This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35362e302f32342d3234203d3e203633363839.roa
File:                     3130332e39302e35362e302f32342d3234203d3e203633363839.roa (raw, json)
Hash identifier:          z7qswjZ1RCNWUzrLyHgDyHKK6Qs23M2tLZBiFPxVMmU=
Subject key identifier:   3A:77:5E:15:BF:78:8A:D2:19:AD:82:C3:97:8A:BB:1E:41:2B:5A:19
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       4DA05E4E7BD9B52E209E0761F8A539B1191B028F
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35362e302f32342d3234203d3e203633363839.roa
Signing time:             Tue 20 Jan 2026 02:16:44 +0000
ROA not before:           Tue 20 Jan 2026 02:11:44 +0000
ROA not after:            Tue 19 Jan 2027 02:16:44 +0000
asID:                     63689
IP address blocks:        103.90.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a0:5e:4e:7b:d9:b5:2e:20:9e:07:61:f8:a5:39:b1:19:1b:02:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:44 2026 GMT
            Not After : Jan 19 02:16:44 2027 GMT
        Subject: CN=3A775E15BF788AD219AD82C3978ABB1E412B5A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:40:cb:ca:c0:75:0b:5e:5b:72:de:a0:d7:b2:
                    63:1f:f9:cb:6f:68:82:5e:2c:34:81:7a:f2:b1:c3:
                    10:5c:7e:69:e8:a5:bc:2f:8b:4d:44:3a:59:4c:39:
                    f2:0f:31:52:b6:ed:9f:fc:ad:36:25:65:a3:77:6d:
                    bf:46:8e:e1:88:19:2e:c7:f8:b6:03:3f:87:27:ec:
                    a7:4a:f1:0d:53:d7:80:7f:e7:6b:98:eb:ab:32:aa:
                    ea:f9:3f:15:9a:1a:78:c9:da:b2:3b:b9:04:00:b4:
                    9c:74:56:1a:e7:28:32:cc:9b:b2:56:07:fc:5b:18:
                    49:70:56:e6:ed:af:3f:aa:d0:47:7f:bc:92:0c:e2:
                    3f:7c:c0:9f:5d:56:29:48:91:6b:61:87:d0:ee:ba:
                    0d:99:ba:c6:b7:f2:55:e3:94:b1:17:80:c7:84:c1:
                    9c:e2:6c:5c:28:ab:d5:78:c6:5a:38:f8:53:68:d8:
                    99:d0:b9:b6:2b:b6:c4:0a:20:26:e6:21:51:fe:b3:
                    ce:90:79:66:09:f9:98:2f:62:8e:1d:31:ee:6a:12:
                    21:95:51:5f:91:9a:33:29:8c:ec:6a:84:50:b5:6f:
                    ad:82:a5:8c:34:c4:d3:fe:18:2d:e1:e2:bc:eb:2d:
                    67:29:61:a4:d3:91:c0:bc:dc:0e:be:e0:00:02:ab:
                    09:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:77:5E:15:BF:78:8A:D2:19:AD:82:C3:97:8A:BB:1E:41:2B:5A:19
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35362e302f32342d3234203d3e203633363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:63:7d:8e:43:92:f9:d0:43:91:9a:43:e4:42:05:5f:f5:54:
         55:22:60:fb:17:a7:ab:2a:2d:fe:2c:22:77:4b:45:e9:4a:68:
         b7:3f:9b:a3:3c:a4:e5:fb:cf:37:6b:31:40:63:5d:9d:82:22:
         c2:53:7f:a7:87:ec:e0:87:24:c3:81:1d:3b:e9:5c:78:36:d9:
         b0:46:97:f2:7d:91:d3:79:66:7e:f5:4a:64:00:0e:72:69:64:
         1e:c7:3d:9f:5b:0f:99:43:3f:c2:cf:56:ad:46:d4:57:93:21:
         fb:ad:bd:18:20:c1:f6:27:d7:ba:5d:f8:b7:3b:31:3d:ed:24:
         9a:e3:8d:c6:f1:1f:99:6b:e4:62:3f:81:37:3a:cb:51:bc:fd:
         12:97:66:13:7a:73:ee:e6:72:1b:36:b7:e6:99:c4:71:e7:ba:
         8d:6b:bf:e5:85:1f:2e:eb:4e:99:17:9d:a0:ac:d2:e6:e6:18:
         1b:a3:58:d4:ea:82:16:d1:c5:cb:44:0c:38:4d:2b:8f:c4:e8:
         fd:ab:20:2c:73:ba:6e:a8:0e:72:aa:4f:c2:75:0d:99:8c:3b:
         97:3d:6f:04:e8:13:79:6a:7c:47:9a:73:bd:9c:19:be:49:c3:
         93:f8:a5:e3:04:0e:44:4f:7d:79:04:87:77:1c:c3:f1:12:27:
         1f:21:36:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:01 2026 by rpki-client