3:5b:73:e8:24:ad:e3:e0:1e:e7:
         22:08:cd:00:f2:5d:c6:cd:58:35:7f:86:00:f0:79:b1:a7:1e:
         77:73:62:b7:43:b4:39:0e:59:df:63:04:94:15:34:d9:67:33:
         17:57:b8:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:05:49 2026 by rpki-client