This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233352e302f32342d3234203d3e203536303032.roa
File:                     3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (raw, json)
Hash identifier:          NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=
Subject key identifier:   BC:0A:0B:53:10:F5:6C:67:51:8A:98:75:69:BE:08:22:81:95:DC:0D
Certificate issuer:       /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Certificate serial:       56FD848B90F7AD79D8BE5C6CE725AE5575BEF7AA
Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233352e302f32342d3234203d3e203536303032.roa
Signing time:             Tue 20 Jan 2026 02:20:18 +0000
ROA not before:           Tue 20 Jan 2026 02:15:18 +0000
ROA not after:            Tue 19 Jan 2027 02:20:18 +0000
asID:                     56002
IP address blocks:        103.12.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fd:84:8b:90:f7:ad:79:d8:be:5c:6c:e7:25:ae:55:75:be:f7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
        Validity
            Not Before: Jan 20 02:15:18 2026 GMT
            Not After : Jan 19 02:20:18 2027 GMT
        Subject: CN=BC0A0B5310F56C67518A987569BE08228195DC0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:3d:c0:67:9c:72:3e:a7:6b:56:be:f3:e6:
                    52:35:c0:86:7d:ff:07:85:20:91:e8:08:d4:06:ed:
                    dd:20:26:52:83:5c:b4:73:5e:58:3c:9c:1f:c2:8e:
                    0e:26:c3:f0:45:11:66:e4:3e:62:29:5b:67:4e:9d:
                    b3:bf:94:00:4e:6b:ba:d2:9d:ac:f1:13:34:15:6e:
                    06:07:60:12:99:56:5d:39:a1:49:59:9a:2b:e5:a1:
                    81:77:39:1c:b0:0e:ef:2b:aa:99:05:4d:60:6e:ae:
                    7a:b0:c9:8f:39:2d:4e:b2:b8:37:67:33:0e:55:b8:
                    e9:00:9d:29:0c:fa:9e:b4:70:05:c9:6e:1f:b5:92:
                    d8:46:e0:1e:77:83:35:43:21:5b:d5:03:60:a1:6d:
                    90:fb:57:cb:dd:7b:6d:af:56:3a:f4:d9:66:0a:59:
                    71:bc:24:8a:6f:27:6e:62:b6:26:f4:ab:e8:bf:c0:
                    76:50:d9:78:5a:ca:d7:ca:ba:f5:d6:5d:07:22:b7:
                    28:71:5f:67:e7:5e:7b:a7:b3:1b:9d:48:dc:cd:77:
                    7c:43:fb:4a:34:85:41:da:a1:91:54:54:11:33:b6:
                    6b:5a:72:6e:d4:c3:f9:88:a9:24:48:ee:0c:cd:4d:
                    45:9a:91:7c:2f:5d:b3:13:01:57:f6:9b:5f:b8:d1:
                    9c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0A:0B:53:10:F5:6C:67:51:8A:98:75:69:BE:08:22:81:95:DC:0D
            X509v3 Authority Key Identifier:
                keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/3130332e31322e3233352e302f32342d3234203d3e203536303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:c4:5d:7e:16:e1:52:f7:f3:91:89:39:07:b6:bb:ab:53:b3:
         e6:59:cb:25:4c:90:f4:1b:1d:15:62:98:a7:7d:23:33:4d:c4:
         87:bc:6a:32:fe:72:41:e4:7a:c2:d2:77:55:fc:9b:18:03:fc:
         54:73:5d:13:47:50:6e:8e:07:26:39:33:fb:83:90:9f:33:5e:
         06:c3:bb:56:5a:ea:8e:6b:1b:7b:55:50:ce:fe:12:b6:02:52:
         2c:ee:c1:c2:cf:a6:12:67:b8:50:b1:0d:d2:c9:35:5a:4e:94:
         e5:48:ef:b4:f6:fe:09:f7:33:66:12:6a:e8:d7:0e:42:0c:de:
         0e:f3:81:b8:ea:52:4a:f3:08:54:ee:60:3d:3e:6c:57:3b:6f:
         4d:62:3e:a1:32:eb:c6:2f:a3:88:36:8a:44:a6:bc:c9:a3:03:
         2f:ad:35:a9:ab:c8:d8:3b:43:1e:ef:5f:c1:f8:49:23:11:a0:
         91:bc:39:d3:f5:e4:f2:7a:5c:55:1f:06:14:2b:d2:e2:e8:1e:
         a1:b1:18:a2:53:1b:0d:82:0c:7e:5a:df:cc:8a:aa:89:17:93:
         ad:cf:8e:b7:07:c1:c4:d1:46:ee:4c:77:4e:60:52:69:15:e3:
         3c:15:66:22:a4:5c:e6:0e:df:32:b7:5a:7c:ab:6e:30:08:a6:
         20:22:74:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:32:46 2026 by rpki-client