This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37342e302f32342d3234203d3e20313332313638.roa
File:                     3130332e3230342e37342e302f32342d3234203d3e20313332313638.roa (raw, json)
Hash identifier:          hqGsr3c/Y/5CnpeO3yxcp93A+hg9bWg5hsmCtX7HHrs=
Subject key identifier:   FD:F7:5C:33:AB:FC:37:3E:E9:28:E7:77:4B:2D:87:84:AD:C9:3B:FF
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       499D3309F49F8701668498E294AA48B78FCFB110
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37342e302f32342d3234203d3e20313332313638.roa
Signing time:             Tue 20 Jan 2026 02:16:46 +0000
ROA not before:           Tue 20 Jan 2026 02:11:46 +0000
ROA not after:            Tue 19 Jan 2027 02:16:46 +0000
asID:                     132168
IP address blocks:        103.204.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9d:33:09:f4:9f:87:01:66:84:98:e2:94:aa:48:b7:8f:cf:b1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:46 2026 GMT
            Not After : Jan 19 02:16:46 2027 GMT
        Subject: CN=FDF75C33ABFC373EE928E7774B2D8784ADC93BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:27:4e:ac:7a:fc:3a:00:ad:57:89:56:0e:
                    f4:6b:39:85:02:4d:11:fa:a9:f2:35:97:d1:a6:f2:
                    23:20:be:7a:16:ac:c9:20:dd:a5:98:e9:35:f5:ba:
                    40:cc:f6:50:85:97:5d:47:87:84:da:b4:c2:2a:e7:
                    d0:da:de:eb:fe:ac:0f:05:a8:d1:28:d3:4c:0c:33:
                    3d:28:93:d6:60:3a:8f:c0:3d:17:04:22:7f:b1:7d:
                    9d:d6:56:11:92:67:0c:a8:d6:c2:66:5d:ba:06:e3:
                    01:1c:c4:4f:87:ea:55:e6:68:af:b1:9a:85:73:c4:
                    13:f9:82:a5:0f:a8:a3:d3:37:47:62:63:a1:c7:95:
                    d0:3a:9a:88:0b:e9:96:65:e0:f9:59:fb:df:9c:74:
                    ac:ad:e3:e4:bb:8f:8d:b1:97:95:08:7c:94:7d:f1:
                    2b:4f:a2:0e:a8:59:97:49:6e:43:f4:2a:a3:c0:3d:
                    79:f6:6c:0e:dd:93:54:f8:6b:65:2e:3e:a5:e4:a8:
                    d2:85:f5:e5:7a:bd:85:a0:fe:87:22:24:34:d8:d7:
                    4b:1b:89:56:4d:c0:58:8e:0d:73:e2:40:e9:a1:8b:
                    4d:2b:2a:5a:4a:c6:0d:75:6c:d6:43:e9:98:25:ea:
                    33:41:da:25:1d:be:6d:d7:d9:07:d3:9c:5f:b6:f6:
                    15:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F7:5C:33:AB:FC:37:3E:E9:28:E7:77:4B:2D:87:84:AD:C9:3B:FF
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37342e302f32342d3234203d3e20313332313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:bb:9f:f0:4d:40:73:d0:87:e3:d2:a9:38:97:f2:60:b6:82:
         c7:d1:93:e4:86:20:3c:4d:ba:76:3b:3a:66:6f:73:d2:ac:84:
         d7:d2:53:e2:15:73:12:82:63:06:ee:88:0d:61:42:ce:e3:3e:
         dc:8b:25:56:b9:24:36:10:ef:29:08:91:aa:4e:ca:2a:05:29:
         eb:bd:98:a4:5a:24:cf:4f:cb:de:ce:a8:da:39:f2:30:b8:20:
         64:2e:01:6b:0d:b2:75:8a:72:ee:96:2d:07:34:82:c2:ec:3f:
         e9:0d:e2:c1:8e:77:2e:69:70:c9:20:b1:3a:43:45:70:e6:3e:
         70:b1:1a:ba:48:7c:5a:98:78:dc:6e:73:34:43:eb:aa:27:86:
         4d:94:1c:bc:80:69:4f:3c:45:6f:2d:6a:f8:e8:df:0a:26:34:
         9e:7b:5b:21:d6:f5:bc:da:88:cc:34:ac:c6:5e:b3:f7:f8:87:
         cb:4d:e2:a6:33:8d:73:06:35:1c:1f:77:48:5d:12:20:6c:16:
         61:05:5f:3a:4d:5b:e4:97:a5:23:b3:12:ae:a9:c1:9c:38:72:
         14:55:bf:c6:a4:60:cf:0b:8b:3f:cb:34:31:96:f8:a7:0c:db:
         75:a2:16:b3:97:3a:1f:c3:a7:71:3e:94:01:a9:de:07:72:ea:
         7c:dd:57:92
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUSZ0zCfSfhwFmhJjilKpIt4/PsRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3
RkU5MTM0RDAeFw0yNjAxMjAwMjExNDZaFw0yNzAxMTkwMjE2NDZaMDMxMTAvBgNV
BAMTKEZERjc1QzMzQUJGQzM3M0VFOTI4RTc3NzRCMkQ4Nzg0QURDOTNCRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPSdOrHr8OgCtV4lWDvRrOYUC
TRH6qfI1l9Gm8iMgvnoWrMkg3aWY6TX1ukDM9lCFl11Hh4TatMIq59Da3uv+rA8F
qNEo00wMMz0ok9ZgOo/APRcEIn+xfZ3WVhGSZwyo1sJmXboG4wEcxE+H6lXmaK+x
moVzxBP5gqUPqKPTN0diY6HHldA6mogL6ZZl4PlZ+9+cdKyt4+S7j42xl5UIfJR9
8StPog6oWZdJbkP0KqPAPXn2bA7dk1T4a2UuPqXkqNKF9eV6vYWg/ociJDTY10sb
iVZNwFiODXPiQOmhi00rKlpKxg11bNZD6Zgl6jNB2iUdvm3X2QfTnF+29hWvAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU/fdcM6v8Nz7pKOd3Sy2HhK3JO/8wHwYDVR0j
BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0
QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5MTY4NjcvMC8zMTMwMzMyZTMy
MzAzNDJlMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjMxMzYzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfMSjANBgkqhkiG9w0BAQsFAAOCAQEARruf8E1Ac9CH49KpOJfy
YLaCx9GT5IYgPE26djs6Zm9z0qyE19JT4hVzEoJjBu6IDWFCzuM+3IslVrkkNhDv
KQiRqk7KKgUp672YpFokz0/L3s6o2jnyMLggZC4Baw2ydYpy7pYtBzSCwuw/6Q3i
wY53LmlwySCxOkNFcOY+cLEaukh8Wph43G5zNEPrqieGTZQcvIBpTzxFby1q+Ojf
CiY0nntbIdb1vNqIzDSsxl6z9/iHy03ipjONcwY1HB93SF0SIGwWYQVfOk1b5Jel
I7MSrqnBnDhyFFW/xqRgzwuLP8s0MZb4pwzbdaIWs5c6H8OncT6UAaneB3LqfN1X
kg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:46 2026 by rpki-client