This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3130332e32372e32342e302f32342d3234203d3e203538383334.roa
File:                     3130332e32372e32342e302f32342d3234203d3e203538383334.roa (raw, json)
Hash identifier:          NNtqtkTJzXp1MnYv6W4ktMgKudyOtj29V2lolWv7LPU=
Subject key identifier:   45:7F:AE:8A:9E:61:A4:DF:EF:B7:F5:90:43:0A:1D:C3:91:08:AA:F8
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       0AFA91E279759426AE4481626723690F9ACB349C
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3130332e32372e32342e302f32342d3234203d3e203538383334.roa
Signing time:             Tue 20 Jan 2026 02:13:07 +0000
ROA not before:           Tue 20 Jan 2026 02:08:07 +0000
ROA not after:            Tue 19 Jan 2027 02:13:07 +0000
asID:                     58834
IP address blocks:        103.27.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:fa:91:e2:79:75:94:26:ae:44:81:62:67:23:69:0f:9a:cb:34:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Jan 20 02:08:07 2026 GMT
            Not After : Jan 19 02:13:07 2027 GMT
        Subject: CN=457FAE8A9E61A4DFEFB7F590430A1DC39108AAF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:07:fd:f8:d7:8b:8d:07:11:14:3e:f2:7a:
                    7c:3a:41:88:3b:0d:7f:59:31:08:4c:a4:d3:bb:6e:
                    3a:e6:61:c9:1c:84:78:a0:83:76:2f:97:c3:4d:54:
                    74:3a:ff:c9:47:5a:c9:87:23:2e:1b:4f:b4:de:44:
                    21:33:a3:72:36:c1:4d:97:67:3b:29:a9:1e:a8:a6:
                    5e:4d:4c:64:9c:65:fc:70:d8:54:9e:53:bd:87:44:
                    6a:e3:8e:32:86:18:44:7f:6d:3d:c7:94:ae:8b:77:
                    4b:9a:79:90:ef:68:ac:0e:21:7a:d4:9b:57:88:70:
                    5e:ee:1b:62:6b:c3:4a:d2:fc:eb:61:f2:6b:03:a5:
                    10:3a:02:cd:93:55:6d:43:3c:b7:69:d3:b7:24:cc:
                    37:b2:7e:00:32:25:57:0c:cc:a9:b4:ca:15:5d:43:
                    88:3c:4d:09:cd:51:76:d0:00:d9:90:b7:c3:8e:2f:
                    59:c5:63:ba:c0:93:75:bc:cc:f5:6e:e2:3c:51:75:
                    f1:54:72:31:43:71:c8:06:14:b4:00:4b:33:f9:33:
                    20:59:33:08:da:85:ce:e8:8d:6a:da:8f:e7:ca:22:
                    70:3f:34:bd:cd:4a:d8:2f:e7:16:4e:bb:46:1d:cd:
                    f1:03:c8:2c:15:46:2a:ca:14:ff:a3:24:47:32:d4:
                    da:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7F:AE:8A:9E:61:A4:DF:EF:B7:F5:90:43:0A:1D:C3:91:08:AA:F8
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3130332e32372e32342e302f32342d3234203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:df:51:c2:3f:64:3e:45:66:91:a2:9d:1b:a2:d6:f6:53:5f:
         fc:ac:43:a5:4a:4e:b8:de:69:a8:54:62:05:ec:c0:c8:5d:96:
         ce:a7:bb:b6:98:62:cf:83:ce:fc:de:1c:dc:cd:0f:6b:e8:72:
         82:30:2a:be:68:50:68:2a:4b:28:bf:f1:95:5a:d8:36:3b:ed:
         76:25:a1:63:90:e7:6a:eb:43:59:98:3f:d2:9b:4c:f3:be:03:
         33:97:e4:a5:3e:9b:9d:bc:c5:fa:41:40:c0:74:2a:f6:54:74:
         4d:91:b0:93:5f:ed:62:28:26:7d:bd:77:9f:aa:f0:d6:d5:9d:
         44:19:c1:b8:07:98:65:80:1f:79:d0:4d:36:57:35:72:3f:bd:
         48:47:8b:ce:3e:29:67:b1:bd:33:1c:17:25:45:90:f4:ff:1a:
         3c:93:89:61:5d:20:b2:66:83:6e:93:a6:2e:85:52:82:65:c4:
         2b:c3:53:01:32:1f:6c:91:ec:46:34:7a:1b:63:2f:84:15:e3:
         63:cd:6b:bc:f1:94:46:31:4d:d8:05:37:f7:4a:60:1f:06:6a:
         ee:ee:e8:af:b7:50:1a:ca:c0:54:e7:e9:c6:88:1f:38:cb:d5:
         18:e5:23:19:f2:a0:00:2e:5b:ea:47:08:dc:a9:53:37:d5:45:
         06:f8:61:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:27 2026 by rpki-client