This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e2038303735.roa
File:                     3130332e36312e36312e302f32342d3234203d3e2038303735.roa (raw, json)
Hash identifier:          3TQHQ46hBwChI3jRqd1ONuNaYSMHNCRbqwYF16k+72w=
Subject key identifier:   86:91:62:B3:5E:DE:2F:42:41:FA:DA:AD:8C:66:F1:3A:F8:34:C2:61
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       27227FDEA3A7115FD91F8C69B2E21D6A93DD3F2D
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e2038303735.roa
Signing time:             Tue 20 Jan 2026 02:15:39 +0000
ROA not before:           Tue 20 Jan 2026 02:10:39 +0000
ROA not after:            Tue 19 Jan 2027 02:15:39 +0000
asID:                     8075
IP address blocks:        103.61.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 14:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:22:7f:de:a3:a7:11:5f:d9:1f:8c:69:b2:e2:1d:6a:93:dd:3f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:39 2026 GMT
            Not After : Jan 19 02:15:39 2027 GMT
        Subject: CN=869162B35EDE2F4241FADAAD8C66F13AF834C261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:bb:db:4b:a5:08:16:31:66:45:9e:f6:b1:
                    b0:4d:64:0b:52:ab:08:66:c5:e0:59:a0:b0:ca:d9:
                    1e:47:b1:72:37:ae:5a:f9:c9:5f:cc:1d:4a:2e:79:
                    1e:4e:73:02:59:a6:47:19:0f:36:b1:1a:02:60:d5:
                    b0:5b:21:5f:e8:05:cb:83:47:d6:8a:27:ea:c0:52:
                    87:71:c6:d5:85:57:97:9c:26:e5:11:d8:34:e2:8c:
                    ac:8d:70:9c:31:75:0b:6e:14:95:8b:12:c6:32:72:
                    a0:13:bb:e3:33:5e:9a:bc:28:73:25:a8:78:c8:2d:
                    66:ea:99:05:0d:ce:1e:56:1d:1f:41:c9:2f:c8:ab:
                    61:a7:ce:4a:ef:87:af:92:f8:7c:ff:13:7b:70:1f:
                    1f:b8:11:e6:80:42:38:1c:81:d2:c0:ea:a5:d1:8a:
                    30:5b:54:4f:1d:10:36:0f:eb:87:f1:70:05:5f:a0:
                    c9:8f:65:c0:a7:5a:cf:9c:33:ef:b8:a1:58:ef:23:
                    5b:ff:46:e3:62:c0:d2:b0:cf:0a:17:be:ab:f9:a9:
                    0e:bb:f6:68:cd:61:40:cd:07:61:bd:ed:45:f4:fa:
                    7a:a1:51:2b:2c:6c:de:33:d9:6a:b0:11:c7:1d:e6:
                    74:c9:a5:3c:69:af:ed:57:ab:0c:df:a7:50:6d:70:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:91:62:B3:5E:DE:2F:42:41:FA:DA:AD:8C:66:F1:3A:F8:34:C2:61
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36312e302f32342d3234203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:61:64:5b:33:34:fe:0f:6a:70:43:7a:84:4d:fb:98:d0:15:
         c6:64:7c:7c:96:7e:99:56:35:04:62:d6:f4:b8:95:b4:c5:9b:
         b1:50:75:9e:99:1b:d9:61:00:1d:bf:db:0c:ff:4b:af:c3:53:
         0d:3c:f9:ee:82:5f:6b:d0:96:44:51:7d:ee:bc:d8:00:08:d1:
         f1:98:1f:a7:be:c9:a0:b7:92:8e:18:97:26:26:89:05:14:53:
         39:2e:40:0e:d6:de:05:11:8b:c6:01:43:b3:21:09:77:64:61:
         2c:87:a4:9c:13:1a:a1:44:b7:74:c1:e7:06:86:b3:35:f9:02:
         7a:41:e2:65:0b:72:3e:d3:0d:21:64:6d:42:61:1e:59:31:27:
         b1:ac:2b:ac:39:91:4c:3c:de:ba:2a:a4:22:59:f4:ef:b3:dc:
         9c:0d:b5:b0:79:5a:ec:3e:e1:6e:c0:fe:96:af:33:7b:ee:c6:
         a6:3f:ed:3f:d8:f5:93:2a:d7:77:5a:ef:03:66:fc:8b:0b:c6:
         5f:36:68:2a:ac:a5:aa:64:5c:dc:1f:03:af:cb:8d:51:4b:50:
         3a:8b:ba:09:3e:26:9b:62:d6:43:d1:86:39:15:4c:a4:db:1d:
         b8:2e:1d:6f:2e:75:f5:dc:77:62:f4:cc:a5:f1:ad:fa:b7:b3:
         d4:79:b3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:00:30 2026 by rpki-client