This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e203132303736.roa
File:                     3130332e36312e36302e302f32342d3234203d3e203132303736.roa (raw, json)
Hash identifier:          o3XFs4ehHieDzjm7TquUwjqabh4fisSk2olE28GuPk8=
Subject key identifier:   4C:1F:65:CD:FC:A9:1F:F8:AD:8C:73:10:B0:BE:E0:83:B5:84:1D:5D
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       355E17ABFE90C21AA382C6A2FB86F2F45DAB5FAA
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e203132303736.roa
Signing time:             Tue 20 Jan 2026 02:15:37 +0000
ROA not before:           Tue 20 Jan 2026 02:10:37 +0000
ROA not after:            Tue 19 Jan 2027 02:15:37 +0000
asID:                     12076
IP address blocks:        103.61.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5e:17:ab:fe:90:c2:1a:a3:82:c6:a2:fb:86:f2:f4:5d:ab:5f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:37 2026 GMT
            Not After : Jan 19 02:15:37 2027 GMT
        Subject: CN=4C1F65CDFCA91FF8AD8C7310B0BEE083B5841D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:dd:5d:ec:e0:33:01:9f:1c:39:d2:80:7a:
                    e6:69:06:53:d4:23:be:eb:96:4c:b5:14:5c:49:c9:
                    f8:8c:7a:6f:56:d7:64:45:f5:4f:1f:0b:fe:79:9b:
                    11:87:0d:00:ed:0d:bf:fd:7f:da:e6:0f:e0:c9:4b:
                    e0:a2:02:c3:24:69:f3:15:c0:43:15:ee:13:43:1d:
                    74:fb:20:68:48:d1:ad:05:7e:fc:43:49:51:5e:97:
                    73:a7:d6:0f:eb:f7:38:f0:3e:8d:6b:b7:99:1a:2b:
                    a6:55:19:4a:c3:9a:a2:c4:4b:24:8a:e7:eb:fd:92:
                    9d:8c:74:2a:84:bc:7d:f8:b5:75:f6:1f:90:e7:a7:
                    8b:33:09:18:5d:42:33:bc:98:87:e7:6d:59:8a:db:
                    8b:ba:da:89:52:19:56:d8:1c:ea:6c:bf:e9:5d:1a:
                    7c:8d:13:08:8c:84:2d:a2:2e:91:99:ca:cf:d3:05:
                    04:fa:40:8f:86:9f:c1:30:ff:6e:e8:dc:83:f9:f1:
                    2f:35:5d:db:27:01:25:6a:4a:44:2f:59:15:bc:6f:
                    f0:0d:17:9a:af:95:10:8b:49:fb:69:32:0e:f3:d5:
                    58:89:11:29:3d:97:f3:4c:27:1c:2a:66:16:7d:0e:
                    c4:38:5a:ec:d0:c0:4b:4a:a4:8b:6b:a1:c2:65:ec:
                    4d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1F:65:CD:FC:A9:1F:F8:AD:8C:73:10:B0:BE:E0:83:B5:84:1D:5D
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e203132303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:ae:cd:a9:5a:c7:e1:23:a1:d7:01:20:3d:84:2b:92:17:87:
         1a:58:dd:af:14:18:63:4d:28:16:71:04:2d:af:56:79:82:b5:
         9e:5d:5a:de:cf:b8:3f:aa:1b:2a:b8:15:46:ae:51:5d:d0:1a:
         a7:65:b8:ec:a4:65:42:54:d2:a0:e4:cb:f4:db:50:29:34:01:
         5b:e4:a4:de:47:e8:c0:fd:40:67:9a:16:d2:17:82:09:b5:8b:
         77:d8:2c:08:28:2d:c4:9e:c4:0b:27:6e:db:2e:41:ea:e3:ef:
         9b:f3:13:08:ea:ae:87:a2:d1:73:33:38:4e:a8:0b:b8:a4:35:
         28:f1:e2:d5:7b:1a:25:63:f6:7c:2b:33:dd:84:aa:78:7c:bc:
         fd:c7:0d:5c:4f:8d:99:13:75:b1:48:2e:55:5d:60:0b:89:a1:
         77:05:42:3b:e3:09:9d:47:61:7f:1a:d6:4a:55:41:f9:df:39:
         7f:a3:30:c8:66:e5:c4:99:ae:6f:c7:f6:a3:b3:27:fa:22:67:
         1b:56:fa:e3:a2:df:45:b8:4d:e0:cc:1f:49:9c:58:50:16:bb:
         f8:1f:5f:72:59:c1:06:6f:d1:a5:93:2f:7e:79:49:bf:c6:df:
         b3:57:0e:8b:28:46:92:f6:b8:15:c5:75:3f:60:9c:f5:e3:ed:
         77:dc:f2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:18:56 2026 by rpki-client