This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa
File:                     3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa (raw, json)
Hash identifier:          Yea68duwFifPXnruxUiyJ9UTHYU8mFtMaIPky0bpVBY=
Subject key identifier:   A2:DE:E6:05:B4:51:A8:75:0C:7F:B5:DE:AA:35:16:D6:78:73:33:BB
Certificate issuer:       /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
Certificate serial:       5ED85D4D8548D297A13C7F16C7E736C2F331A1C0
Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa
Signing time:             Tue 20 Jan 2026 02:19:09 +0000
ROA not before:           Tue 20 Jan 2026 02:14:09 +0000
ROA not after:            Tue 19 Jan 2027 02:19:09 +0000
asID:                     63701
IP address blocks:        103.125.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 17:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d8:5d:4d:85:48:d2:97:a1:3c:7f:16:c7:e7:36:c2:f3:31:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
        Validity
            Not Before: Jan 20 02:14:09 2026 GMT
            Not After : Jan 19 02:19:09 2027 GMT
        Subject: CN=A2DEE605B451A8750C7FB5DEAA3516D6787333BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:98:12:09:14:85:89:aa:c9:87:d2:25:d2:24:
                    90:9f:01:cd:41:54:7b:04:85:bd:7e:77:cb:a4:18:
                    f7:eb:13:55:0a:6c:c5:ad:2c:a7:6d:70:60:89:67:
                    42:30:8d:7c:ba:f6:31:3f:3e:df:4f:65:c5:09:5b:
                    40:2e:5a:f2:21:63:7a:a4:8b:1a:40:c6:24:ac:32:
                    eb:a4:3b:12:5b:05:a2:ba:bf:0f:14:42:63:0a:7d:
                    ac:5d:16:89:fc:0a:a7:96:45:4f:ba:0d:c6:0c:34:
                    c2:31:16:d8:72:7f:dd:36:1c:38:60:27:3e:bf:64:
                    3b:09:3c:ea:cb:13:eb:33:e4:27:bd:44:52:5f:28:
                    4f:40:a0:5c:0f:75:db:e2:67:9a:e6:83:fb:e1:4f:
                    5e:08:11:5d:a7:ab:3d:31:f7:67:3b:d4:0f:de:28:
                    cd:ec:f1:17:4d:d9:8f:9c:00:21:74:f7:67:ff:aa:
                    db:6a:85:cb:0b:50:78:ff:45:00:7c:1f:02:8d:6d:
                    09:ff:c0:1b:70:09:e0:73:11:cd:81:c3:f0:99:2b:
                    e4:d2:89:cb:e9:0a:be:a8:8a:99:5f:77:63:ef:87:
                    42:ec:83:dc:4c:ee:19:eb:df:cd:1f:b4:cc:c8:c4:
                    5d:15:a4:0f:c5:b0:81:3d:f3:0f:88:5d:83:2b:1b:
                    97:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DE:E6:05:B4:51:A8:75:0C:7F:B5:DE:AA:35:16:D6:78:73:33:BB
            X509v3 Authority Key Identifier:
                keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:93:b4:bc:63:4a:74:51:cf:c3:db:63:77:d7:86:e0:9b:6f:
         2d:a0:41:5a:73:6e:f8:ee:4b:3e:77:20:5b:9b:94:0b:1c:12:
         a6:93:54:1c:18:b7:99:80:6c:a5:1c:ae:10:df:09:a6:08:8f:
         b5:ee:ee:b7:de:fd:1b:db:0e:4f:96:3d:a5:5a:c4:2a:58:79:
         b2:d8:10:c9:a6:fd:96:46:5f:73:7e:56:f5:dc:0b:82:7a:50:
         08:88:ca:10:fc:ce:87:a4:df:15:97:cc:dd:18:d7:da:19:a2:
         87:8e:92:e1:40:81:26:0e:72:b3:46:38:e2:fe:e3:1c:5b:15:
         20:9e:dc:be:b2:75:4d:c6:db:62:e5:22:d8:c5:1a:38:9a:60:
         5a:b8:c4:87:b9:38:4a:18:57:df:3c:df:94:fa:50:3c:c4:9e:
         c8:68:cd:35:20:2c:f1:a4:87:a8:33:c9:f1:63:6e:bf:b4:40:
         7e:3a:be:c4:df:9d:3d:ac:e6:1e:f2:77:91:65:0e:56:cd:6e:
         b4:1c:a5:f9:0c:72:35:1f:0a:5e:69:6b:ac:46:ee:38:79:94:
         a3:7d:d8:d7:00:75:2a:14:91:8d:8d:f1:c3:b4:24:ee:19:ef:
         08:33:0f:6c:a1:61:ca:aa:63:e3:89:00:91:ec:fb:0c:ca:7f:
         bf:59:23:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:42 2026 by rpki-client