This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138342e302f32342d3234203d3e203539303433.roa
File:                     3130332e35362e3138342e302f32342d3234203d3e203539303433.roa (raw, json)
Hash identifier:          hmhm/J6fR0cLjZz5lcB7aw6zPjy50dHaMavZ+vQXS/E=
Subject key identifier:   BA:3F:F9:94:2B:36:DC:4D:F5:33:90:E1:BB:02:AC:E0:49:3A:2A:C2
Certificate issuer:       /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial:       1CA812D0003ECECE94A2D06E21DE929ADCE87DC3
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138342e302f32342d3234203d3e203539303433.roa
Signing time:             Tue 20 Jan 2026 02:18:08 +0000
ROA not before:           Tue 20 Jan 2026 02:13:08 +0000
ROA not after:            Tue 19 Jan 2027 02:18:08 +0000
asID:                     59043
IP address blocks:        103.56.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a8:12:d0:00:3e:ce:ce:94:a2:d0:6e:21:de:92:9a:dc:e8:7d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
        Validity
            Not Before: Jan 20 02:13:08 2026 GMT
            Not After : Jan 19 02:18:08 2027 GMT
        Subject: CN=BA3FF9942B36DC4DF53390E1BB02ACE0493A2AC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:a7:82:b1:b4:62:b9:21:76:4c:01:db:c5:
                    a0:0b:64:23:e4:5c:f3:c2:86:50:41:e8:b0:00:c4:
                    8a:16:96:76:1a:dd:5f:32:45:a9:52:58:bc:44:a9:
                    c4:a2:dd:6e:da:9e:51:11:16:29:ae:91:69:ee:70:
                    4b:53:35:72:60:87:a1:d0:9c:bb:36:79:a8:16:ca:
                    dc:99:6a:08:70:15:77:06:13:01:3f:95:c2:1a:00:
                    88:05:86:a1:99:e1:6e:d6:7f:34:79:0a:38:b2:0f:
                    b0:23:c8:29:31:71:f1:56:0e:00:de:ac:d6:93:cc:
                    d3:3e:06:ea:cd:12:98:c8:08:37:c6:e3:ae:d2:dd:
                    37:aa:8f:2c:c1:f6:98:2e:35:d8:e7:89:f7:b9:4e:
                    f9:b8:70:ae:98:73:44:1d:da:79:da:07:b7:c2:64:
                    66:f4:82:af:a2:57:c1:03:e8:6b:30:64:c3:02:5b:
                    be:89:d6:55:32:5a:5c:84:17:23:30:30:ec:63:6d:
                    50:1e:2e:14:c5:00:da:42:ed:c3:75:74:b5:b6:31:
                    8c:2b:72:42:22:7a:e9:50:e9:3e:70:1d:db:94:1b:
                    61:7d:ea:39:2f:b9:27:9a:e1:41:7d:0a:0b:ac:ec:
                    39:57:2f:b6:5d:c7:13:b3:5a:a6:78:e6:94:60:eb:
                    78:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3F:F9:94:2B:36:DC:4D:F5:33:90:E1:BB:02:AC:E0:49:3A:2A:C2
            X509v3 Authority Key Identifier:
                keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e3138342e302f32342d3234203d3e203539303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:5b:8b:3a:7f:a4:96:2f:b9:88:1e:cb:85:65:30:63:83:b6:
         96:c2:68:07:b0:cc:d6:c6:dd:06:5c:2a:e1:b2:bc:5b:89:64:
         db:d3:2e:8c:4d:0c:de:0f:bb:3a:00:35:f6:6e:cb:af:53:c7:
         f7:66:fa:1d:a9:b6:d8:e8:e9:ad:dc:41:b0:51:5b:2e:33:f0:
         a6:f8:ec:a4:e4:d4:f4:52:1d:df:22:ab:d8:00:ca:61:07:9f:
         1b:49:e9:59:ac:ba:f6:99:3b:41:6f:07:76:d1:b5:fd:29:c7:
         65:ee:2a:51:92:c9:5b:d5:21:68:8f:e2:80:40:fe:67:b5:76:
         f3:95:c7:8e:1d:1f:fc:9a:cb:53:87:5b:9c:f2:86:03:18:42:
         cd:06:3e:1a:65:a1:94:c9:f1:e6:3e:7c:c8:13:c5:57:15:f5:
         40:c4:3e:a7:8b:cd:73:39:b0:2d:a8:63:02:8a:79:36:f7:68:
         a5:05:e7:97:0d:53:0e:b8:5f:10:32:0e:75:3c:14:0e:3e:e2:
         86:a0:7a:7a:d6:9b:9d:36:a6:ba:d6:8f:3d:ef:87:fa:92:97:
         68:4f:98:78:b4:15:7c:31:2a:ed:29:14:29:4c:29:3e:8b:1a:
         9d:06:86:81:fc:bd:b3:9b:5e:f6:bb:5d:e6:54:e1:84:24:c7:
         35:91:c2:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:53 2026 by rpki-client