This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/3130332e35362e32302e302f32322d3232203d3e203539303232.roa
File:                     3130332e35362e32302e302f32322d3232203d3e203539303232.roa (raw, json)
Hash identifier:          XqU+wlfWMeRYQpyFcOjqN7ncb39PGujTVpajP8KMuUQ=
Subject key identifier:   90:5E:7D:B2:14:D7:9C:00:3D:D5:2D:6F:5F:DE:C7:F8:B8:2B:99:4E
Certificate issuer:       /CN=4155439EEB77ED19E3031F638A8E633394279977
Certificate serial:       5101AD389C2E5239FC059E71BE9F86C4DA68EE04
Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/3130332e35362e32302e302f32322d3232203d3e203539303232.roa
Signing time:             Tue 20 Jan 2026 02:24:52 +0000
ROA not before:           Tue 20 Jan 2026 02:19:52 +0000
ROA not after:            Tue 19 Jan 2027 02:24:52 +0000
asID:                     59022
IP address blocks:        103.56.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:01:ad:38:9c:2e:52:39:fc:05:9e:71:be:9f:86:c4:da:68:ee:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977
        Validity
            Not Before: Jan 20 02:19:52 2026 GMT
            Not After : Jan 19 02:24:52 2027 GMT
        Subject: CN=905E7DB214D79C003DD52D6F5FDEC7F8B82B994E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dc:82:67:16:0f:2c:40:e8:96:7e:4a:59:c7:
                    97:42:72:64:94:46:40:09:69:3d:52:da:95:d4:92:
                    26:f4:10:f6:a8:71:49:31:0b:e2:c7:27:13:10:d7:
                    8f:90:7c:ad:e1:44:65:88:18:c8:f6:dd:68:ad:f0:
                    1c:e9:26:fd:15:c1:57:6b:f5:60:84:30:05:a6:00:
                    59:f8:08:91:b3:c4:d8:4e:02:96:6e:6d:d5:ab:6d:
                    b3:d8:e2:4b:80:dd:96:f1:89:91:e6:ce:df:23:86:
                    16:20:0f:03:d5:f1:86:64:86:bc:d5:65:0a:c7:57:
                    b9:92:86:25:da:7f:75:a7:6f:c8:d6:16:54:e6:03:
                    3e:a1:b1:12:9c:00:19:e5:a7:d7:4b:8d:50:36:bc:
                    b6:50:71:7f:64:59:ac:1a:9b:22:de:a0:56:67:a6:
                    43:e0:81:63:48:43:6c:bb:79:fa:79:19:4b:b9:c5:
                    2b:59:de:d9:89:db:75:9e:9f:45:6e:be:40:bf:56:
                    aa:9d:1a:18:af:3d:54:1c:e9:67:b7:77:9c:b7:b2:
                    cd:4e:58:84:86:d0:02:42:fd:90:09:06:92:6e:08:
                    73:13:d6:ad:ec:d2:ad:c5:57:36:8a:1c:80:50:98:
                    5b:b1:e9:f3:41:ed:4f:b5:4e:5c:f2:6c:81:9b:55:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5E:7D:B2:14:D7:9C:00:3D:D5:2D:6F:5F:DE:C7:F8:B8:2B:99:4E
            X509v3 Authority Key Identifier:
                keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/3130332e35362e32302e302f32322d3232203d3e203539303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:d1:ce:0f:9d:54:16:28:d1:c1:6c:90:66:bb:f5:e8:78:a8:
         ff:02:53:ff:1f:01:5c:b7:3c:96:0e:db:a8:86:69:c6:03:23:
         5f:82:72:a9:2b:d7:32:51:ba:b0:e3:52:de:a2:9f:57:d7:c2:
         e0:c6:cc:54:d9:31:e2:c0:cc:33:84:35:42:9b:5d:d6:9c:6e:
         41:2a:75:88:de:24:80:ef:2d:41:64:69:93:3e:d5:5c:f3:b4:
         53:af:76:1e:f0:7b:f4:37:bc:d3:fd:4d:bc:74:33:88:f1:7b:
         94:c9:3b:41:72:ff:59:f9:d5:55:83:45:fc:06:50:83:d7:60:
         24:96:26:26:6b:ad:98:3b:aa:7b:64:bd:2f:04:42:e9:19:08:
         7d:40:13:f9:fa:03:4a:c8:db:72:37:41:f6:4f:e4:38:4b:dc:
         8e:d5:07:24:fd:48:c1:62:a9:19:6b:72:10:d9:a7:ba:e1:4c:
         b5:b2:d2:b8:82:69:76:10:81:39:63:20:18:e4:31:2c:1f:a6:
         1d:5c:ca:eb:0b:3d:d1:97:c5:b6:18:a9:19:7f:00:d6:aa:7b:
         78:02:61:67:7a:34:78:9b:2e:ce:12:4e:b9:f3:d0:fa:80:14:
         e8:f8:d0:56:85:fa:0e:90:1d:61:f2:2b:05:b0:c9:f9:37:48:
         aa:df:60:ab
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUUQGtOJwuUjn8BZ5xvp+GxNpo7gQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5
NDI3OTk3NzAeFw0yNjAxMjAwMjE5NTJaFw0yNzAxMTkwMjI0NTJaMDMxMTAvBgNV
BAMTKDkwNUU3REIyMTRENzlDMDAzREQ1MkQ2RjVGREVDN0Y4QjgyQjk5NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ3IJnFg8sQOiWfkpZx5dCcmSU
RkAJaT1S2pXUkib0EPaocUkxC+LHJxMQ14+QfK3hRGWIGMj23Wit8BzpJv0VwVdr
9WCEMAWmAFn4CJGzxNhOApZubdWrbbPY4kuA3ZbxiZHmzt8jhhYgDwPV8YZkhrzV
ZQrHV7mShiXaf3Wnb8jWFlTmAz6hsRKcABnlp9dLjVA2vLZQcX9kWawamyLeoFZn
pkPggWNIQ2y7efp5GUu5xStZ3tmJ23Wen0VuvkC/VqqdGhivPVQc6We3d5y3ss1O
WISG0AJC/ZAJBpJuCHMT1q3s0q3FVzaKHIBQmFux6fNB7U+1TlzybIGbVVvNAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUkF59shTXnAA91S1vX97H+LgrmU4wHwYDVR0j
BBgwFoAUQVVDnut37RnjAx9jio5jM5QnmXcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDg1MTMzMS8wLzQxNTU0MzlFRUI3N0VEMTlFMzAzMUY2MzhBOEU2
MzMzOTQyNzk5NzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5NDI3OTk3Ny5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0ODUxMzMxLzAvMzEzMDMzMmUzNTM2
MmUzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzIzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmc4FDANBgkqhkiG9w0BAQsFAAOCAQEAtNHOD51UFijRwWyQZrv16Hio/wJT
/x8BXLc8lg7bqIZpxgMjX4JyqSvXMlG6sONS3qKfV9fC4MbMVNkx4sDMM4Q1Qptd
1pxuQSp1iN4kgO8tQWRpkz7VXPO0U692HvB79De80/1NvHQziPF7lMk7QXL/WfnV
VYNF/AZQg9dgJJYmJmutmDuqe2S9LwRC6RkIfUAT+foDSsjbcjdB9k/kOEvcjtUH
JP1IwWKpGWtyENmnuuFMtbLSuIJpdhCBOWMgGOQxLB+mHVzK6ws90ZfFthipGX8A
1qp7eAJhZ3o0eJsuzhJOufPQ+oAU6PjQVoX6DpAdYfIrBbDJ+TdIqt9gqw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:52:01 2026 by rpki-client