This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e203633353833.roa
File:                     3130332e36312e36312e302f32342d3234203d3e203633353833.roa (raw, json)
Hash identifier:          q9tSsEx5Fy0sCiaFkaOKSklS7nFky1MMf1/lgAgaTOU=
Subject key identifier:   A3:D0:40:74:1B:DE:2E:A6:09:AD:5D:0C:45:DB:64:4C:94:BD:12:C0
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       134FB9B303265E64FBDB25A006E0DAB28B47FF74
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e203633353833.roa
Signing time:             Tue 20 Jan 2026 02:16:41 +0000
ROA not before:           Tue 20 Jan 2026 02:11:41 +0000
ROA not after:            Tue 19 Jan 2027 02:16:41 +0000
asID:                     63583
IP address blocks:        103.61.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4f:b9:b3:03:26:5e:64:fb:db:25:a0:06:e0:da:b2:8b:47:ff:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:11:41 2026 GMT
            Not After : Jan 19 02:16:41 2027 GMT
        Subject: CN=A3D040741BDE2EA609AD5D0C45DB644C94BD12C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:41:92:a9:39:4d:6d:e6:47:ec:e3:a0:e9:
                    2e:57:bf:92:80:3e:38:61:6a:d7:f1:c7:e3:f3:62:
                    dc:81:96:6d:69:f9:b5:fa:60:a5:47:09:d1:2a:cc:
                    43:e5:75:e3:79:8b:c6:0b:6c:19:c6:64:28:34:8e:
                    01:cf:47:1e:6c:75:02:e7:30:c9:44:d0:1a:2b:46:
                    6e:65:1f:fd:ec:67:15:22:d5:ec:b7:33:51:f0:2a:
                    2f:a5:83:95:05:1e:d8:d9:0b:32:f4:fe:92:7f:21:
                    37:de:3e:8a:41:13:98:09:e5:9a:eb:18:60:e4:e8:
                    20:5e:f9:50:18:f6:7e:bb:dd:80:4c:df:d7:38:07:
                    a4:4d:25:4d:cb:00:71:0a:b5:04:bf:26:f8:99:8b:
                    9a:56:1e:e1:74:2e:44:fa:d6:27:c2:66:53:ab:b8:
                    7c:86:4a:08:cf:9b:c0:3c:8e:96:3b:94:73:12:0a:
                    28:19:52:87:42:9d:73:16:f8:26:50:26:7e:1e:b5:
                    af:f9:9a:34:ea:49:37:55:2c:20:c3:a8:33:1f:ca:
                    8b:ab:87:ea:fc:8c:c1:6a:1b:eb:e5:af:31:c2:5d:
                    ae:ca:79:0d:06:de:cc:b9:10:77:83:f4:29:33:49:
                    55:00:0d:28:ab:83:6c:90:49:e9:5d:2b:5a:21:78:
                    63:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D0:40:74:1B:DE:2E:A6:09:AD:5D:0C:45:DB:64:4C:94:BD:12:C0
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e203633353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:a7:a0:09:06:f4:be:90:f6:e5:bd:f9:a7:ae:87:a8:fb:b0:
         61:88:8d:e1:9c:e4:23:7f:b8:ad:c6:d8:0e:91:dc:b0:21:fd:
         ad:f5:20:31:18:cf:cd:d4:20:90:4a:29:c8:5f:58:05:fd:d5:
         94:b5:a9:d6:0d:e2:0e:f8:ba:ba:86:8a:41:32:30:a1:8b:7e:
         58:21:4e:bd:06:5e:4c:07:dd:69:92:48:ac:3d:06:3e:6c:86:
         26:ee:f4:32:81:0a:e4:73:d1:ab:08:57:04:ec:d9:86:4c:d8:
         be:d8:e1:81:91:3a:83:73:f7:9e:ee:f9:7e:b1:fc:dd:19:fe:
         3f:48:54:d6:f5:9c:a1:0d:60:d1:b7:8e:67:f2:ea:b9:0b:f1:
         fb:e3:f2:75:48:d1:45:91:4a:4d:d1:5d:76:f6:c5:8a:3c:ef:
         8e:d2:ee:b6:a1:2a:7b:59:d1:ce:0e:ae:2a:20:67:bf:ba:b3:
         57:c3:75:fe:a9:4a:70:5b:b5:fb:e2:23:b5:f6:fa:da:db:9c:
         fd:1e:c8:df:8b:36:e1:2e:10:dc:ef:a4:af:11:83:a9:f0:52:
         86:6f:a4:e5:88:d1:ec:b6:33:cc:f6:ca:4f:7a:af:07:77:b6:
         68:56:c2:f7:8c:3b:64:68:24:19:c5:bf:00:b8:4f:5c:99:6d:
         e5:5b:b2:26
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUE0+5swMmXmT72yWgBuDasotH/3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBD
OUUzRjEzNjAeFw0yNjAxMjAwMjExNDFaFw0yNzAxMTkwMjE2NDFaMDMxMTAvBgNV
BAMTKEEzRDA0MDc0MUJERTJFQTYwOUFENUQwQzQ1REI2NDRDOTRCRDEyQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdWUGSqTlNbeZH7OOg6S5Xv5KA
Pjhhatfxx+PzYtyBlm1p+bX6YKVHCdEqzEPldeN5i8YLbBnGZCg0jgHPRx5sdQLn
MMlE0BorRm5lH/3sZxUi1ey3M1HwKi+lg5UFHtjZCzL0/pJ/ITfePopBE5gJ5Zrr
GGDk6CBe+VAY9n673YBM39c4B6RNJU3LAHEKtQS/JviZi5pWHuF0LkT61ifCZlOr
uHyGSgjPm8A8jpY7lHMSCigZUodCnXMW+CZQJn4eta/5mjTqSTdVLCDDqDMfyour
h+r8jMFqG+vlrzHCXa7KeQ0G3sy5EHeD9CkzSVUADSirg2yQSeldK1oheGNXAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUo9BAdBveLqYJrV0MRdtkTJS9EsAwHwYDVR0j
BBgwFoAUW1hi/H9VTB6oIOmo9LsuwMnj8TYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTc1NjE2Mi8wLzVCNTg2MkZDN0Y1NTRDMUVBODIwRTlBOEY0QkIy
RUMwQzlFM0YxMzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNzU2MTYyLzAvMzEzMDMzMmUzNjMx
MmUzNjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM1MzgzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGc9PTANBgkqhkiG9w0BAQsFAAOCAQEAtaegCQb0vpD25b35p66HqPuwYYiN
4ZzkI3+4rcbYDpHcsCH9rfUgMRjPzdQgkEopyF9YBf3VlLWp1g3iDvi6uoaKQTIw
oYt+WCFOvQZeTAfdaZJIrD0GPmyGJu70MoEK5HPRqwhXBOzZhkzYvtjhgZE6g3P3
nu75frH83Rn+P0hU1vWcoQ1g0beOZ/LquQvx++PydUjRRZFKTdFddvbFijzvjtLu
tqEqe1nRzg6uKiBnv7qzV8N1/qlKcFu1++Ijtfb62tuc/R7I34s24S4Q3O+krxGD
qfBShm+k5YjR7LYzzPbKT3qvB3e2aFbC94w7ZGgkGcW/ALhPXJlt5VuyJg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:15:58 2026 by rpki-client