This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36322e302f32342d3234203d3e20313339313337.roa
File:                     3130332e36312e36322e302f32342d3234203d3e20313339313337.roa (raw, json)
Hash identifier:          8/H2mjlvEyIhGA7xFxMrTfzcXPiuL1R+bNWma92sa94=
Subject key identifier:   32:82:D7:2A:1E:4D:D0:3B:6C:EB:6E:0B:CF:2A:5C:BA:B1:36:5A:04
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       2BC15369904642B20E0AD3C3DB329DF975E86452
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36322e302f32342d3234203d3e20313339313337.roa
Signing time:             Tue 20 Jan 2026 02:15:40 +0000
ROA not before:           Tue 20 Jan 2026 02:10:40 +0000
ROA not after:            Tue 19 Jan 2027 02:15:40 +0000
asID:                     139137
IP address blocks:        103.61.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c1:53:69:90:46:42:b2:0e:0a:d3:c3:db:32:9d:f9:75:e8:64:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:40 2026 GMT
            Not After : Jan 19 02:15:40 2027 GMT
        Subject: CN=3282D72A1E4DD03B6CEB6E0BCF2A5CBAB1365A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:db:fd:90:5f:67:f3:f7:e0:22:5a:84:ac:ea:
                    aa:36:0f:6c:5d:b1:f6:94:5c:2a:25:5a:9c:22:0f:
                    c9:ed:5f:14:8a:74:b8:7f:66:c2:41:da:aa:30:6e:
                    b8:be:11:e2:20:f2:b5:2f:e8:e7:7d:de:e9:c4:9f:
                    09:4b:d0:38:b4:3b:89:81:84:d6:f9:23:ad:69:6a:
                    34:50:30:1b:5e:f8:8f:cb:b4:69:b8:93:d1:01:42:
                    b0:c1:62:e4:f5:9d:84:07:84:ef:fb:17:38:b8:5b:
                    67:e8:3e:29:c2:db:cf:f9:7e:a1:90:dd:d1:4d:1f:
                    59:54:cc:8a:b8:e1:83:74:f2:d5:7a:2b:7e:4d:d6:
                    25:18:55:b8:b7:8f:1c:0a:1f:59:cb:c7:1c:c7:6f:
                    0f:da:d7:c7:1f:e5:65:05:4a:b8:38:b9:a1:b0:0c:
                    07:e1:bb:c6:06:29:dd:9e:c6:ef:1c:bd:f5:3d:ab:
                    a1:d0:da:ad:85:1e:b5:e7:a7:db:9a:aa:e3:3b:b4:
                    75:5b:e3:b7:b3:38:c4:79:c2:f1:2d:0f:19:a5:06:
                    70:52:12:ef:a4:c9:40:47:9d:ce:c3:d2:a1:85:c4:
                    9d:9a:fb:70:bc:c6:66:23:bb:76:7f:48:68:78:26:
                    a6:9a:b0:35:92:e7:a4:52:50:d2:db:7d:b8:f3:f6:
                    4f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:82:D7:2A:1E:4D:D0:3B:6C:EB:6E:0B:CF:2A:5C:BA:B1:36:5A:04
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36322e302f32342d3234203d3e20313339313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:7e:f9:d2:07:47:2f:fd:ff:c1:75:8f:f0:b6:e1:56:ed:24:
         0a:33:a2:3b:9b:20:c6:bf:7b:50:d1:21:e0:3b:0a:4f:5c:c3:
         fa:c9:ff:d8:0a:7c:de:b3:bc:60:a3:97:0e:95:ae:da:ce:34:
         87:46:6d:16:c2:d3:1d:81:ac:8c:9c:2c:75:13:02:a2:c1:8f:
         48:05:30:e5:c8:16:2a:96:a2:d9:a1:96:f0:c2:53:4c:c3:ae:
         df:73:40:75:6b:3b:0f:cc:c2:0f:94:f8:7f:6f:05:57:f9:08:
         47:31:f4:eb:bc:d5:4f:6d:2c:6c:c3:c2:95:3d:e1:fe:5a:ae:
         97:7e:56:f4:db:71:2b:1a:bc:ee:73:7b:81:7a:c6:aa:f9:01:
         89:c1:bf:a5:64:90:de:33:ca:3d:15:84:97:79:c3:31:4a:16:
         c0:69:96:f1:f4:be:68:9f:a6:89:e5:64:99:62:a7:3b:ed:1a:
         02:ce:2c:33:86:69:d6:44:52:ba:6a:ac:a6:97:4f:6d:12:e6:
         9f:c5:e5:41:cc:51:07:0e:e6:78:36:e2:ce:88:a6:0d:fb:c5:
         3e:78:66:be:fd:f8:4a:66:b4:f8:78:cd:e1:83:09:3c:2f:03:
         c5:4c:4c:f1:a2:4e:07:19:79:5e:af:d9:bd:78:3c:d9:f6:1c:
         76:e4:eb:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:55 2026 by rpki-client