This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e203536323832.roa
File:                     3130332e3233312e36342e302f32322d3232203d3e203536323832.roa (raw, json)
Hash identifier:          uXsXBVMLc9CSkdwbGdKuhtgJxCWm9r/OJld+/XbAd2Y=
Subject key identifier:   C5:5A:6A:0E:49:03:92:1B:A8:3E:91:48:7D:0C:0C:C9:59:82:A5:0D
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       4FEB6C98D12A7E447C6A831ED0094EB7CD752824
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e203536323832.roa
Signing time:             Tue 20 Jan 2026 02:15:35 +0000
ROA not before:           Tue 20 Jan 2026 02:10:35 +0000
ROA not after:            Tue 19 Jan 2027 02:15:35 +0000
asID:                     56282
IP address blocks:        103.231.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:eb:6c:98:d1:2a:7e:44:7c:6a:83:1e:d0:09:4e:b7:cd:75:28:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jan 20 02:10:35 2026 GMT
            Not After : Jan 19 02:15:35 2027 GMT
        Subject: CN=C55A6A0E4903921BA83E91487D0C0CC95982A50D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:b3:c0:ca:a5:28:34:b1:7b:85:05:06:8a:
                    4c:7f:84:90:9d:3f:c0:35:17:8c:9c:5e:47:25:1a:
                    47:f1:cc:77:dc:b9:b6:80:74:ef:9e:54:61:39:83:
                    28:32:7c:fb:be:67:00:86:29:9d:25:54:90:b6:39:
                    09:ed:12:8b:f0:dd:30:48:f9:db:3a:93:76:f1:69:
                    58:9e:4a:9a:6a:4c:89:2e:dc:0e:5a:67:5a:db:44:
                    dc:41:5b:47:fd:52:3a:3d:a7:00:45:71:6a:c5:73:
                    d1:7b:76:bb:99:96:14:0a:85:53:2d:ae:77:a4:1c:
                    6b:ef:79:6c:5e:fe:03:4d:a8:0a:be:47:b3:6b:2d:
                    44:51:e0:64:73:98:cf:ec:65:5b:80:f8:41:50:35:
                    b5:37:20:d9:a3:37:19:9b:7f:75:26:f5:54:7e:fc:
                    ae:ea:24:8f:08:9b:eb:5b:ae:46:2f:e8:d5:f9:1d:
                    ac:70:27:3c:3e:3b:f8:25:81:ea:51:8b:1b:89:f4:
                    f9:b7:30:ec:3b:9d:1f:77:e4:a9:2a:e8:a6:d3:c2:
                    da:f5:51:c9:e3:79:86:e1:0c:31:46:75:52:95:69:
                    ef:02:e1:ca:cc:c2:aa:83:ec:0b:ed:f6:72:0f:19:
                    7f:60:59:22:ad:c2:4f:8d:14:2e:a9:ea:a3:70:af:
                    1c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5A:6A:0E:49:03:92:1B:A8:3E:91:48:7D:0C:0C:C9:59:82:A5:0D
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:10:6e:9f:11:bf:72:00:77:97:19:70:c8:01:9e:b0:d8:58:
         6b:6b:6f:12:72:92:81:21:e0:73:63:a1:c1:86:95:fb:0a:1d:
         75:7d:78:e4:8f:23:2d:3e:07:cc:61:6e:b1:20:b1:ef:cf:12:
         ca:85:67:8f:45:4d:36:aa:4e:ef:53:86:a0:d5:00:0c:38:a6:
         79:3a:74:44:fd:57:2e:6f:71:8e:92:de:60:24:d8:48:e6:11:
         7e:98:2b:58:5d:b3:5d:d6:69:e0:9f:ba:9d:d0:33:e5:3e:19:
         ca:57:38:42:9a:86:01:5f:94:37:09:60:44:56:31:f8:bc:b6:
         05:6c:ac:31:ae:02:e8:1e:7b:64:35:07:b0:89:6e:2f:c8:d7:
         53:32:6f:ef:37:b4:f8:b6:88:ad:b5:cd:58:51:7a:93:18:13:
         5a:94:fb:6d:79:49:b7:bd:49:ba:f7:ff:d2:b7:be:5f:0a:68:
         4c:b1:97:84:2a:54:4a:69:35:1e:29:02:3d:39:b8:a2:fa:ab:
         bd:54:da:1e:21:92:0c:8b:d3:e2:b8:0f:42:95:ae:0a:d1:fc:
         8e:cb:41:ad:4d:a3:7c:64:c0:76:38:85:1c:a5:0b:df:1b:cb:
         5f:b2:ab:01:57:42:6e:be:1e:55:66:57:a6:e0:5e:9b:12:32:
         ad:e6:ad:8e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:54:52 2026 by rpki-client