This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32342d3234203d3e203539303333.roa
File:                     3130332e3230342e37322e302f32342d3234203d3e203539303333.roa (raw, json)
Hash identifier:          P0X1lvovF42m6Vq15ZXVWhi/S+vl/2SiI/YnSwsfeCs=
Subject key identifier:   19:94:1B:CC:AE:1E:73:BF:87:87:D6:17:8A:B9:02:C9:F6:7D:15:20
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       60BC8BF5F6D7BBE55245273F8DD8BEE2E9CF10F0
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32342d3234203d3e203539303333.roa
Signing time:             Tue 20 Jan 2026 02:16:43 +0000
ROA not before:           Tue 20 Jan 2026 02:11:43 +0000
ROA not after:            Tue 19 Jan 2027 02:16:43 +0000
asID:                     59033
IP address blocks:        103.204.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bc:8b:f5:f6:d7:bb:e5:52:45:27:3f:8d:d8:be:e2:e9:cf:10:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:43 2026 GMT
            Not After : Jan 19 02:16:43 2027 GMT
        Subject: CN=19941BCCAE1E73BF8787D6178AB902C9F67D1520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:59:4e:21:ca:c9:0a:5f:5e:0d:6a:c0:8b:
                    51:de:5a:0f:68:66:9c:38:b6:05:25:d6:1f:76:f7:
                    02:bc:7b:39:56:08:8a:e0:3f:4b:d0:b1:8b:6d:65:
                    38:cb:68:8d:a8:5d:88:f7:56:47:e1:27:44:ab:44:
                    4f:4d:9c:90:80:f6:a9:b3:43:f9:14:cc:ed:9e:a9:
                    1f:d9:0a:76:d5:f2:45:65:4b:32:fd:c9:ff:07:24:
                    97:74:12:a8:d7:21:f6:f9:85:ea:02:c1:1a:cb:9a:
                    3f:90:7f:d0:28:f7:27:e4:60:df:cd:35:c7:bc:3c:
                    86:0a:4e:cc:95:11:ac:4c:e3:46:fd:49:37:d9:93:
                    a0:db:d8:b5:7d:1f:2b:f5:fa:2e:d0:5c:23:0f:df:
                    48:e6:77:a9:44:c3:74:9d:28:7d:6a:05:aa:74:07:
                    67:84:96:19:61:8d:60:36:3a:a4:1c:58:8b:d3:21:
                    9d:ff:25:c6:76:e2:38:76:18:c5:62:ff:6c:3e:14:
                    5a:7a:81:e2:4d:2c:01:f4:99:9d:bf:c1:d8:37:61:
                    56:06:57:86:57:27:56:dc:e4:c3:35:c9:65:f0:ec:
                    fa:de:a3:2a:be:39:69:58:e5:48:33:36:47:38:96:
                    c2:f4:98:5b:42:c6:fe:cf:bc:c4:41:6d:db:68:61:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:94:1B:CC:AE:1E:73:BF:87:87:D6:17:8A:B9:02:C9:F6:7D:15:20
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37322e302f32342d3234203d3e203539303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:87:c0:24:cb:d2:ef:29:fa:a0:1c:e3:60:e7:96:80:10:64:
         b2:fa:78:d6:14:16:44:ad:d2:2b:2f:93:8c:99:ba:95:d6:8d:
         45:32:26:9f:f1:29:d2:d8:21:0c:0d:85:36:cf:d4:60:eb:86:
         6c:4c:68:26:c2:87:02:8a:3a:b6:50:f1:4b:0d:a7:64:6f:d5:
         99:1c:6a:68:d6:28:40:15:f8:c8:47:d3:78:f0:a7:60:c1:c8:
         b3:f5:dd:52:1f:66:2c:af:ec:df:24:fa:5a:f1:ec:37:a7:e6:
         6c:d2:67:a3:dd:d4:2e:7f:da:48:6b:b3:4e:9d:f1:cd:05:20:
         cd:48:db:60:ea:93:b8:5a:77:fc:94:df:16:72:38:67:77:b6:
         b7:c0:cb:90:9a:6f:da:a0:66:24:21:c9:1d:a0:a1:7f:53:48:
         09:d8:42:5b:af:48:11:a4:90:4a:95:74:26:91:bf:f2:2b:ef:
         b8:e6:9e:b9:97:38:02:1d:bc:8b:bf:67:c0:5b:ad:8d:0d:79:
         8a:43:0c:8c:6f:ec:2d:76:b2:db:7e:8e:01:8c:f9:94:1c:eb:
         c3:58:5a:bc:63:65:d9:f5:6d:43:1d:45:e9:24:47:69:83:17:
         27:ec:5e:a0:5f:d9:78:c7:34:1a:d4:83:06:32:ed:bf:a5:92:
         0f:62:6d:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:48 2026 by rpki-client