This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36322e302f32342d3234203d3e20313339313430.roa
File:                     3130332e36312e36322e302f32342d3234203d3e20313339313430.roa (raw, json)
Hash identifier:          /Y+FlgFyvGdJvktyOiJgLvIWAd3ssdGLNZXpBWqy9Ow=
Subject key identifier:   5B:91:CB:F1:46:2E:65:A2:9B:7E:EA:D5:9D:E9:F4:50:88:4E:5C:E7
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       0C9752381C5EC42C854FE0EEE46CB232853C9EA4
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36322e302f32342d3234203d3e20313339313430.roa
Signing time:             Tue 20 Jan 2026 02:15:37 +0000
ROA not before:           Tue 20 Jan 2026 02:10:37 +0000
ROA not after:            Tue 19 Jan 2027 02:15:37 +0000
asID:                     139140
IP address blocks:        103.61.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:97:52:38:1c:5e:c4:2c:85:4f:e0:ee:e4:6c:b2:32:85:3c:9e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:37 2026 GMT
            Not After : Jan 19 02:15:37 2027 GMT
        Subject: CN=5B91CBF1462E65A29B7EEAD59DE9F450884E5CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:63:e2:7a:35:9a:18:79:3e:2b:50:c4:4f:
                    8c:33:43:67:20:c9:24:7e:85:59:97:a6:c2:1b:d6:
                    5c:44:61:22:09:50:72:f6:8a:4e:5c:9a:3e:4d:e2:
                    81:b2:73:cc:d8:ed:85:a0:4c:52:db:16:83:8c:e4:
                    08:97:65:e2:69:12:22:25:19:d9:e2:fd:08:97:1f:
                    36:b8:14:db:7a:d5:2f:eb:cc:e1:e2:bb:4b:eb:ef:
                    98:8a:ae:7a:01:a7:4d:ba:8f:07:8e:50:03:f3:cd:
                    bc:cc:fb:d5:b0:b6:6a:c9:a3:93:b3:e5:40:e6:10:
                    23:79:51:3a:57:86:b9:b2:60:ea:8e:6c:64:63:94:
                    dc:ca:1c:e6:e6:11:c0:f1:d4:66:19:87:f4:90:fe:
                    1b:9b:f1:13:92:4d:5c:84:dc:d8:c4:75:e2:aa:f0:
                    1d:9b:7e:1f:af:f2:5d:35:27:84:88:64:37:78:46:
                    3d:09:2e:71:e1:a4:75:25:17:3c:2a:7c:78:5a:85:
                    16:dd:9f:eb:0f:01:aa:df:fc:97:0b:16:31:ba:0e:
                    ee:f3:08:ad:1d:92:ce:14:5f:38:ba:5b:2a:f6:79:
                    5f:be:46:2a:37:9e:47:a7:28:d5:08:e2:4e:0a:c4:
                    8d:4c:91:7d:6c:b8:0e:64:7c:77:d3:70:87:3e:82:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:91:CB:F1:46:2E:65:A2:9B:7E:EA:D5:9D:E9:F4:50:88:4E:5C:E7
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36322e302f32342d3234203d3e20313339313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:03:87:af:92:95:f7:e8:57:1c:19:51:67:50:5b:8e:e8:ec:
         f4:1f:50:53:e7:38:50:70:a0:29:9e:8f:36:1f:96:87:29:51:
         23:39:ef:cf:70:12:9e:4b:ca:00:ca:3e:e5:80:c8:fd:a4:a7:
         05:dc:fb:1a:67:78:3d:20:a2:9d:81:ac:39:a9:bf:41:67:fa:
         a5:b3:c3:78:de:01:08:1e:5e:4a:62:fd:1b:a3:b5:d1:48:8d:
         ce:cd:85:49:f0:ea:3c:08:9c:c4:7c:08:ca:fd:20:65:d8:70:
         b0:bc:b1:a4:57:54:19:fc:94:12:e7:b6:b2:30:aa:ca:7d:b4:
         7b:39:ff:00:62:76:e6:39:33:67:69:25:6f:6d:46:70:55:82:
         fd:ab:0b:19:9d:96:87:8e:32:07:a3:01:31:2c:b3:63:64:de:
         1a:e1:6e:ef:60:69:e9:93:f3:f9:82:da:51:8a:5b:34:89:46:
         5c:70:0f:e8:a7:9c:1c:51:84:ce:31:db:27:df:24:0e:2c:f4:
         bb:32:8c:13:46:4e:4c:27:7d:50:a6:8e:53:98:2e:b4:e9:dc:
         44:45:09:97:f6:f8:f0:07:b7:bd:d6:85:e2:ae:d3:de:6d:41:
         2c:bf:65:73:7e:ce:07:a6:87:28:65:5b:8f:a4:3a:67:f1:32:
         fc:7d:dc:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:39:19 2026 by rpki-client