This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e203633353833.roa
File:                     3130332e36312e36302e302f32342d3234203d3e203633353833.roa (raw, json)
Hash identifier:          +FPoiFu1a1T+oUpR4AAioyTSC69fdOQK3BUphezWFJU=
Subject key identifier:   D7:01:2A:EB:72:09:6A:4F:45:F7:97:F5:C9:CF:63:35:1B:CE:FC:F4
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       2416ABAB4F87F86D2E3A2C324953BC707BF0CAA0
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e203633353833.roa
Signing time:             Tue 20 Jan 2026 02:15:38 +0000
ROA not before:           Tue 20 Jan 2026 02:10:38 +0000
ROA not after:            Tue 19 Jan 2027 02:15:38 +0000
asID:                     63583
IP address blocks:        103.61.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:16:ab:ab:4f:87:f8:6d:2e:3a:2c:32:49:53:bc:70:7b:f0:ca:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:38 2026 GMT
            Not After : Jan 19 02:15:38 2027 GMT
        Subject: CN=D7012AEB72096A4F45F797F5C9CF63351BCEFCF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f9:80:4c:60:9c:cc:c6:21:a3:d7:72:5a:9a:
                    87:ba:84:cd:74:36:4e:59:9a:ea:0e:2c:33:77:52:
                    a0:5d:8f:0e:bd:00:03:0b:f4:2d:46:bf:53:b9:38:
                    a7:dc:61:81:2b:fa:80:c9:aa:85:91:ea:9a:b6:0f:
                    01:6a:4c:bf:06:fb:59:c5:2a:75:fd:90:f5:d6:2b:
                    b9:5f:25:49:63:5e:fe:9b:8d:c5:ff:97:f2:8a:26:
                    87:6f:15:e6:6e:9d:17:44:eb:fe:63:5d:56:13:41:
                    02:8d:d5:8e:92:97:5c:5f:9e:03:22:87:b0:b7:bb:
                    21:aa:8a:bf:d1:05:09:c9:c6:57:4c:09:4a:ab:e6:
                    89:08:6c:48:d8:ad:2d:bb:aa:c2:16:ae:53:4b:4d:
                    24:fd:26:8f:33:4b:9e:77:93:97:13:ae:41:0b:ad:
                    06:df:d9:96:8c:59:7b:a8:20:76:37:87:41:cf:35:
                    61:f3:3b:d3:df:f9:f0:89:e3:77:3f:48:82:67:a6:
                    4c:3d:2e:c9:f9:4a:60:d2:c8:cb:c6:94:05:2c:7c:
                    d0:6c:49:49:c2:ab:d9:2b:35:b8:86:e9:25:70:e8:
                    e2:a9:b0:69:a9:2a:14:14:84:34:7f:e2:f3:71:71:
                    82:c9:ab:60:0b:35:8f:9b:7d:63:b2:17:8d:d9:b6:
                    c2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:01:2A:EB:72:09:6A:4F:45:F7:97:F5:C9:CF:63:35:1B:CE:FC:F4
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36302e302f32342d3234203d3e203633353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:59:d4:7a:cb:5f:c8:a6:30:b9:3e:68:9d:ad:15:5a:62:b7:
         ce:3e:eb:2e:5a:dd:b0:77:5e:d8:8d:af:ea:b4:34:74:8d:9c:
         96:0c:b5:16:40:f5:2e:cb:1d:0c:e6:5e:03:55:f2:a8:4a:28:
         4f:0e:e9:dc:4a:54:6f:de:c3:a0:f3:21:fd:f8:dd:63:2f:6c:
         a8:ce:64:ac:be:f9:43:7a:ab:59:77:54:bc:04:6b:ed:59:0e:
         72:0d:08:c4:6b:ec:22:16:ac:1d:56:da:61:ea:07:b5:1c:d4:
         7c:aa:23:1b:ac:73:2e:0e:66:31:de:ee:6f:5c:f3:ea:d1:e9:
         ae:14:c3:87:92:b5:eb:b9:32:6b:e9:72:74:be:ea:23:a1:9d:
         c3:24:d3:fb:66:b9:11:04:3e:19:6a:d9:95:f1:c1:f0:c4:0b:
         31:22:20:0d:1b:1c:ac:d2:24:66:9e:2c:81:04:d5:9b:86:d1:
         1d:8e:3d:bc:6b:e4:ff:12:73:03:8f:cb:07:2c:97:e6:f6:e1:
         dd:5f:6b:24:bd:df:3d:4a:1f:16:3e:e4:09:ea:0a:e1:d6:30:
         74:0a:59:29:76:f2:93:72:4f:a4:d6:9c:8f:e3:35:11:d8:d1:
         f7:bb:4e:bb:9b:33:ed:41:94:cc:eb:5c:01:bc:7e:ef:ef:8b:
         52:b8:aa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:39:30 2026 by rpki-client