This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa
File:                     3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier:          6HkpCfuvi7d2b5JTtXvx5y5uDPvD3zn+PFyvB7H8AaI=
Subject key identifier:   57:15:4A:20:82:B8:50:00:83:69:AF:FE:3E:25:08:DD:E3:40:CC:B3
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       1790C6A6F37898F9C8113785597B81604E5BDAC4
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa
Signing time:             Tue 20 Jan 2026 02:15:35 +0000
ROA not before:           Tue 20 Jan 2026 02:10:35 +0000
ROA not after:            Tue 19 Jan 2027 02:15:35 +0000
asID:                     23724
IP address blocks:        103.235.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:90:c6:a6:f3:78:98:f9:c8:11:37:85:59:7b:81:60:4e:5b:da:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jan 20 02:10:35 2026 GMT
            Not After : Jan 19 02:15:35 2027 GMT
        Subject: CN=57154A2082B850008369AFFE3E2508DDE340CCB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:68:da:56:f0:4b:ab:d0:39:e3:73:27:65:
                    f7:c2:09:b9:d3:a2:8d:c9:a1:ee:40:d9:e3:ac:b6:
                    0a:59:48:27:90:92:3a:38:85:be:39:a9:c0:1b:8c:
                    91:29:48:87:7e:8f:50:4c:4e:b5:c7:f5:fe:89:38:
                    98:a6:b1:d6:29:95:d9:83:48:c9:72:49:54:49:b1:
                    d0:d6:cc:ad:5c:97:b1:03:8a:98:bc:07:5a:12:86:
                    57:ea:1c:40:b4:4d:75:09:72:31:eb:1d:17:49:ab:
                    f6:06:b8:c3:b9:da:4a:87:71:0c:18:b7:fe:9c:33:
                    79:93:c9:94:91:9b:d2:f2:26:24:e1:45:23:68:ba:
                    d3:c8:6e:d7:ba:71:05:a9:8e:73:54:dc:3a:bc:cd:
                    1a:e1:e2:25:6e:79:ba:3b:52:6e:fc:76:03:7b:b6:
                    ea:1a:c0:b0:04:a3:c5:ed:9e:82:5b:e7:5c:1e:da:
                    b7:66:69:6b:92:94:19:7d:8b:6f:ab:29:ff:42:eb:
                    b5:01:ed:7b:30:12:d2:c6:43:d5:99:0b:d5:2b:7b:
                    a2:53:0d:b9:a9:8d:f4:7b:93:da:eb:d8:6b:5b:4d:
                    c4:d7:b7:1c:7f:6d:04:ce:9a:c4:b5:b1:8b:bc:1b:
                    b2:6c:d3:33:ea:10:08:6e:d1:8b:71:75:8b:d0:31:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:15:4A:20:82:B8:50:00:83:69:AF:FE:3E:25:08:DD:E3:40:CC:B3
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:bb:1a:19:e5:57:96:e3:b0:1f:55:0c:43:e4:20:9e:0b:01:
         61:20:93:fc:fc:86:aa:dc:3c:6b:f5:d1:22:50:70:8f:3d:96:
         97:ac:d2:79:d5:84:39:50:66:a3:98:4b:fd:b2:f2:61:85:a2:
         7b:01:bb:7b:77:cc:c6:f6:bf:ee:11:54:c5:1a:86:e8:09:1e:
         82:82:de:b1:ac:2f:25:e1:87:2e:c8:80:b5:63:26:d9:70:d8:
         e8:40:72:03:4e:45:f5:11:99:8c:6a:d9:17:cf:e6:41:24:77:
         10:ed:1f:5f:2e:02:2a:71:1f:60:69:b3:12:24:58:4d:cb:fe:
         fb:d7:a4:28:c6:78:8a:50:52:9f:13:9e:1e:94:9c:69:e2:8f:
         a1:c0:85:88:5e:1e:fe:10:d0:66:49:a0:dc:3c:09:dd:d5:83:
         de:fe:a1:6c:40:4c:27:9d:21:af:c0:eb:16:6e:6c:03:6f:a4:
         ff:14:e6:47:b7:a5:ce:b7:7c:43:1d:c6:59:98:cc:b6:21:b1:
         47:ed:77:ec:e8:2e:82:00:7e:6a:7a:c3:5f:8e:20:8a:73:58:
         76:72:bb:60:77:23:3b:bc:53:f0:63:14:ae:df:46:b8:e1:25:
         00:35:e8:3c:67:a4:aa:c1:24:5f:03:3a:15:b6:9f:61:84:92:
         f1:5b:7c:30
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUF5DGpvN4mPnIETeFWXuBYE5b2sQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjAxMjAwMjEwMzVaFw0yNzAxMTkwMjE1MzVaMDMxMTAvBgNV
BAMTKDU3MTU0QTIwODJCODUwMDA4MzY5QUZGRTNFMjUwOERERTM0MENDQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZWjaVvBLq9A543MnZffCCbnT
oo3Joe5A2eOstgpZSCeQkjo4hb45qcAbjJEpSId+j1BMTrXH9f6JOJimsdYpldmD
SMlySVRJsdDWzK1cl7EDipi8B1oShlfqHEC0TXUJcjHrHRdJq/YGuMO52kqHcQwY
t/6cM3mTyZSRm9LyJiThRSNoutPIbte6cQWpjnNU3Dq8zRrh4iVuebo7Um78dgN7
tuoawLAEo8XtnoJb51we2rdmaWuSlBl9i2+rKf9C67UB7XswEtLGQ9WZC9Ure6JT
DbmpjfR7k9rr2GtbTcTXtxx/bQTOmsS1sYu8G7Js0zPqEAhu0YtxdYvQMS3DAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUVxVKIIK4UACDaa/+PiUI3eNAzLMwHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC8zMTMwMzMyZTMy
MzMzNTJlMzIzMzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzM3MzIzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfr6DANBgkqhkiG9w0BAQsFAAOCAQEAorsaGeVXluOwH1UMQ+Qg
ngsBYSCT/PyGqtw8a/XRIlBwjz2Wl6zSedWEOVBmo5hL/bLyYYWiewG7e3fMxva/
7hFUxRqG6AkegoLesawvJeGHLsiAtWMm2XDY6EByA05F9RGZjGrZF8/mQSR3EO0f
Xy4CKnEfYGmzEiRYTcv++9ekKMZ4ilBSnxOeHpScaeKPocCFiF4e/hDQZkmg3DwJ
3dWD3v6hbEBMJ50hr8DrFm5sA2+k/xTmR7elzrd8Qx3GWZjMtiGxR+137OguggB+
anrDX44ginNYdnK7YHcjO7xT8GMUrt9GuOElADXoPGekqsEkXwM6FbafYYSS8Vt8
MA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:35:17 2026 by rpki-client