This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e2034383038.roa
File:                     3130332e3233312e36342e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier:          nRRFpOXt7+r1r4HHhB0TdnD+tb4rzqeupmIIbMHWcPY=
Subject key identifier:   7F:CC:E8:71:3B:7A:A0:A5:57:58:61:8D:F0:3C:D7:BA:04:D0:42:45
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       49CFF2E8DB3DBBCD0741F9A7F65C2A9B410171DF
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e2034383038.roa
Signing time:             Tue 20 Jan 2026 02:15:34 +0000
ROA not before:           Tue 20 Jan 2026 02:10:34 +0000
ROA not after:            Tue 19 Jan 2027 02:15:34 +0000
asID:                     4808
IP address blocks:        103.231.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 15:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cf:f2:e8:db:3d:bb:cd:07:41:f9:a7:f6:5c:2a:9b:41:01:71:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jan 20 02:10:34 2026 GMT
            Not After : Jan 19 02:15:34 2027 GMT
        Subject: CN=7FCCE8713B7AA0A55758618DF03CD7BA04D04245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fd:49:38:cd:68:34:a9:10:dd:e5:32:64:cb:
                    da:cc:d2:69:2a:a4:4f:53:31:35:a7:49:12:4b:f6:
                    c1:41:27:17:d5:be:9c:b4:52:bc:cd:ee:b9:51:27:
                    e0:d5:b5:37:3a:b5:e8:cc:db:87:75:80:1e:66:a0:
                    04:f2:ac:8c:2f:ca:80:98:21:1d:39:90:bf:7a:eb:
                    ee:dd:66:40:24:cd:99:52:01:97:d0:4d:e2:f7:6b:
                    40:2c:c1:6d:5f:c2:7d:cf:b8:de:c7:25:e3:5f:48:
                    a0:c3:42:69:1e:3a:39:b0:14:a3:91:62:22:be:8c:
                    0e:3a:98:60:be:08:10:f8:26:a6:85:ef:dc:f9:93:
                    de:c3:2a:9b:7e:b9:4f:51:05:44:f3:eb:ce:f3:ad:
                    3d:1d:a7:df:94:e7:6d:62:3b:7e:11:fd:9c:a0:a7:
                    3f:3a:9e:d0:0b:bc:10:69:74:53:f0:3d:ff:82:4f:
                    87:4a:5e:48:f0:34:2a:dd:c3:87:ba:47:1f:7d:0c:
                    62:c3:04:08:26:cc:ed:57:21:b6:b8:34:64:b6:de:
                    86:bd:9b:af:cc:02:8f:a8:5a:7a:2a:ef:b5:e8:63:
                    cb:b9:e1:71:e1:8d:a9:b7:c1:18:b4:df:c7:b6:18:
                    92:0b:2b:e6:e0:89:7d:1e:68:c6:b5:e8:38:c1:8b:
                    76:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CC:E8:71:3B:7A:A0:A5:57:58:61:8D:F0:3C:D7:BA:04:D0:42:45
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:81:23:56:ed:f2:a0:26:2e:17:ce:61:3a:b7:07:a1:27:3d:
         7a:a8:c2:10:60:8d:43:c2:13:5b:88:b9:bb:97:dc:86:88:2d:
         aa:26:9d:d4:36:75:59:4d:4b:cc:a7:c6:f6:21:23:c1:05:fc:
         0b:e8:d2:96:3d:35:5e:4b:08:b6:94:1b:72:cf:04:cb:ae:b5:
         96:6d:06:e3:ba:87:a7:67:f7:ca:bc:28:25:89:9b:7b:e6:a1:
         4b:84:84:50:f7:57:17:d5:e8:8a:ae:e0:cb:2a:39:09:46:99:
         7a:75:a0:f6:15:b3:92:26:7e:99:62:96:1a:b1:81:a4:5f:da:
         fb:ed:69:ec:66:61:d9:0d:28:63:47:ed:68:8a:c3:2b:ad:8e:
         02:4e:67:c7:68:dd:dd:a0:ac:c0:02:ac:36:70:22:21:10:94:
         91:34:dc:fd:09:ab:35:b0:54:e5:de:22:ca:1f:d4:ca:2b:c8:
         09:79:eb:51:1c:78:9c:00:b3:5f:f8:8a:0e:90:a4:3b:9b:e1:
         ca:3a:c2:83:6f:8c:45:92:73:9c:38:0b:17:04:ee:50:85:a4:
         cc:98:4a:73:23:f2:2b:b5:31:3d:a1:91:96:82:d2:d7:b8:ef:
         11:45:bd:74:38:17:b4:a9:47:18:71:90:52:a3:3b:41:bd:59:
         e7:2e:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:53:01 2026 by rpki-client