This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37342e302f32332d3233203d3e20313332313638.roa
File:                     3130332e3230342e37342e302f32332d3233203d3e20313332313638.roa (raw, json)
Hash identifier:          Q5JgpVYK014z180d8MYSppg6SZT5PWak9nrdnXQNzdg=
Subject key identifier:   BE:DB:CA:06:2D:60:0D:D6:72:1D:1D:B3:A7:44:E7:D7:80:BC:07:A6
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       30DE6261EEB529846E1FA357D31B3BBC9772BB14
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37342e302f32332d3233203d3e20313332313638.roa
Signing time:             Tue 20 Jan 2026 02:16:45 +0000
ROA not before:           Tue 20 Jan 2026 02:11:45 +0000
ROA not after:            Tue 19 Jan 2027 02:16:45 +0000
asID:                     132168
IP address blocks:        103.204.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:de:62:61:ee:b5:29:84:6e:1f:a3:57:d3:1b:3b:bc:97:72:bb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:45 2026 GMT
            Not After : Jan 19 02:16:45 2027 GMT
        Subject: CN=BEDBCA062D600DD6721D1DB3A744E7D780BC07A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:4f:ea:5f:3f:e9:cb:85:34:08:52:df:e0:
                    b1:89:2b:ca:51:00:55:66:57:a6:04:2e:6a:04:cb:
                    35:bb:fb:f5:cf:4f:d5:ae:ca:46:e5:e3:71:17:17:
                    20:39:e4:c9:73:78:79:5a:d6:2b:6c:a2:3c:bf:0f:
                    b1:a0:73:10:0b:6d:3a:6f:fe:ed:d5:22:76:01:52:
                    42:b7:9e:eb:d2:cd:4b:7c:10:f1:6e:bc:98:9d:8f:
                    56:da:98:85:8c:7c:7e:44:b6:35:64:63:6d:6b:f6:
                    46:39:5e:76:80:4a:95:e3:87:c4:dd:29:25:da:cd:
                    26:4f:7e:6a:2b:bc:64:dc:8c:c0:23:a7:3b:55:ae:
                    b3:bb:f4:ed:77:75:14:8d:1a:48:d1:a4:ff:00:74:
                    71:e1:4c:dd:77:60:32:3c:c7:ac:36:de:6b:4b:44:
                    43:1b:f6:b4:56:a6:f7:49:b3:16:f5:31:ac:01:fc:
                    d4:b2:41:e4:e3:7d:6a:bc:c5:83:b3:6c:5f:dc:31:
                    b6:35:a1:38:5e:f3:e6:50:ad:4f:8f:d5:0d:af:f9:
                    24:ec:ca:0c:55:4a:62:cf:a0:8a:ae:74:71:81:2a:
                    28:7e:7e:13:89:4a:f4:37:81:98:b0:b4:ea:4d:e7:
                    89:d4:cf:7b:b6:a4:c5:84:27:27:1e:07:98:ba:79:
                    20:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DB:CA:06:2D:60:0D:D6:72:1D:1D:B3:A7:44:E7:D7:80:BC:07:A6
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37342e302f32332d3233203d3e20313332313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:c2:65:39:20:5c:0a:09:ae:35:57:6e:cd:07:ad:98:56:
         65:25:c8:80:b4:b5:4f:34:a3:8c:45:45:a9:ba:0a:54:59:11:
         3d:83:0f:69:e2:7d:9c:8b:bf:08:22:fb:f3:e9:4e:5a:0b:1a:
         3e:cc:52:7d:a0:b9:21:c1:ad:63:bd:b9:1b:f8:5e:c1:c7:8d:
         13:83:7e:b9:d5:11:b9:24:e6:c7:49:68:ff:4e:61:71:16:dd:
         42:49:92:ac:22:20:31:68:cc:ce:e0:1a:66:dc:d5:bd:0a:4d:
         de:68:89:d3:d3:71:83:55:91:78:7d:ee:8b:7b:e6:36:95:50:
         d3:9b:a0:86:37:eb:1c:de:35:3e:8d:64:bb:64:17:c6:9c:8c:
         c6:15:90:e9:17:18:ed:b7:15:62:74:6e:d0:e0:ee:7c:1c:30:
         57:c8:0e:fe:e0:96:a1:55:0b:1f:22:e1:dc:a3:d4:3e:1c:bf:
         65:1a:82:69:02:cb:85:64:63:02:10:56:44:e5:f2:95:45:06:
         4b:10:87:4a:b6:bf:96:65:47:2a:85:78:63:5f:d8:e8:fa:e9:
         6a:ee:09:1f:6c:2f:98:78:1b:75:ca:df:5d:63:b3:29:e7:e6:
         08:24:b4:0c:0d:86:54:54:84:8b:39:4c:7f:15:0c:be:28:53:
         f2:66:11:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:03 2026 by rpki-client