This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa
File:                     3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier:          hOFFxJZSCtTfa2utTwRhvncMcw1tnlhy0thackZF5dk=
Subject key identifier:   B1:90:4B:4F:87:40:78:D1:CB:AE:4E:88:39:9A:C3:52:96:A0:66:B9
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       4B2B4FDF6AFF046A158DC9BA7A06F3169397D3E1
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa
Signing time:             Tue 20 Jan 2026 02:15:34 +0000
ROA not before:           Tue 20 Jan 2026 02:10:34 +0000
ROA not after:            Tue 19 Jan 2027 02:15:34 +0000
asID:                     23724
IP address blocks:        103.235.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2b:4f:df:6a:ff:04:6a:15:8d:c9:ba:7a:06:f3:16:93:97:d3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jan 20 02:10:34 2026 GMT
            Not After : Jan 19 02:15:34 2027 GMT
        Subject: CN=B1904B4F874078D1CBAE4E88399AC35296A066B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d8:10:46:e0:55:46:e3:50:3e:db:37:24:0c:
                    6b:36:46:60:fe:95:c0:c4:54:22:fc:04:55:84:a7:
                    81:8b:a3:b6:c1:ef:0a:38:04:45:41:bf:d4:91:94:
                    2d:8f:a8:a6:60:21:85:6a:e9:a4:de:b9:02:54:b4:
                    63:28:61:22:79:dc:41:11:9c:08:0c:10:d3:14:ef:
                    ab:41:19:02:86:94:c7:53:07:b3:5e:31:fe:3b:7e:
                    db:a5:21:5a:f5:2b:18:d8:92:f6:bc:ec:c0:0f:0f:
                    42:ca:f0:5c:b7:7b:43:28:03:88:d2:7c:ab:5e:44:
                    74:33:b0:10:73:57:dd:ae:82:d8:41:57:d3:89:44:
                    37:a3:0a:86:27:6f:4d:83:42:13:63:1c:d7:12:ac:
                    56:c7:1d:15:45:8d:a9:a3:ba:79:14:e8:1a:39:20:
                    b7:85:1f:98:55:84:c3:2f:f2:6e:17:e3:04:25:5c:
                    5d:92:c6:57:12:ac:90:94:89:8d:ac:e2:00:6a:91:
                    ce:de:27:4f:32:21:d9:23:22:f3:60:f6:7e:6a:f0:
                    73:f8:e8:f8:17:2e:2d:4a:e4:37:78:a0:0c:e4:ca:
                    07:bc:2f:d3:7b:ad:b4:1b:c5:0d:ba:39:d8:0d:86:
                    a2:25:2a:0b:ae:a8:2e:b8:d9:b4:d7:11:42:45:66:
                    78:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:90:4B:4F:87:40:78:D1:CB:AE:4E:88:39:9A:C3:52:96:A0:66:B9
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:3e:e4:08:fd:a5:ba:86:66:13:1e:73:cc:83:3d:72:88:a7:
         b1:f3:2b:a9:28:87:11:75:87:eb:66:88:26:b0:c7:91:39:49:
         7c:96:8e:b9:b3:ad:59:df:9c:4d:7f:f9:e6:2e:dd:63:eb:e8:
         72:f7:63:7a:63:e2:70:76:59:32:96:22:7e:7f:cc:b9:ce:99:
         91:fe:a2:d8:69:f0:e7:80:60:39:9c:59:95:2b:30:7d:13:c6:
         6d:08:50:50:78:a7:cb:7b:25:9b:64:67:f1:10:7f:5d:e4:2e:
         19:08:12:59:3c:4d:cf:fc:fd:e8:d3:4d:e5:01:20:77:85:d3:
         60:f3:9c:46:9a:c3:2b:bd:f0:cd:2f:25:ee:50:c9:27:62:5c:
         66:88:2d:9d:aa:76:a9:b3:7e:f7:d8:e8:ad:36:00:aa:d2:56:
         a7:c7:dd:bc:b3:88:54:c1:fa:8e:d3:57:89:04:e3:64:21:e3:
         b5:86:cb:d5:e6:4d:05:6b:b5:0b:5b:6a:54:fe:1a:55:52:26:
         c3:50:cb:01:40:93:b3:2e:17:c6:bb:63:e4:f9:95:d8:4b:16:
         bd:ae:82:c0:82:4b:c8:07:89:36:b3:0f:3a:f6:77:4a:15:3c:
         c4:a0:84:f0:ed:74:ce:8e:b8:53:ea:f8:92:a0:e7:30:64:dd:
         ab:58:c5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:35:25 2026 by rpki-client