This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35312e302f32342d3234203d3e203633363839.roa
File:                     3130332e39302e35312e302f32342d3234203d3e203633363839.roa (raw, json)
Hash identifier:          ELnf/UBzicMyBHL1uB/8OT8o4ONtxwo8bbgXNZRq4ls=
Subject key identifier:   2D:0B:09:0E:E5:F4:C0:6A:25:31:9F:1A:7D:BF:2F:20:E7:0B:5C:E0
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       1924C7FD689DBD464C8812C3B0E9813C5B01E4EC
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35312e302f32342d3234203d3e203633363839.roa
Signing time:             Tue 20 Jan 2026 02:16:43 +0000
ROA not before:           Tue 20 Jan 2026 02:11:43 +0000
ROA not after:            Tue 19 Jan 2027 02:16:43 +0000
asID:                     63689
IP address blocks:        103.90.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:24:c7:fd:68:9d:bd:46:4c:88:12:c3:b0:e9:81:3c:5b:01:e4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:43 2026 GMT
            Not After : Jan 19 02:16:43 2027 GMT
        Subject: CN=2D0B090EE5F4C06A25319F1A7DBF2F20E70B5CE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d8:04:dc:79:af:e8:67:c2:11:a3:3f:e8:a5:
                    df:76:6e:0d:ce:66:70:1f:f3:02:ef:e8:89:18:53:
                    95:a1:13:51:7e:d5:c3:55:ff:b6:09:ab:2c:3d:26:
                    ad:32:53:b1:1e:1c:78:7f:b4:f0:ff:4c:07:fc:95:
                    df:c9:25:47:b8:b4:1c:2e:c0:45:f2:78:df:a3:fc:
                    1f:de:a9:1a:55:f4:07:1a:39:39:52:05:0e:b0:89:
                    b2:87:93:98:69:3f:36:6e:93:9c:5c:3d:a9:41:02:
                    4d:09:87:2f:23:6c:1d:4e:98:92:2b:93:8b:00:1f:
                    9a:a3:b5:cf:13:3b:a1:52:51:7f:a3:8d:e0:8b:1b:
                    1f:04:6a:19:5b:56:65:28:6b:7e:dd:9a:32:c3:aa:
                    cc:0a:4a:89:58:08:f1:80:7e:5e:92:2e:1c:f8:f8:
                    84:ca:8f:cf:6f:c7:d9:6a:07:fb:d8:19:e9:e7:dc:
                    e2:c4:c1:ce:d0:c5:85:d7:ad:b6:9a:ea:00:10:97:
                    0c:f7:43:72:08:dc:e3:aa:8c:55:af:74:50:6e:2d:
                    88:f3:90:fa:ee:cf:03:dc:2f:02:75:ef:23:63:7e:
                    c7:0c:94:10:48:b3:49:22:c7:1a:83:3a:a4:ef:b7:
                    90:c7:88:cd:f2:52:12:60:dd:74:78:25:e2:ac:e7:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0B:09:0E:E5:F4:C0:6A:25:31:9F:1A:7D:BF:2F:20:E7:0B:5C:E0
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35312e302f32342d3234203d3e203633363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:3f:65:87:68:aa:24:5f:a0:04:2d:b3:32:2a:f3:88:dd:83:
         08:5d:01:19:4d:4d:9d:bd:51:86:b7:47:fb:57:0a:06:5b:78:
         9d:54:9c:c0:e9:77:af:0a:a2:d1:aa:b8:72:97:22:67:7c:0d:
         3c:04:e1:17:c5:29:95:55:3d:d8:ca:34:cc:45:39:e1:b6:9f:
         14:26:0b:cf:a5:c1:53:49:31:10:a9:95:27:05:21:ff:ae:17:
         cb:cf:9a:86:90:58:19:54:2f:91:3c:80:69:7e:84:14:f9:fc:
         5d:6f:46:cb:c0:a3:12:cf:6e:b0:1b:42:44:5e:ce:17:dd:fa:
         ff:56:bb:af:57:b9:9c:78:2b:1a:0b:66:3e:c7:ae:83:76:bb:
         c5:fa:60:5e:81:5c:d6:5e:05:18:0a:1f:bb:7c:8a:1a:08:67:
         86:2f:c6:3b:ac:9e:40:7b:ac:b3:83:e2:6a:15:10:63:46:59:
         80:d3:7e:e4:80:8e:4c:a7:ee:3a:ce:0b:8c:d8:23:20:82:f4:
         d7:1a:a1:09:f9:7d:6f:b3:e7:e1:8b:d3:f9:8a:01:82:2e:b1:
         ba:8c:f3:e0:28:1a:ab:8a:31:d7:91:0d:31:9b:0d:05:0d:a7:
         55:c3:54:86:e3:38:6c:57:23:97:f9:7b:5a:f6:59:96:84:10:
         2d:0e:41:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:00 2026 by rpki-client