This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37352e302f32342d3234203d3e203633363839.roa
File:                     3130332e3230342e37352e302f32342d3234203d3e203633363839.roa (raw, json)
Hash identifier:          +dSi5Rorz8pM56WUsPOxobYAxB/bGMVmkQhWJt5nou0=
Subject key identifier:   7C:08:40:84:3A:B7:AC:79:CD:32:81:50:95:FE:05:14:E5:8F:D2:16
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       4C8CA053C8A3BB747F9FF0D9A328636C79C910E3
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37352e302f32342d3234203d3e203633363839.roa
Signing time:             Tue 20 Jan 2026 02:16:48 +0000
ROA not before:           Tue 20 Jan 2026 02:11:48 +0000
ROA not after:            Tue 19 Jan 2027 02:16:48 +0000
asID:                     63689
IP address blocks:        103.204.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8c:a0:53:c8:a3:bb:74:7f:9f:f0:d9:a3:28:63:6c:79:c9:10:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:48 2026 GMT
            Not After : Jan 19 02:16:48 2027 GMT
        Subject: CN=7C0840843AB7AC79CD32815095FE0514E58FD216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1b:4f:87:08:21:b7:e4:51:e4:09:c0:3a:49:
                    11:44:2a:aa:1d:f8:22:6f:bc:47:bf:84:b7:71:70:
                    0f:05:42:34:3e:d1:de:62:e3:83:3a:05:0b:e2:f7:
                    90:c6:7d:f6:7e:51:c6:c6:77:50:51:ec:0c:82:9d:
                    3f:21:ff:63:92:80:5c:b9:61:82:24:7b:fe:82:41:
                    10:b3:79:e3:c6:64:e5:07:ee:dd:b3:5e:03:a1:fc:
                    26:56:1d:36:b3:69:f2:0b:92:c2:0e:4e:13:78:d6:
                    3e:47:53:f7:65:39:97:3e:5d:63:8e:81:31:be:11:
                    75:8b:4f:a2:76:31:4a:99:f3:bd:32:82:a9:12:22:
                    c0:fe:83:0e:6e:ed:02:2a:6d:fa:25:a9:97:d5:53:
                    ae:9a:6c:f9:c7:78:c2:2b:3f:4a:00:ad:7f:ad:b4:
                    42:fd:de:0e:09:12:c6:7b:8c:50:09:36:c8:b4:fc:
                    7a:a9:4f:3e:f8:9c:49:65:2a:d9:e0:9f:eb:79:80:
                    ff:45:12:38:00:88:c0:53:d4:62:41:cf:1f:03:57:
                    77:c9:74:27:09:3f:b8:64:d8:18:22:f5:53:e8:c0:
                    1b:fa:70:57:fa:b4:79:7b:a4:10:ac:62:bb:dc:57:
                    38:4e:6f:a3:f9:20:7e:e8:66:10:28:ec:c7:c0:8d:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:08:40:84:3A:B7:AC:79:CD:32:81:50:95:FE:05:14:E5:8F:D2:16
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e3230342e37352e302f32342d3234203d3e203633363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:cf:27:3c:05:c2:ca:e4:88:30:70:47:4d:7e:83:7a:69:e8:
         0d:d3:7c:2b:a0:42:2e:49:78:96:a3:15:09:9a:a8:15:c4:97:
         f5:f9:13:21:ee:21:bf:3a:9f:a5:02:4a:b2:57:f6:30:78:b1:
         da:c4:9b:dd:8b:f0:1b:e7:8f:2d:66:54:64:e5:1b:ae:63:4f:
         a9:54:69:cb:b2:d1:cb:c7:f7:9f:82:1b:3d:0c:c3:a4:b0:dc:
         c7:3b:a0:3e:3d:90:40:31:90:c2:c3:8b:b6:ad:c8:00:76:2e:
         ad:7a:fd:bd:ca:e5:27:86:4c:e3:61:1f:b3:ca:5a:6b:a6:68:
         57:3e:30:87:18:10:8f:39:5d:97:67:8e:29:a6:f8:43:9a:b8:
         b7:39:24:7f:eb:39:35:18:1f:3a:3b:af:8b:27:8b:3d:de:63:
         8d:2f:38:84:58:ad:dd:0a:28:28:26:e0:3d:c9:02:6f:ec:05:
         57:bc:b8:ee:09:de:6c:13:17:31:cd:b9:9d:81:ce:d5:93:a1:
         9e:b1:bd:5d:e4:be:4b:0a:73:56:21:a8:c5:46:b6:99:48:36:
         90:bc:a7:9d:c7:2e:66:92:7f:f7:d0:c8:e0:05:bd:9c:c7:f4:
         15:e2:98:f8:d2:1b:30:01:71:68:75:5f:4d:4c:14:8e:0c:30:
         8d:16:03:2d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:05 2026 by rpki-client