This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32332d3233203d3e203633363839.roa
File:                     3130332e3230342e37322e302f32332d3233203d3e203633363839.roa (raw, json)
Hash identifier:          SD2wBC2jHeR3elut7L699uxpKnSgtm1+ACORvfH5bj4=
Subject key identifier:   B4:AB:11:A3:73:E4:8D:C5:4D:08:A6:2C:01:C2:7B:8C:13:93:D2:0B
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       636D97855758DDABC0554801359E7F90CEFAFEDB
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32332d3233203d3e203633363839.roa
Signing time:             Tue 20 Jan 2026 02:16:47 +0000
ROA not before:           Tue 20 Jan 2026 02:11:47 +0000
ROA not after:            Tue 19 Jan 2027 02:16:47 +0000
asID:                     63689
IP address blocks:        103.204.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6d:97:85:57:58:dd:ab:c0:55:48:01:35:9e:7f:90:ce:fa:fe:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:47 2026 GMT
            Not After : Jan 19 02:16:47 2027 GMT
        Subject: CN=B4AB11A373E48DC54D08A62C01C27B8C1393D20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:6d:83:67:ad:f8:db:57:db:a2:54:4b:e0:
                    6f:2f:89:f8:bb:e7:b7:be:0a:77:20:a7:bd:7d:7f:
                    f2:ed:57:cd:94:b5:9e:61:66:7b:87:d2:37:6a:44:
                    e2:d3:61:2a:01:86:43:18:cf:cc:11:15:a7:41:36:
                    9f:8a:3d:41:3b:10:f0:73:fb:3e:a6:c3:82:a9:75:
                    df:01:7f:fe:e5:78:60:2b:00:fc:97:7c:53:d8:46:
                    57:3b:9f:9d:58:e2:32:f7:74:23:d9:6c:b9:fa:c2:
                    76:27:6d:e4:76:48:7f:67:fc:b4:70:6c:78:60:d2:
                    04:ff:2e:a7:b5:0f:0a:c6:e6:98:fe:73:90:08:f3:
                    9c:39:c1:6c:27:8d:9a:77:82:5f:09:1b:72:a8:05:
                    be:81:30:15:37:77:17:30:37:63:c1:23:67:a4:f0:
                    a7:37:b0:90:21:6e:dd:89:b3:e2:7d:63:0a:8d:8e:
                    c5:3e:f7:68:7b:b4:e1:a4:cf:38:12:2e:06:d7:82:
                    63:02:37:6d:e3:f2:4c:3e:a0:2e:d2:88:30:67:16:
                    e6:96:ba:b5:71:48:78:8a:c8:e5:63:4b:aa:8e:f9:
                    3c:3a:08:20:67:13:e5:bb:ad:e2:7f:26:8a:c6:9a:
                    15:ac:be:a5:31:e3:b2:56:f1:d0:be:95:7e:c7:2b:
                    09:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AB:11:A3:73:E4:8D:C5:4D:08:A6:2C:01:C2:7B:8C:13:93:D2:0B
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32332d3233203d3e203633363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:9a:9e:c4:e9:4e:09:36:d9:1f:a0:9c:7f:bc:71:52:29:51:
         f2:cd:df:35:0d:d3:b5:af:8f:15:b1:4d:f4:6a:5d:ce:eb:79:
         61:dc:16:29:0b:8a:66:23:28:fd:cd:a7:d7:3d:ff:a8:05:7a:
         99:35:17:4f:83:75:63:35:0c:ea:38:02:ea:60:7b:32:2c:49:
         d5:fc:12:83:9c:ab:e1:ba:31:45:a7:2e:db:3d:4b:78:1f:c0:
         05:6b:4b:12:84:57:b7:ae:76:07:9b:92:48:a4:6e:d2:10:30:
         6a:98:57:45:0e:41:de:1b:1f:83:ff:23:dc:9f:62:21:31:f7:
         53:05:44:48:de:0b:16:9c:8f:35:d2:fc:65:5c:0d:d1:75:2d:
         7d:e0:b6:6e:5e:c5:f0:cd:f8:85:76:b7:01:4b:1f:96:11:ec:
         18:5a:22:d6:86:3a:bc:a8:6d:f5:e3:10:fd:33:1b:1e:d4:6f:
         06:2f:07:d5:d1:4a:6c:54:f2:0c:d4:0c:54:93:04:78:72:b2:
         32:5e:ac:97:21:45:83:82:97:2b:dc:5f:04:65:e6:66:77:ae:
         19:19:70:b9:af:b7:a3:11:c7:f6:b1:fe:e6:59:f7:d3:ab:ac:
         1a:75:8b:3a:d1:a1:f0:c7:e6:40:75:e2:ab:92:bc:f4:43:69:
         bf:54:16:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:12 2026 by rpki-client