This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35312e302f32342d3234203d3e20313332313638.roa
File:                     3130332e39302e35312e302f32342d3234203d3e20313332313638.roa (raw, json)
Hash identifier:          IJ0DehCwS8HARDainndwTg7fS+9obQ9d2JVsFwQDSIA=
Subject key identifier:   A6:B6:96:1B:24:02:60:94:6A:14:62:D6:12:2E:6B:01:60:BD:E1:20
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       63C135864C7D8D3EB0ED6F26ACE8A47C27111F8B
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35312e302f32342d3234203d3e20313332313638.roa
Signing time:             Tue 20 Jan 2026 02:16:46 +0000
ROA not before:           Tue 20 Jan 2026 02:11:46 +0000
ROA not after:            Tue 19 Jan 2027 02:16:46 +0000
asID:                     132168
IP address blocks:        103.90.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c1:35:86:4c:7d:8d:3e:b0:ed:6f:26:ac:e8:a4:7c:27:11:1f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:46 2026 GMT
            Not After : Jan 19 02:16:46 2027 GMT
        Subject: CN=A6B6961B240260946A1462D6122E6B0160BDE120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:c0:06:c0:86:bc:68:67:06:52:d2:19:40:
                    e9:3c:73:a7:cc:62:c9:6b:85:63:f8:a7:06:cf:c5:
                    c3:3d:f7:46:dd:5c:fd:a9:d0:65:da:11:46:b5:37:
                    b4:39:2d:ea:d0:8b:46:dc:45:75:b3:9a:4e:8b:c3:
                    af:ef:c7:3f:66:e6:67:8a:22:52:f8:05:db:82:e6:
                    f8:65:97:01:7a:66:2c:0e:d6:12:13:33:86:6e:24:
                    a1:57:83:98:9b:a2:cc:ef:8f:ce:a9:bb:34:d5:da:
                    13:81:2c:33:6f:d8:a0:80:a8:35:98:1b:82:59:45:
                    8f:7a:ef:90:88:c7:88:a3:c9:f1:bf:ef:c2:d4:3b:
                    2a:7a:2e:1e:14:f8:ec:be:44:ee:76:2e:bc:83:9c:
                    c8:3a:23:33:34:94:a2:63:19:b7:41:27:db:23:db:
                    e4:d7:9b:50:ac:e0:b3:f5:2c:56:22:01:59:92:84:
                    77:75:65:80:d8:f2:07:75:91:d8:e5:36:7c:bc:b6:
                    ba:a4:34:df:1e:8c:07:c5:7f:0f:94:95:47:4d:bf:
                    ad:e5:04:9c:9a:4b:bd:3c:f8:84:52:62:7b:92:2f:
                    36:f8:4d:3e:d5:b9:21:8b:7c:73:4e:e9:2f:45:07:
                    52:86:53:1a:94:c3:9c:e2:25:ea:4e:ec:e7:01:18:
                    b0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B6:96:1B:24:02:60:94:6A:14:62:D6:12:2E:6B:01:60:BD:E1:20
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35312e302f32342d3234203d3e20313332313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:33:0e:53:30:d8:8f:a6:88:38:29:08:bc:3d:f5:7b:4b:83:
         a4:33:09:2f:aa:6e:b1:fc:30:0e:7f:18:3f:bc:3a:d0:6c:cf:
         02:84:08:b4:e2:87:86:c6:ce:2f:23:cb:15:74:f6:3b:d9:56:
         c2:b9:7a:46:c6:1b:27:2f:72:d9:e1:15:82:eb:c9:c3:2a:6d:
         62:cb:8b:3a:a6:03:46:b1:a5:d6:3b:43:e4:42:f8:15:21:cb:
         74:5f:4f:02:e4:3b:79:40:57:52:72:19:3f:7e:5e:df:fe:88:
         de:87:75:3f:20:07:7a:11:7d:c5:3a:3e:be:aa:28:95:31:2d:
         13:27:66:de:7e:8d:ac:94:65:ed:a4:19:fd:cf:57:87:e1:f0:
         42:30:30:3c:8e:8f:d2:6e:6e:a6:99:c4:ec:77:de:fc:c6:ba:
         2e:2b:46:03:62:99:e6:bb:5a:06:b3:73:71:c1:41:7e:fc:49:
         a7:50:87:d9:69:15:4a:6c:f1:f4:e1:ca:bc:c2:17:d7:fb:8c:
         5c:2d:4a:88:18:99:73:cc:62:60:b7:91:86:77:bd:f8:f3:b9:
         5c:1d:55:c8:7d:b2:00:c3:b2:ab:81:59:dd:48:fb:ef:af:11:
         d8:96:a0:45:44:18:c9:73:08:b9:1e:bb:57:0f:36:0f:b0:ea:
         17:a2:b1:cf
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUY8E1hkx9jT6w7W8mrOikfCcRH4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3
RkU5MTM0RDAeFw0yNjAxMjAwMjExNDZaFw0yNzAxMTkwMjE2NDZaMDMxMTAvBgNV
BAMTKEE2QjY5NjFCMjQwMjYwOTQ2QTE0NjJENjEyMkU2QjAxNjBCREUxMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+f8AGwIa8aGcGUtIZQOk8c6fM
YslrhWP4pwbPxcM990bdXP2p0GXaEUa1N7Q5LerQi0bcRXWzmk6Lw6/vxz9m5meK
IlL4BduC5vhllwF6ZiwO1hITM4ZuJKFXg5iboszvj86puzTV2hOBLDNv2KCAqDWY
G4JZRY9675CIx4ijyfG/78LUOyp6Lh4U+Oy+RO52LryDnMg6IzM0lKJjGbdBJ9sj
2+TXm1Cs4LP1LFYiAVmShHd1ZYDY8gd1kdjlNny8trqkNN8ejAfFfw+UlUdNv63l
BJyaS708+IRSYnuSLzb4TT7VuSGLfHNO6S9FB1KGUxqUw5ziJepO7OcBGLD3AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUpraWGyQCYJRqFGLWEi5rAWC94SAwHwYDVR0j
BBgwFoAUc4nht9+1D65qTwyICRZK0H/pE00wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDkxNjg2Ny8wLzczODlFMUI3REZCNTBGQUU2QTRGMEM4ODA5MTY0
QUQwN0ZFOTEzNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDkxNjg2Ny8wLzMxMzAzMzJlMzkz
MDJlMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjMxMzYzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGdaMzANBgkqhkiG9w0BAQsFAAOCAQEACDMOUzDYj6aIOCkIvD31e0uD
pDMJL6pusfwwDn8YP7w60GzPAoQItOKHhsbOLyPLFXT2O9lWwrl6RsYbJy9y2eEV
guvJwyptYsuLOqYDRrGl1jtD5EL4FSHLdF9PAuQ7eUBXUnIZP35e3/6I3od1PyAH
ehF9xTo+vqoolTEtEydm3n6NrJRl7aQZ/c9Xh+HwQjAwPI6P0m5uppnE7Hfe/Ma6
LitGA2KZ5rtaBrNzccFBfvxJp1CH2WkVSmzx9OHKvMIX1/uMXC1KiBiZc8xiYLeR
hne9+PO5XB1VyH2yAMOyq4FZ3Uj7768R2JagRUQYyXMIuR67Vw82D7DqF6Kxzw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:43 2026 by rpki-client