This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121625090/0/3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa
File:                     3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa (raw, json)
Hash identifier:          gWEyoD8i/KAG6HKTHIPr1VGYVw5fCMw/nA41X2XFLJQ=
Subject key identifier:   75:E3:06:0C:C9:1B:60:C8:1B:B3:19:67:F1:64:59:8A:06:F0:D7:0D
Certificate issuer:       /CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C
Certificate serial:       14C5A7DEA6B50D336A7EE474587CA13F4E1E4966
Authority key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa
Signing time:             Tue 20 Jan 2026 02:22:42 +0000
ROA not before:           Tue 20 Jan 2026 02:17:42 +0000
ROA not after:            Tue 19 Jan 2027 02:22:42 +0000
asID:                     63719
IP address blocks:        103.232.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 16:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c5:a7:de:a6:b5:0d:33:6a:7e:e4:74:58:7c:a1:3f:4e:1e:49:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C
        Validity
            Not Before: Jan 20 02:17:42 2026 GMT
            Not After : Jan 19 02:22:42 2027 GMT
        Subject: CN=75E3060CC91B60C81BB31967F164598A06F0D70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:80:b3:8d:5f:32:95:8b:fd:7d:f6:50:bd:
                    ae:56:f1:90:41:d7:5b:72:d9:9e:c4:bf:7d:51:23:
                    c6:a9:f8:81:aa:10:d1:3f:e8:4e:07:b7:f9:50:5d:
                    19:e6:16:df:c1:f1:b1:b1:91:d7:19:67:d2:f4:5f:
                    01:70:47:06:57:fc:6d:5b:66:2a:93:46:cd:ce:e2:
                    2d:96:e9:34:58:2a:f0:c8:e5:8f:c1:93:67:b7:0f:
                    c8:07:76:d8:5b:20:f0:f0:04:ef:05:6a:fa:81:e0:
                    b0:75:8d:0e:17:29:68:59:76:6d:ab:25:6f:6a:08:
                    85:35:03:19:f1:a8:a3:16:bf:74:70:17:d7:51:22:
                    c2:30:9b:ed:2a:f9:61:47:84:59:43:f4:08:9b:d3:
                    46:90:df:da:6d:9a:c8:0e:3d:05:9c:a2:08:22:43:
                    98:fc:31:03:68:53:e0:c5:ed:9d:ca:9c:cb:47:57:
                    87:47:3d:de:ab:73:c6:e7:62:0b:be:45:2a:c7:24:
                    60:22:d4:d2:a9:5a:44:4a:4e:86:84:cb:af:eb:a0:
                    8f:f5:24:43:d1:ef:93:32:e5:8a:90:59:d4:ea:13:
                    77:66:88:8f:ee:df:1d:cc:9a:c5:3c:52:e5:41:a3:
                    bb:48:1b:89:92:ac:e9:14:f4:a8:8c:d9:53:f3:3b:
                    fd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E3:06:0C:C9:1B:60:C8:1B:B3:19:67:F1:64:59:8A:06:F0:D7:0D
            X509v3 Authority Key Identifier:
                keyid:5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:37:f9:61:a4:34:49:99:4d:4b:1e:84:5b:ae:a9:06:d6:47:
         94:33:68:ce:23:10:55:84:44:eb:2c:6e:9d:e0:7c:37:e7:d9:
         8a:ee:8e:09:3d:c7:6e:48:72:f6:35:43:6a:4e:15:c8:6c:92:
         00:da:f0:6a:3f:09:6a:b7:5d:fb:44:38:ff:d5:a8:90:a6:5c:
         9f:19:c0:99:f8:2f:65:cc:1f:89:4c:5f:97:ee:3e:8f:2d:2f:
         d6:5e:44:19:cf:82:34:ac:30:8e:44:78:68:68:28:86:d6:b0:
         42:df:8f:48:13:f4:7c:3f:8c:d8:2e:96:94:14:39:f7:bd:d8:
         6c:70:ed:00:8e:36:55:bc:8c:f9:e9:2f:8a:6f:0a:f2:3a:91:
         d3:af:0d:53:04:6f:7f:00:d5:84:33:48:f2:75:f7:60:b6:0c:
         71:4e:2f:36:8c:1f:42:3c:8c:1e:57:b2:87:d2:a9:f4:8e:40:
         0d:b2:eb:74:6a:11:7b:d4:70:28:ec:79:be:bd:5e:6b:6e:d1:
         83:25:da:2a:d1:48:2a:61:e2:fd:be:bf:9d:e3:40:b7:64:4b:
         6c:84:fb:f2:10:7c:72:a5:ed:7d:b3:92:97:21:38:09:fd:3e:
         85:bc:0a:6a:90:9a:3d:82:61:d6:f2:16:a6:f1:2f:92:6a:fb:
         8e:75:7a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:44 2026 by rpki-client