This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e392e32342e302f32322d3234203d3e20313531323936.roa
File:                     3130332e392e32342e302f32322d3234203d3e20313531323936.roa (raw, json)
Hash identifier:          tYibZuj8OEdbI/Q3XU9CgQa43up3w/0XZUPoQrVWfiI=
Subject key identifier:   A1:F8:01:1E:FD:A9:ED:00:A0:87:5E:BB:23:43:E9:31:2C:DC:D9:17
Certificate issuer:       /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial:       11B7339077B8D1BD41561BC4341084F24EC84BD7
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e392e32342e302f32322d3234203d3e20313531323936.roa
Signing time:             Tue 20 Jan 2026 02:18:05 +0000
ROA not before:           Tue 20 Jan 2026 02:13:05 +0000
ROA not after:            Tue 19 Jan 2027 02:18:05 +0000
asID:                     151296
IP address blocks:        103.9.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b7:33:90:77:b8:d1:bd:41:56:1b:c4:34:10:84:f2:4e:c8:4b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
        Validity
            Not Before: Jan 20 02:13:05 2026 GMT
            Not After : Jan 19 02:18:05 2027 GMT
        Subject: CN=A1F8011EFDA9ED00A0875EBB2343E9312CDCD917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fb:e9:c9:4a:fc:06:29:d2:e2:dc:6d:7f:9e:
                    f0:67:4b:87:00:8c:a2:d9:d7:26:e9:94:a9:06:0f:
                    77:99:73:f7:14:cf:a2:b0:2e:31:cc:2a:b3:62:d9:
                    19:8a:33:24:5e:72:66:cf:88:c7:2d:7c:2c:2e:65:
                    fb:22:aa:27:39:31:5e:17:c5:45:3f:35:31:07:7b:
                    74:b4:f9:2a:8d:e5:3a:43:ec:26:7c:fa:8b:50:e9:
                    44:58:a0:b1:7a:a3:fd:59:69:40:93:fd:16:41:e6:
                    be:81:0a:da:d0:31:f7:f0:9e:1d:33:a1:57:ff:0e:
                    ea:1e:9e:11:c0:89:bb:36:4a:47:8f:8b:93:c6:fe:
                    98:8b:64:66:df:6b:db:9d:80:59:16:ab:29:cc:9a:
                    0a:da:45:6f:2d:60:0a:d7:f6:d4:5d:6e:42:5b:6c:
                    66:04:a9:65:b1:3a:57:2d:29:81:3c:d5:d1:3e:b7:
                    0e:97:34:8c:e8:37:09:d7:b5:e3:56:36:7b:b3:7b:
                    bb:8f:99:e5:88:0d:e9:12:d3:6c:6f:a7:73:4b:78:
                    44:74:16:d2:00:3b:12:3d:7b:86:a0:76:75:6b:6f:
                    3f:7a:99:52:3c:3c:65:ef:00:96:35:42:36:84:1d:
                    31:27:40:b4:12:ee:5c:54:09:22:8e:65:4f:89:96:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F8:01:1E:FD:A9:ED:00:A0:87:5E:BB:23:43:E9:31:2C:DC:D9:17
            X509v3 Authority Key Identifier:
                keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e392e32342e302f32322d3234203d3e20313531323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:c6:a8:0f:e2:15:ed:40:c7:57:04:99:89:08:a8:24:83:d8:
         cf:54:bb:fd:19:3c:27:e8:ff:c6:8d:d3:40:46:9c:c8:2c:37:
         2c:09:0c:bb:d9:cf:e3:86:a1:13:66:f2:2b:c5:7d:a7:02:2e:
         bf:3c:80:57:38:82:98:68:2d:75:55:8b:66:be:e0:45:f6:99:
         9a:79:57:dc:36:61:d8:6b:9f:89:62:c4:f8:9a:51:f3:6a:fa:
         2a:a9:42:77:60:5c:aa:8f:d8:70:84:ec:69:9c:8a:91:70:fd:
         c3:e4:64:ac:16:5a:a0:0c:af:79:ef:90:60:1d:ec:3a:e3:eb:
         6c:38:03:22:c8:52:b8:a2:85:d3:19:15:45:f3:e9:70:a8:9a:
         be:5c:c5:0d:aa:2a:9a:b4:67:1d:c2:66:2d:d1:77:1c:2a:2f:
         76:64:de:d2:eb:da:9b:70:56:47:11:9d:98:32:b1:74:82:2c:
         e1:a3:31:7c:f1:ce:ef:c1:2d:39:bd:56:82:57:48:d4:e1:45:
         d2:6a:73:88:f2:c3:41:b0:1d:7d:ce:30:74:5f:46:e9:51:01:
         25:fe:69:02:53:76:7f:c2:96:1a:31:95:d1:6f:fe:eb:1d:1a:
         ad:6a:dc:af:16:7e:4f:32:b4:eb:6c:d4:10:60:ab:35:1e:45:
         7b:f7:29:49
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUEbczkHe40b1BVhvENBCE8k7IS9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJB
MEY0MzJCRjAeFw0yNjAxMjAwMjEzMDVaFw0yNzAxMTkwMjE4MDVaMDMxMTAvBgNV
BAMTKEExRjgwMTFFRkRBOUVEMDBBMDg3NUVCQjIzNDNFOTMxMkNEQ0Q5MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF++nJSvwGKdLi3G1/nvBnS4cA
jKLZ1ybplKkGD3eZc/cUz6KwLjHMKrNi2RmKMyRecmbPiMctfCwuZfsiqic5MV4X
xUU/NTEHe3S0+SqN5TpD7CZ8+otQ6URYoLF6o/1ZaUCT/RZB5r6BCtrQMffwnh0z
oVf/DuoenhHAibs2SkePi5PG/piLZGbfa9udgFkWqynMmgraRW8tYArX9tRdbkJb
bGYEqWWxOlctKYE81dE+tw6XNIzoNwnXteNWNnuze7uPmeWIDekS02xvp3NLeER0
FtIAOxI9e4agdnVrbz96mVI8PGXvAJY1QjaEHTEnQLQS7lxUCSKOZU+JluTJAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUofgBHv2p7QCgh167I0PpMSzc2RcwHwYDVR0j
BBgwFoAUeazK1EkVKe2jgXDzSliE0qD0Mr8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDg4MTAyNS8wLzc5QUNDQUQ0NDkxNTI5RURBMzgxNzBGMzRBNTg4
NEQyQTBGNDMyQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJBMEY0MzJCRi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0ODgxMDI1LzAvMzEzMDMzMmUzOTJl
MzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzkzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcJGDANBgkqhkiG9w0BAQsFAAOCAQEAg8aoD+IV7UDHVwSZiQioJIPYz1S7
/Rk8J+j/xo3TQEacyCw3LAkMu9nP44ahE2byK8V9pwIuvzyAVziCmGgtdVWLZr7g
RfaZmnlX3DZh2GufiWLE+JpR82r6KqlCd2Bcqo/YcITsaZyKkXD9w+RkrBZaoAyv
ee+QYB3sOuPrbDgDIshSuKKF0xkVRfPpcKiavlzFDaoqmrRnHcJmLdF3HCovdmTe
0uvam3BWRxGdmDKxdIIs4aMxfPHO78EtOb1WgldI1OFF0mpziPLDQbAdfc4wdF9G
6VEBJf5pAlN2f8KWGjGV0W/+6x0arWrcrxZ+TzK062zUEGCrNR5Fe/cpSQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:35 2026 by rpki-client