This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e203633353832.roa
File:                     3130332e36312e36302e302f32342d3234203d3e203633353832.roa (raw, json)
Hash identifier:          JCM0NyMabx7HGc7kskoktFSfN7q5YR2eXw+IUU2x160=
Subject key identifier:   86:43:D8:BD:DF:5F:12:1B:98:26:8A:C7:FF:C6:E8:06:9D:95:03:F7
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       3CACC7C4D4EF131416178EF3E47692D960DC79C3
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e203633353832.roa
Signing time:             Tue 20 Jan 2026 02:15:36 +0000
ROA not before:           Tue 20 Jan 2026 02:10:36 +0000
ROA not after:            Tue 19 Jan 2027 02:15:36 +0000
asID:                     63582
IP address blocks:        103.61.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ac:c7:c4:d4:ef:13:14:16:17:8e:f3:e4:76:92:d9:60:dc:79:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:36 2026 GMT
            Not After : Jan 19 02:15:36 2027 GMT
        Subject: CN=8643D8BDDF5F121B98268AC7FFC6E8069D9503F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:77:99:85:ac:df:5e:91:2a:c6:98:0a:68:b7:
                    d3:10:0f:b1:c3:68:89:08:c4:43:4c:15:13:bc:0a:
                    a8:5a:9f:3a:b3:3a:ba:4f:03:76:12:4d:9a:6f:f0:
                    75:71:72:40:05:e6:19:59:43:eb:ef:04:77:9e:21:
                    7d:01:f1:2f:3e:82:a4:38:d1:3d:a7:77:3b:a2:23:
                    71:82:8b:21:7b:db:5c:34:8a:53:c1:ea:ad:77:9f:
                    75:30:07:ea:d5:db:91:7b:de:2d:d2:cd:2b:bc:4e:
                    35:64:37:34:ad:3b:aa:9b:2d:07:d2:bb:66:13:51:
                    14:54:48:79:9d:7c:a4:00:57:4e:72:6f:f6:a7:0b:
                    2e:ef:a4:88:28:48:34:95:23:fb:ec:b0:76:e6:77:
                    78:a1:06:30:a3:ab:4e:07:24:66:13:88:f7:4d:1a:
                    b6:ae:a2:70:df:da:5a:d1:be:74:ac:fe:89:10:02:
                    2f:4e:c7:6f:39:04:66:59:89:cd:67:54:f6:f3:f0:
                    dd:74:14:c2:ca:d9:fc:dd:ea:8c:29:12:4e:c2:93:
                    88:e3:05:da:13:d7:34:90:8a:89:4c:83:da:be:ac:
                    bc:b5:7c:26:8f:83:3c:f4:15:0c:50:4d:2e:4c:20:
                    a0:a0:0a:84:10:52:97:04:63:1e:2d:69:de:8b:c9:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:43:D8:BD:DF:5F:12:1B:98:26:8A:C7:FF:C6:E8:06:9D:95:03:F7
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e203633353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:2b:de:4e:7c:fe:24:34:03:ee:5c:c2:7a:7f:3b:89:fc:29:
         d7:ad:04:70:21:8d:11:bb:d4:43:d0:96:9f:05:30:22:8a:28:
         60:e4:45:ec:1d:77:10:e9:c1:73:f3:74:24:28:05:fe:82:35:
         9b:96:1b:82:7d:6d:90:20:82:a7:65:9a:31:af:cc:67:28:74:
         b3:5d:5a:61:4c:f5:b0:bb:cb:fa:a0:fc:3d:6f:c2:ec:92:2d:
         b7:aa:5f:c5:96:71:d0:5c:fe:57:8e:98:b3:09:8e:5b:0d:95:
         6b:e7:14:f4:68:31:d7:21:c6:39:8c:3a:50:9b:70:1c:c8:db:
         d0:e6:a5:28:75:f1:a3:cd:e0:5b:46:87:c5:fe:88:68:ba:1a:
         6b:35:b0:30:e9:4e:86:dd:1d:0f:ef:ac:87:d0:8d:57:96:c6:
         10:89:5f:66:62:96:ef:62:11:69:02:56:8a:71:82:96:42:ee:
         d0:ca:b3:5c:2d:e5:00:fe:f5:f6:7a:d8:7f:b5:03:77:79:4d:
         ce:01:b1:d2:9b:53:80:04:80:19:03:1b:e3:9f:8b:a4:e1:24:
         ed:29:f6:18:6d:9e:42:cc:db:68:26:d5:bf:a8:15:70:4a:64:
         dd:e4:78:51:76:6a:b4:82:41:33:14:08:7e:8e:dd:9e:4e:4e:
         bf:81:dd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:01 2026 by rpki-client