This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3130332e32372e32362e302f32332d3233203d3e203538383334.roa
File:                     3130332e32372e32362e302f32332d3233203d3e203538383334.roa (raw, json)
Hash identifier:          LV64oaavn+LUCzSq4GYxdn1Lup7bFFduxRp7j5l9IBE=
Subject key identifier:   E4:2A:A3:F3:BE:59:F0:E6:68:D1:2F:A5:6D:1E:D3:C2:88:1B:FE:A8
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       39643D3F64EBB0F4FBFB2F9DD5C39F42CDDC5518
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3130332e32372e32362e302f32332d3233203d3e203538383334.roa
Signing time:             Tue 20 Jan 2026 02:13:07 +0000
ROA not before:           Tue 20 Jan 2026 02:08:07 +0000
ROA not after:            Tue 19 Jan 2027 02:13:07 +0000
asID:                     58834
IP address blocks:        103.27.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:64:3d:3f:64:eb:b0:f4:fb:fb:2f:9d:d5:c3:9f:42:cd:dc:55:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Jan 20 02:08:07 2026 GMT
            Not After : Jan 19 02:13:07 2027 GMT
        Subject: CN=E42AA3F3BE59F0E668D12FA56D1ED3C2881BFEA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:ec:d4:15:fd:24:84:f0:4f:4d:3f:16:13:
                    cc:6c:2f:77:80:67:cd:ad:79:87:e8:c3:73:a0:7c:
                    9f:41:a2:83:90:b5:c6:d7:9e:01:06:b5:f1:7c:f3:
                    af:b8:50:74:23:52:4d:89:36:cd:38:86:ef:b4:cd:
                    33:5b:ba:4f:a2:09:88:24:6b:28:17:cd:ed:ef:5f:
                    b9:8f:a5:8c:4c:c9:46:ef:61:db:c3:8b:63:a8:41:
                    2b:31:24:72:e8:5f:46:a2:67:d7:b5:c9:05:9b:95:
                    94:9d:fc:bb:03:5a:35:9a:34:01:d4:b3:4a:f0:1f:
                    9b:b5:4d:fe:38:94:63:a9:29:f6:52:83:dd:a7:bb:
                    98:e2:b0:cb:93:6f:9f:7f:48:be:3d:fc:48:a2:fe:
                    6b:2d:46:42:e1:4a:69:a2:3f:da:7d:7f:ca:9d:ab:
                    b1:97:a9:ed:76:30:6a:cc:67:de:28:06:94:8e:c3:
                    73:9b:43:4e:6b:50:97:eb:09:fd:cf:86:7a:e0:62:
                    74:6f:00:89:75:06:a2:9a:a3:49:37:16:2b:0c:c5:
                    81:c7:d5:8a:ed:80:38:ed:92:fb:bb:b5:1f:3f:39:
                    4f:af:ae:af:51:c6:7b:5f:bc:ce:6c:af:3f:82:10:
                    47:b7:50:83:44:8e:a2:72:34:24:69:65:55:17:f5:
                    02:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2A:A3:F3:BE:59:F0:E6:68:D1:2F:A5:6D:1E:D3:C2:88:1B:FE:A8
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3130332e32372e32362e302f32332d3233203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:88:23:f6:ca:91:11:f5:e5:5a:e2:fb:18:c4:a6:b3:95:
         12:fa:24:b2:47:83:e4:19:82:78:44:05:ff:7d:ac:fa:1e:5b:
         68:5d:fa:27:84:75:b8:88:c0:65:8d:45:b2:fe:51:62:0f:03:
         d8:0b:0f:96:47:78:ca:bb:f9:91:17:77:e1:cd:ee:b2:e0:c1:
         89:97:52:f8:8c:fe:f8:2d:b6:77:e3:7e:ae:af:8f:84:1c:6e:
         92:6f:40:bd:10:2e:71:a1:19:a5:50:fa:b5:69:8c:1a:40:04:
         66:d6:58:08:c4:1e:84:99:2e:13:b7:b5:d3:63:8b:22:06:48:
         16:81:bd:b4:90:47:88:fd:bd:8c:45:c5:d6:92:69:c5:cc:bb:
         bf:53:b6:12:86:b7:de:0a:26:68:23:56:00:17:37:80:e9:9f:
         28:15:1e:ac:4a:2a:49:78:96:38:23:d4:40:66:69:47:51:71:
         03:5d:0f:fe:88:7a:2d:10:a7:71:4c:2f:57:ee:f3:ac:c4:13:
         7f:52:35:a0:b9:ac:59:9a:31:0c:4e:0c:ea:18:b6:3b:3b:0f:
         d6:25:61:b9:74:45:58:83:3d:07:6b:94:c4:f0:af:42:a2:34:
         73:5b:9f:75:90:ab:19:c5:ae:56:e2:09:3f:2f:00:91:0e:fc:
         b7:60:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:09 2026 by rpki-client