This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e20313339313337.roa
File:                     3130332e36312e36312e302f32342d3234203d3e20313339313337.roa (raw, json)
Hash identifier:          rDY7BJ0UFHaq/AFROmyOnb/jbKLddvs/0pieqOT1fv0=
Subject key identifier:   5A:6C:05:12:41:38:22:FB:66:35:A3:3B:C5:F2:19:A0:B3:CD:E2:02
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       3C8E41B8A59D4F3E2F07BABCE14EA45A640523E0
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e20313339313337.roa
Signing time:             Tue 20 Jan 2026 02:15:40 +0000
ROA not before:           Tue 20 Jan 2026 02:10:40 +0000
ROA not after:            Tue 19 Jan 2027 02:15:40 +0000
asID:                     139137
IP address blocks:        103.61.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8e:41:b8:a5:9d:4f:3e:2f:07:ba:bc:e1:4e:a4:5a:64:05:23:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:40 2026 GMT
            Not After : Jan 19 02:15:40 2027 GMT
        Subject: CN=5A6C0512413822FB6635A33BC5F219A0B3CDE202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:e7:52:ff:a8:27:67:ef:1d:9f:93:06:fd:
                    ab:6a:db:c5:94:84:d5:0f:eb:4e:14:5a:4c:90:e7:
                    ab:f1:1f:56:7e:eb:cd:08:b6:c8:20:2f:1f:0c:33:
                    ac:de:ce:38:7b:fa:98:62:94:1d:e5:ac:bd:a2:5f:
                    8f:f0:a9:cd:7f:49:f1:85:8d:a7:e4:73:03:85:67:
                    17:b1:f7:9d:61:ec:68:5a:be:17:c2:31:a0:5d:e1:
                    0e:b6:ea:3a:86:88:9e:78:63:a4:0a:60:6e:61:e8:
                    3b:61:d2:66:2d:23:44:f7:cb:1e:6e:ff:9e:40:8b:
                    4a:f9:84:a0:9a:21:8a:59:61:e1:f9:52:84:38:2c:
                    22:08:f2:e1:e5:21:25:f1:46:4c:c7:20:fb:5f:c8:
                    7e:ae:ba:82:4e:35:3d:48:82:63:fd:12:2d:0d:a0:
                    2d:c3:9a:0e:34:c0:dc:1d:15:8c:e6:4c:88:dd:1c:
                    10:1e:6d:63:7c:5c:b6:f3:3e:df:a9:be:88:0c:f4:
                    d1:2c:d4:e2:b7:c8:ef:44:2b:ce:67:54:d4:4a:f8:
                    e6:76:6e:9f:92:91:8a:78:1b:86:10:bc:87:1d:67:
                    c0:c8:eb:f2:7b:49:0c:e3:e2:f1:39:b8:6f:92:f7:
                    60:7b:04:77:cf:c2:2d:43:d1:8a:51:75:96:21:d4:
                    06:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6C:05:12:41:38:22:FB:66:35:A3:3B:C5:F2:19:A0:B3:CD:E2:02
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e20313339313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:08:67:af:d4:48:de:95:a5:8f:08:ff:07:1e:51:f6:22:41:
         d3:f2:e9:18:7e:ab:4d:1f:a4:c8:ec:ad:71:fe:44:ee:b9:18:
         58:45:76:11:2f:c9:29:53:0c:01:e0:b4:a0:de:b9:3d:31:52:
         72:68:f5:e7:8e:29:b3:11:b1:bc:2e:92:11:d6:0b:53:21:99:
         7c:6c:52:8a:a1:0f:50:19:22:b2:d3:17:5d:99:91:81:60:91:
         63:67:7b:f2:77:99:bc:93:42:01:7d:70:69:94:e8:6c:8b:2a:
         87:48:d1:db:c0:b7:6c:40:a4:37:ff:f0:48:97:f5:9d:34:88:
         7c:b4:2d:b7:43:a8:58:96:be:de:ce:a5:54:d3:36:c6:60:07:
         57:08:c9:97:2e:60:a6:05:83:e3:c9:40:59:0f:c1:9d:a8:64:
         75:de:22:d1:26:92:5b:7d:9c:2c:12:fc:3b:c1:ee:ac:83:48:
         c8:9b:d5:63:7d:63:31:1e:39:89:4a:3a:b8:18:00:be:e6:1b:
         2f:57:06:6c:17:38:62:e8:cb:dc:73:7e:5b:2c:5b:64:c3:cd:
         99:ba:fc:ba:cb:b9:d0:2f:a1:96:48:ce:ba:99:25:95:63:a3:
         55:9b:d2:6b:c4:0a:54:3e:38:37:22:49:b7:cd:f0:98:3a:35:
         6a:87:86:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:57 2026 by rpki-client