This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e20313339313430.roa
File:                     3130332e36312e36302e302f32342d3234203d3e20313339313430.roa (raw, json)
Hash identifier:          ADjmw7GIfyLg8URnbDZVSWJCO1IjLUtM2OR5bH1F/jg=
Subject key identifier:   3E:34:E7:BE:46:2A:FB:A2:9B:4C:2B:73:DD:B6:54:91:68:32:F2:7D
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       1B1464EAC0AB2150DDDF31D4DC02CEE79520FFAB
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e20313339313430.roa
Signing time:             Tue 20 Jan 2026 02:16:41 +0000
ROA not before:           Tue 20 Jan 2026 02:11:41 +0000
ROA not after:            Tue 19 Jan 2027 02:16:41 +0000
asID:                     139140
IP address blocks:        103.61.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:14:64:ea:c0:ab:21:50:dd:df:31:d4:dc:02:ce:e7:95:20:ff:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:11:41 2026 GMT
            Not After : Jan 19 02:16:41 2027 GMT
        Subject: CN=3E34E7BE462AFBA29B4C2B73DDB654916832F27D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:f1:54:ff:60:5c:90:4e:03:01:69:ca:66:
                    61:92:8d:1f:70:b8:6e:1f:3d:04:bd:f0:53:09:fd:
                    40:3e:f2:22:63:a9:e3:d1:6d:a2:7d:5f:6a:fd:96:
                    0f:c4:62:09:6c:9d:36:23:53:dc:c0:a9:d5:47:f6:
                    9d:da:40:d7:d8:86:88:85:f9:63:4e:71:08:7f:9b:
                    5a:24:54:c6:96:9e:67:7a:63:88:7e:0b:3b:ae:fd:
                    ae:96:0e:93:ca:5b:ab:80:45:29:2c:6c:f2:42:23:
                    f9:b1:33:fd:85:1c:9c:f6:23:a2:3a:a1:61:47:3b:
                    d6:0d:b4:f6:56:fa:0d:01:47:77:34:86:43:7d:d4:
                    18:e3:70:c7:2d:c5:da:41:93:27:6f:99:a9:ba:a9:
                    c2:b1:5a:e3:8a:76:b0:c5:e9:f8:9f:33:b1:60:4e:
                    07:1c:3b:1d:c0:13:47:aa:ea:d2:cc:cd:7e:1e:09:
                    14:93:83:c3:b8:55:43:b0:03:4f:2b:01:ef:de:41:
                    c9:b4:6e:7c:51:6c:fb:8f:db:41:35:40:49:82:2b:
                    3c:8a:a9:75:3f:f1:ec:54:35:58:71:ac:7d:41:5d:
                    57:03:b6:58:af:16:c4:0f:9e:a0:f5:60:2a:e7:0f:
                    23:de:81:b7:ea:31:dd:aa:27:19:ba:5d:76:ab:9d:
                    25:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:34:E7:BE:46:2A:FB:A2:9B:4C:2B:73:DD:B6:54:91:68:32:F2:7D
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e20313339313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:46:b1:31:ae:9b:c1:0d:8f:19:2c:7e:1b:a2:82:77:ac:e5:
         86:f8:62:a2:f1:2e:be:46:48:60:8a:a9:c6:e8:ea:1a:6f:3e:
         7c:cc:b5:5c:3e:a0:82:6b:5f:66:89:30:fb:89:23:1a:7e:f1:
         86:67:ae:fd:70:ff:c0:df:b3:b9:01:43:77:5d:fe:4f:d4:34:
         e9:77:f8:3d:c6:86:80:61:c3:5d:12:50:c7:97:7d:f0:04:b8:
         47:a6:1e:c6:b9:cb:15:a9:1c:d1:1e:d3:9f:5d:93:d6:f3:2c:
         4b:ba:72:0c:13:ed:1c:98:47:95:f4:8e:3b:6b:a7:ba:db:4a:
         cc:91:0e:e0:5e:9f:90:86:dc:ca:28:d4:9e:77:8e:c0:43:fa:
         7c:5d:3c:13:dd:f4:43:34:20:b0:2f:4a:c3:b5:9a:0e:ac:b8:
         85:c5:04:ca:7d:67:8c:d5:b3:77:84:9e:a2:36:37:ff:e3:62:
         90:99:88:c0:dc:0a:58:1e:44:3f:9e:2a:12:1d:fb:ec:ba:57:
         70:f3:2d:82:3d:b4:95:df:55:35:3e:e4:7a:97:25:d1:70:63:
         3d:aa:52:df:a9:d9:22:44:b5:33:5f:75:92:8e:09:12:5e:bd:
         dd:d9:e4:2c:8b:ff:3d:63:66:d4:6e:15:68:c2:3e:2e:ff:86:
         44:6e:9f:8e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUGxRk6sCrIVDd3zHU3ALO55Ug/6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD
OUUzRjEzNjAeFw0yNjAxMjAwMjExNDFaFw0yNzAxMTkwMjE2NDFaMDMxMTAvBgNV
BAMTKDNFMzRFN0JFNDYyQUZCQTI5QjRDMkI3M0REQjY1NDkxNjgzMkYyN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkoPFU/2BckE4DAWnKZmGSjR9w
uG4fPQS98FMJ/UA+8iJjqePRbaJ9X2r9lg/EYglsnTYjU9zAqdVH9p3aQNfYhoiF
+WNOcQh/m1okVMaWnmd6Y4h+Czuu/a6WDpPKW6uARSksbPJCI/mxM/2FHJz2I6I6
oWFHO9YNtPZW+g0BR3c0hkN91BjjcMctxdpBkydvmam6qcKxWuOKdrDF6fifM7Fg
TgccOx3AE0eq6tLMzX4eCRSTg8O4VUOwA08rAe/eQcm0bnxRbPuP20E1QEmCKzyK
qXU/8exUNVhxrH1BXVcDtlivFsQPnqD1YCrnDyPegbfqMd2qJxm6XXarnSXXAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUPjTnvkYq+6KbTCtz3bZUkWgy8n0wHwYDVR0j
BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy
RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTc1NjE2Mi8wLzMxMzAzMzJlMzYz
MTJlMzYzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMxMzQzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGc9PDANBgkqhkiG9w0BAQsFAAOCAQEAZEaxMa6bwQ2PGSx+G6KCd6zl
hvhiovEuvkZIYIqpxujqGm8+fMy1XD6ggmtfZokw+4kjGn7xhmeu/XD/wN+zuQFD
d13+T9Q06Xf4PcaGgGHDXRJQx5d98AS4R6YexrnLFakc0R7Tn12T1vMsS7pyDBPt
HJhHlfSOO2unuttKzJEO4F6fkIbcyijUnneOwEP6fF08E930QzQgsC9Kw7WaDqy4
hcUEyn1njNWzd4SeojY3/+NikJmIwNwKWB5EP54qEh377LpXcPMtgj20ld9VNT7k
epcl0XBjPapS36nZIkS1M191ko4JEl693dnkLIv/PWNm1G4VaMI+Lv+GRG6fjg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:50:21 2026 by rpki-client