This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37342e302f32342d3234203d3e203539303333.roa
File:                     3130332e3230342e37342e302f32342d3234203d3e203539303333.roa (raw, json)
Hash identifier:          +Fullg6dHQ/RJJYVeTSD5iEaLLPp03nh1O/xi2sUamc=
Subject key identifier:   6B:8E:24:0A:C6:F8:8E:03:2C:D7:99:B2:43:C5:5E:F8:45:77:92:B2
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       3818BC85E6720E3015E299C2024D2951F3073849
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37342e302f32342d3234203d3e203539303333.roa
Signing time:             Tue 20 Jan 2026 02:16:43 +0000
ROA not before:           Tue 20 Jan 2026 02:11:43 +0000
ROA not after:            Tue 19 Jan 2027 02:16:43 +0000
asID:                     59033
IP address blocks:        103.204.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:18:bc:85:e6:72:0e:30:15:e2:99:c2:02:4d:29:51:f3:07:38:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:43 2026 GMT
            Not After : Jan 19 02:16:43 2027 GMT
        Subject: CN=6B8E240AC6F88E032CD799B243C55EF8457792B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:62:b4:6b:92:4e:0a:a3:5b:78:9d:57:aa:
                    69:ec:de:b2:f6:c9:f7:68:4a:1e:d9:81:aa:e1:9a:
                    e4:cd:5b:30:3b:73:07:c4:72:32:bc:3e:3b:b6:0f:
                    f6:1a:ff:70:e4:50:f9:76:09:95:fb:d3:02:c5:81:
                    3a:e2:99:85:ce:d4:79:30:4e:8c:ea:dc:b9:99:7c:
                    54:17:94:13:b6:d8:0e:2f:61:c5:f1:ee:26:7e:ff:
                    2f:40:8f:e5:1f:a9:94:58:9f:61:f7:93:2b:b7:17:
                    e3:32:d3:3f:14:f8:8c:f6:07:6c:23:d0:61:4c:f9:
                    24:3e:4d:97:14:8c:70:02:f5:8d:0a:65:42:0f:43:
                    57:d1:ef:82:03:f3:77:f9:c1:2a:3e:1a:ff:8c:69:
                    87:51:7f:14:b3:52:e4:b0:5c:f9:64:f7:05:19:c6:
                    d3:3f:bb:8e:e0:39:cb:27:4b:e2:ae:dd:e9:34:3f:
                    40:e8:fc:1e:7b:03:e2:ba:91:98:d3:88:a1:01:e5:
                    cc:d8:6f:3f:aa:22:5a:3a:0b:43:95:eb:5b:c9:a4:
                    4e:24:ad:a8:0c:20:a5:01:c5:27:d9:97:85:d3:bc:
                    9f:ed:a6:68:6c:45:d3:1c:e8:32:e4:72:65:98:1f:
                    ab:9d:b8:b2:e3:14:87:92:49:62:e5:2d:c8:d0:d6:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8E:24:0A:C6:F8:8E:03:2C:D7:99:B2:43:C5:5E:F8:45:77:92:B2
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37342e302f32342d3234203d3e203539303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f1:42:a4:05:69:ab:a5:84:72:62:be:6e:7a:9d:5d:a0:83:
         27:f1:01:59:56:2f:04:42:7c:f0:e7:0b:75:12:17:c9:f0:7b:
         4f:f9:37:d7:25:75:ae:f3:33:35:e5:c0:55:68:08:88:1b:93:
         ab:e2:6d:c2:1d:6d:c9:6d:09:59:cd:f8:01:61:90:3b:ab:2d:
         52:35:34:05:29:4d:76:71:34:46:6b:96:2c:26:ad:d5:c9:d4:
         e4:ed:46:17:4a:7f:88:70:8e:b9:3f:b3:78:72:3e:98:ed:77:
         ac:ae:28:e3:bd:93:14:37:6d:97:78:90:ff:b3:9e:9a:b5:d8:
         51:8a:51:82:0a:86:63:f2:04:93:d2:53:4b:f6:01:f2:62:67:
         a6:c6:ff:df:8b:c1:24:41:61:7b:ab:33:60:96:f9:41:6f:07:
         f4:a2:80:77:4f:34:82:00:e1:b6:4b:fb:7e:09:5a:33:9b:24:
         ba:82:63:e9:77:46:bf:40:10:06:ea:c1:74:6f:ff:4d:24:c3:
         5f:a8:62:03:3a:05:44:9b:58:fa:91:7c:2e:c5:38:55:a9:b7:
         1a:e6:07:63:10:b2:2d:07:db:7c:0d:93:28:e5:93:19:f7:0c:
         9e:62:a8:ee:d9:49:ee:8b:3a:83:45:4d:4b:77:a4:13:59:df:
         a0:07:e9:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:58 2026 by rpki-client