This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e203132303736.roa
File:                     3130332e36312e36312e302f32342d3234203d3e203132303736.roa (raw, json)
Hash identifier:          Is+nCovdkB24XBGhfdOHOJLTqpoMXrmy9GACz/BmESk=
Subject key identifier:   C3:CB:31:99:21:DC:65:5D:76:33:FC:28:85:E2:FC:3F:82:41:B4:C8
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       1D274CF0DEED7AE8094B9F42741BA415EF917964
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e203132303736.roa
Signing time:             Tue 20 Jan 2026 02:15:40 +0000
ROA not before:           Tue 20 Jan 2026 02:10:40 +0000
ROA not after:            Tue 19 Jan 2027 02:15:40 +0000
asID:                     12076
IP address blocks:        103.61.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:27:4c:f0:de:ed:7a:e8:09:4b:9f:42:74:1b:a4:15:ef:91:79:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:40 2026 GMT
            Not After : Jan 19 02:15:40 2027 GMT
        Subject: CN=C3CB319921DC655D7633FC2885E2FC3F8241B4C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:69:ac:17:25:83:df:1f:ca:cb:24:b2:fe:
                    de:37:ad:cb:94:d7:cf:7a:da:47:78:6b:1b:ff:e0:
                    d4:38:e0:65:87:29:f9:eb:c1:e3:25:08:fc:2a:c2:
                    47:98:c3:90:0a:4b:00:9d:73:1a:f8:62:65:a2:c0:
                    e2:d1:ae:65:02:e2:a6:f1:91:ec:c9:46:5c:ce:ea:
                    c8:f4:0f:9b:a4:2f:21:e5:5f:69:ce:a1:25:0c:8a:
                    10:fb:b4:20:ad:44:9e:d0:64:d1:ab:e9:13:8b:3f:
                    ac:bd:d7:0a:70:b9:42:1e:35:4e:e0:2e:eb:05:06:
                    e8:cd:36:03:4c:f1:bb:30:f7:d5:53:32:9b:2c:ef:
                    7f:8b:99:88:c9:50:66:d0:09:ff:ab:df:33:af:07:
                    44:5e:0d:44:11:8e:8b:c7:4e:84:2a:00:56:25:2d:
                    81:c0:6a:2f:46:47:05:ea:95:52:b5:a3:7c:ab:21:
                    4b:9f:17:3c:e1:ac:0f:85:bf:0d:5c:c2:cd:b1:8a:
                    58:04:d1:4d:6c:62:94:cc:36:28:86:39:ce:0a:a3:
                    8d:87:e7:41:af:fe:11:9a:1d:d0:cb:45:9f:c6:27:
                    12:ef:32:09:18:d0:e7:60:65:11:9d:2d:24:63:3b:
                    45:d5:e9:7e:6c:f4:f4:e3:5a:0a:a5:44:90:13:d7:
                    15:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CB:31:99:21:DC:65:5D:76:33:FC:28:85:E2:FC:3F:82:41:B4:C8
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e203132303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:bf:ae:82:fb:7e:78:b8:5b:b7:bc:d1:b3:c8:4e:6a:a9:40:
         33:2d:fd:7c:21:61:d2:44:0e:d8:6a:5b:62:c5:20:ba:a8:0d:
         27:2c:56:9e:90:f7:03:87:00:08:21:e3:69:f2:3f:76:65:0c:
         d2:da:29:df:06:6c:56:be:d0:d9:a6:be:f8:5a:ea:54:5a:92:
         87:aa:db:cb:a2:4e:15:97:a5:29:f3:4e:65:b4:c0:eb:e6:af:
         5e:4d:d4:3c:24:f3:ec:fc:4a:2b:ec:10:fe:88:b4:c0:8a:a2:
         b5:0c:78:51:5f:28:68:37:a5:50:3b:c3:64:bd:a8:8a:61:54:
         ea:e5:eb:64:63:ba:01:e5:f4:23:00:03:0f:4f:b3:0d:70:6f:
         b8:9c:64:47:f0:f2:40:4b:8a:e0:92:eb:6d:ea:e9:4e:fb:53:
         ef:72:21:64:ab:8e:ae:f4:3f:f0:04:90:fd:f4:27:59:7b:0d:
         fc:74:e0:c0:10:74:6f:0a:ce:d0:4b:c6:0c:af:84:c0:91:21:
         5e:ca:71:c7:48:22:71:5c:63:fb:d9:a5:9d:6e:c2:74:db:7f:
         cc:0a:c0:f8:b2:2f:a4:ae:e4:fa:70:0a:59:39:0e:c1:7a:90:
         18:5d:83:2b:dd:b0:19:a0:d2:a6:b5:86:1d:73:2a:0f:92:07:
         40:87:72:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:50:12 2026 by rpki-client