This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e36382e302f32322d3234203d3e20313531323936.roa
File:                     3130332e37312e36382e302f32322d3234203d3e20313531323936.roa (raw, json)
Hash identifier:          jQm71q4usHyZ9nJvSyXcTJ5XN9QvxSzUc33cqUIvKFA=
Subject key identifier:   F7:52:28:8A:73:A9:0A:EA:EA:B9:D9:C1:61:9E:AC:83:1E:D7:8B:EE
Certificate issuer:       /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial:       651536E0616470CE6182EE0B85550DE03EF3B3EF
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e36382e302f32322d3234203d3e20313531323936.roa
Signing time:             Tue 20 Jan 2026 02:18:05 +0000
ROA not before:           Tue 20 Jan 2026 02:13:05 +0000
ROA not after:            Tue 19 Jan 2027 02:18:05 +0000
asID:                     151296
IP address blocks:        103.71.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:15:36:e0:61:64:70:ce:61:82:ee:0b:85:55:0d:e0:3e:f3:b3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
        Validity
            Not Before: Jan 20 02:13:05 2026 GMT
            Not After : Jan 19 02:18:05 2027 GMT
        Subject: CN=F752288A73A90AEAEAB9D9C1619EAC831ED78BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e4:fc:36:e0:78:b6:49:96:76:50:4b:dc:da:
                    d6:f9:06:fd:d3:79:60:15:93:0b:21:6f:27:09:8e:
                    6e:b3:08:73:96:db:7c:85:b1:31:cf:6c:d9:34:ac:
                    2a:72:c8:84:15:c9:58:0a:d9:8c:62:a1:f6:83:89:
                    d3:01:f4:9d:4e:44:6f:47:1f:7d:3d:4f:6d:80:fb:
                    fa:ba:2d:37:fe:8f:9e:26:ec:eb:79:18:90:7f:9f:
                    21:ea:17:95:61:2d:f6:ac:d7:23:ec:b6:12:b1:90:
                    44:80:3c:d0:16:9d:5f:84:07:41:da:75:05:28:34:
                    31:fd:9f:22:4e:4e:2c:d3:dc:0a:91:3d:24:3a:11:
                    96:e0:58:96:60:05:77:45:75:1a:89:dc:14:ef:d7:
                    3c:5a:47:f8:e8:30:9e:cb:3b:a8:d5:fc:c9:3f:f1:
                    77:23:c6:92:4e:c0:c7:8a:d0:8c:45:ee:e5:ed:29:
                    72:89:5f:22:b5:bf:90:67:7c:09:23:9b:1f:ac:b4:
                    3c:75:1f:cf:13:15:24:ab:c5:00:53:9c:9f:5e:3e:
                    4d:4f:e9:7b:46:02:47:f3:35:fd:18:10:22:af:5b:
                    a7:b8:43:19:78:ec:11:6c:47:c8:c1:bc:1a:d4:d9:
                    d8:17:33:79:59:8b:36:ab:01:e1:09:5c:9e:dc:fa:
                    cb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:52:28:8A:73:A9:0A:EA:EA:B9:D9:C1:61:9E:AC:83:1E:D7:8B:EE
            X509v3 Authority Key Identifier:
                keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e36382e302f32322d3234203d3e20313531323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:ca:4b:8f:c9:82:3e:93:11:9f:70:eb:ee:af:58:0a:c3:f5:
         ea:8c:68:fc:2c:7b:b7:11:74:63:97:02:eb:c9:fa:01:16:4a:
         4c:92:a9:42:88:64:b1:11:1f:ba:a6:fa:92:b4:3a:72:65:a8:
         d4:61:f4:5a:55:f1:97:a5:83:27:c3:a2:36:22:35:d5:ee:77:
         7b:ef:cf:04:81:04:95:d3:68:41:81:57:06:e8:65:a3:a3:06:
         e4:03:06:79:c0:eb:63:dc:92:f7:e9:dc:ac:fa:50:9e:c1:eb:
         40:de:c4:23:43:20:53:7f:bc:cd:b2:c2:c4:bd:81:fc:36:69:
         63:ac:64:4e:57:c7:a9:b0:df:dc:9f:bb:7c:46:4e:12:b2:23:
         ee:f2:c8:02:b7:16:74:57:05:c0:2f:e5:48:33:f8:f9:ae:d6:
         df:02:af:a3:2a:f4:28:fb:8e:8e:8d:d4:33:b4:78:03:71:43:
         4c:0d:e1:52:dd:22:bd:50:9d:16:32:30:cb:a5:de:95:58:ae:
         af:64:4b:e4:da:25:1f:3b:18:2e:7b:c0:4a:1e:03:26:74:d0:
         47:41:e7:f7:3f:d8:c9:8f:e5:54:bd:b1:a3:c1:78:b0:2f:a4:
         29:22:c8:bc:3e:92:eb:4d:74:52:88:b8:3a:31:6a:a0:e3:39:
         84:c0:db:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:50 2026 by rpki-client