This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35372e302f32342d3234203d3e203633363839.roa
File:                     3130332e39302e35372e302f32342d3234203d3e203633363839.roa (raw, json)
Hash identifier:          lqVdKtvftcOV78aey19rCkf8hTLxgwUa2oGZaVASd8s=
Subject key identifier:   E1:13:A3:FC:F6:FB:B8:E0:89:04:20:B8:93:D4:1E:07:7D:C8:AA:D8
Certificate issuer:       /CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
Certificate serial:       11B94775591F9D8A0A5A227996469AE8E2DA8632
Authority key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35372e302f32342d3234203d3e203633363839.roa
Signing time:             Tue 20 Jan 2026 02:16:47 +0000
ROA not before:           Tue 20 Jan 2026 02:11:47 +0000
ROA not after:            Tue 19 Jan 2027 02:16:47 +0000
asID:                     63689
IP address blocks:        103.90.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b9:47:75:59:1f:9d:8a:0a:5a:22:79:96:46:9a:e8:e2:da:86:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D
        Validity
            Not Before: Jan 20 02:11:47 2026 GMT
            Not After : Jan 19 02:16:47 2027 GMT
        Subject: CN=E113A3FCF6FBB8E0890420B893D41E077DC8AAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:e7:78:52:7d:be:0a:26:e3:d2:7a:7c:65:
                    ca:50:03:ee:d4:a7:fa:40:49:80:40:7b:7a:02:63:
                    b6:8a:48:b9:40:b1:a7:af:d1:56:f2:d4:04:3c:3e:
                    3a:d1:3a:7f:48:7d:f0:9a:6a:f4:ec:59:a0:d1:35:
                    e4:0a:3d:cf:2b:d7:81:69:5b:ba:b2:25:5b:6f:c6:
                    1a:36:e7:ca:ae:b8:bd:3c:e9:e7:00:92:1f:d5:16:
                    1c:8b:8e:3a:be:4c:bd:de:18:91:bd:8e:31:f3:ec:
                    7b:8f:53:07:a4:fb:6f:b3:2c:30:1c:9f:a2:08:c0:
                    4f:34:82:97:af:ee:2a:cf:6e:87:92:3f:ea:87:d8:
                    39:f7:5d:78:4d:c5:00:d2:13:25:a0:7a:4e:85:af:
                    e8:55:38:a6:3c:db:29:f2:bd:96:9e:70:d4:a1:64:
                    ef:55:b8:49:02:73:c7:a5:44:7b:7e:68:c3:7a:6d:
                    f1:7e:1e:1f:cf:f5:b5:13:56:de:ef:bc:79:a2:c2:
                    d7:04:35:cd:b7:f5:e5:0a:46:88:95:48:af:a0:cb:
                    ce:e6:2d:2a:91:e6:85:65:b3:2a:c1:56:03:47:62:
                    01:f3:8e:ea:c0:bb:04:8f:19:9c:67:23:ff:a0:88:
                    83:4d:e7:76:81:3a:9e:76:10:6f:54:48:44:67:5c:
                    35:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:13:A3:FC:F6:FB:B8:E0:89:04:20:B8:93:D4:1E:07:7D:C8:AA:D8
            X509v3 Authority Key Identifier:
                keyid:73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/3130332e39302e35372e302f32342d3234203d3e203633363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:bd:a8:ec:e5:9f:cc:2f:ea:33:29:ee:a2:da:17:91:7c:cf:
         fe:c0:08:1e:b6:f5:05:5c:78:24:47:0f:98:83:2f:49:40:3e:
         1b:50:f5:fd:58:08:fd:ed:35:ef:5f:86:4c:85:35:fc:0d:be:
         86:76:41:b6:f5:ae:29:56:d8:53:65:e2:ae:a5:63:cd:08:c3:
         68:3a:2c:24:59:57:92:c3:3f:fe:68:27:9b:cb:dc:a2:e7:c6:
         bd:1c:e8:e5:a6:e6:38:32:45:11:13:4a:15:33:c8:b3:da:24:
         aa:e1:d8:47:b0:60:07:cb:78:a2:09:7e:6c:16:de:6a:f3:fb:
         40:c3:30:24:8f:0e:91:25:72:51:7d:c1:b4:a7:7f:70:a0:23:
         e5:6d:b0:e7:c4:5f:8d:26:dd:a3:5e:14:f5:94:6b:72:c8:72:
         95:9e:10:bf:8d:78:04:e5:1b:a4:06:61:87:e5:7c:a1:5f:fd:
         be:c5:21:1f:5c:28:6c:50:69:f1:84:0a:9a:5e:26:b4:71:1b:
         13:dd:68:f1:95:67:82:fe:9e:5f:0f:c9:69:7c:d5:66:6c:da:
         7d:c7:cc:b5:6f:18:10:99:2a:14:9e:ac:e8:93:d0:dd:4b:5e:
         a1:5f:1c:9b:2e:af:d5:b1:ec:ab:b8:e8:5e:db:21:63:58:57:
         5f:6c:61:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:05 2026 by rpki-client