This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e342e302f32342d3234203d3e203538383534.roa
File:                     3130332e32372e342e302f32342d3234203d3e203538383534.roa (raw, json)
Hash identifier:          qGte1Ot7Eg/0TbNzqdJBQ/lLSyl2J5F4UszZ0mAyRSA=
Subject key identifier:   ED:68:45:67:11:06:14:FF:FC:F5:DD:7E:6F:AE:59:3E:52:FC:97:75
Certificate issuer:       /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial:       7181D7682F0516588F920DCEE4C4D597DB3F92F6
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e342e302f32342d3234203d3e203538383534.roa
Signing time:             Tue 20 Jan 2026 02:20:22 +0000
ROA not before:           Tue 20 Jan 2026 02:15:22 +0000
ROA not after:            Tue 19 Jan 2027 02:20:22 +0000
asID:                     58854
IP address blocks:        103.27.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 15:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:81:d7:68:2f:05:16:58:8f:92:0d:ce:e4:c4:d5:97:db:3f:92:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
        Validity
            Not Before: Jan 20 02:15:22 2026 GMT
            Not After : Jan 19 02:20:22 2027 GMT
        Subject: CN=ED684567110614FFFCF5DD7E6FAE593E52FC9775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:a3:5b:0c:45:ce:21:f6:77:c5:3e:81:34:
                    9d:d1:e2:4a:5b:6d:62:9f:cd:99:0c:f9:4e:e4:fa:
                    de:0e:54:10:e6:63:47:93:5d:4b:fd:09:04:23:50:
                    d9:7a:f1:49:a0:74:d8:15:97:19:16:d0:4f:34:29:
                    f9:c4:fb:36:37:6a:57:cf:ad:ef:91:28:91:a3:af:
                    16:df:68:99:88:c1:97:92:02:50:6a:b0:78:0a:f9:
                    17:3b:fa:09:d1:fb:cd:95:f5:23:80:06:df:56:88:
                    4c:31:ea:dc:f6:e4:e1:6e:8c:68:1c:cf:e3:0e:75:
                    8c:d8:77:29:bc:dc:19:d8:ca:ac:fb:1b:6a:ac:8a:
                    05:b8:0e:4f:a4:49:4d:12:de:7d:e6:3f:2a:b6:08:
                    f7:e3:d7:4f:7f:e8:82:f7:97:c3:62:c9:b7:f6:6a:
                    b8:bb:2a:7a:58:e2:30:4a:70:40:55:97:d1:eb:49:
                    0b:9b:c3:2f:46:b8:b7:2d:4c:24:e8:33:e7:1e:cd:
                    cc:ec:e2:6a:dc:a1:6f:9e:6f:4d:ab:6f:98:7b:49:
                    87:95:95:25:22:fc:6d:cc:94:65:b2:10:6c:5c:5d:
                    f9:a5:0d:da:96:cc:be:4c:62:2e:7d:66:22:22:c8:
                    db:ee:e8:95:23:15:ae:ad:d0:19:de:56:90:d6:f2:
                    ee:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:68:45:67:11:06:14:FF:FC:F5:DD:7E:6F:AE:59:3E:52:FC:97:75
            X509v3 Authority Key Identifier:
                keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e342e302f32342d3234203d3e203538383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:8a:db:0f:f8:29:af:e0:a9:82:5c:6a:e5:11:d9:cf:23:a6:
         ac:4b:1f:e8:c6:eb:03:ab:55:7f:c3:89:27:a7:aa:d1:e8:52:
         25:75:73:e7:a9:7e:f1:4c:cf:c2:f0:b1:ad:2c:b2:83:fc:48:
         c3:3f:eb:19:22:bf:dc:b4:96:24:63:7e:9b:5b:7c:b6:9a:54:
         dc:f6:ce:78:fa:ae:f3:a3:e0:61:53:f3:88:89:c9:3c:be:a1:
         a5:a1:85:d6:c4:f5:3b:b2:fe:44:41:bd:5b:18:0d:3d:c1:fe:
         ed:16:3a:f4:09:7b:d9:e0:61:74:64:94:75:9d:62:f1:4e:51:
         37:27:0d:d9:90:0e:b3:05:52:a7:7a:a2:88:ca:df:a7:40:a4:
         10:e3:47:5a:2c:da:d0:31:02:b1:5d:33:5b:0b:e5:ec:a3:48:
         9c:99:5b:9f:00:55:7e:9d:a1:63:1b:29:b7:37:fc:55:0a:d5:
         48:e4:be:41:d5:ce:46:ae:1d:bd:71:8c:d1:83:b0:2f:6b:6e:
         5c:a5:14:89:be:c6:83:c4:bd:f0:87:79:6a:3a:c1:6c:3e:f3:
         df:2b:b7:5a:a8:66:8e:dc:89:29:50:b1:4f:f9:c4:e0:de:2a:
         16:26:b8:4c:ad:42:a0:db:af:85:28:59:c1:8c:a0:61:34:da:
         43:33:6c:bb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUcYHXaC8FFliPkg3O5MTVl9s/kvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE
NzgxMDFENDAeFw0yNjAxMjAwMjE1MjJaFw0yNzAxMTkwMjIwMjJaMDMxMTAvBgNV
BAMTKEVENjg0NTY3MTEwNjE0RkZGQ0Y1REQ3RTZGQUU1OTNFNTJGQzk3NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSoKNbDEXOIfZ3xT6BNJ3R4kpb
bWKfzZkM+U7k+t4OVBDmY0eTXUv9CQQjUNl68UmgdNgVlxkW0E80KfnE+zY3alfP
re+RKJGjrxbfaJmIwZeSAlBqsHgK+Rc7+gnR+82V9SOABt9WiEwx6tz25OFujGgc
z+MOdYzYdym83BnYyqz7G2qsigW4Dk+kSU0S3n3mPyq2CPfj109/6IL3l8Niybf2
ari7KnpY4jBKcEBVl9HrSQubwy9GuLctTCToM+cezczs4mrcoW+eb02rb5h7SYeV
lSUi/G3MlGWyEGxcXfmlDdqWzL5MYi59ZiIiyNvu6JUjFa6t0BneVpDW8u4jAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU7WhFZxEGFP/89d1+b65ZPlL8l3UwHwYDVR0j
BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0
RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NDg3ODA5LzAvMzEzMDMzMmUzMjM3
MmUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzgzODM1MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnGwQwDQYJKoZIhvcNAQELBQADggEBAESK2w/4Ka/gqYJcauUR2c8jpqxLH+jG
6wOrVX/DiSenqtHoUiV1c+epfvFMz8Lwsa0ssoP8SMM/6xkiv9y0liRjfptbfLaa
VNz2znj6rvOj4GFT84iJyTy+oaWhhdbE9Tuy/kRBvVsYDT3B/u0WOvQJe9ngYXRk
lHWdYvFOUTcnDdmQDrMFUqd6oojK36dApBDjR1os2tAxArFdM1sL5eyjSJyZW58A
VX6doWMbKbc3/FUK1UjkvkHVzkauHb1xjNGDsC9rblylFIm+xoPEvfCHeWo6wWw+
898rt1qoZo7ciSlQsU/5xODeKhYmuEytQqDbr4UoWcGMoGE02kMzbLs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:36:24 2026 by rpki-client