This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36322e302f32342d3234203d3e2038303735.roa
File:                     3130332e36312e36322e302f32342d3234203d3e2038303735.roa (raw, json)
Hash identifier:          M4CSNoymzoM+ImrOoSdV+Fkg4UeA2kEhTVYDGoC+C8g=
Subject key identifier:   FC:93:68:54:BD:89:0E:3F:C3:9E:28:49:AC:B2:D4:B6:5B:9C:73:BE
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       44A7848953EF975A6AA7BA150DF926B11D3C02DE
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36322e302f32342d3234203d3e2038303735.roa
Signing time:             Tue 20 Jan 2026 02:15:37 +0000
ROA not before:           Tue 20 Jan 2026 02:10:37 +0000
ROA not after:            Tue 19 Jan 2027 02:15:37 +0000
asID:                     8075
IP address blocks:        103.61.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 14:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a7:84:89:53:ef:97:5a:6a:a7:ba:15:0d:f9:26:b1:1d:3c:02:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:37 2026 GMT
            Not After : Jan 19 02:15:37 2027 GMT
        Subject: CN=FC936854BD890E3FC39E2849ACB2D4B65B9C73BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:70:36:79:7a:58:71:8b:e2:ce:96:c2:7b:
                    62:c3:7d:36:f3:a4:18:63:1a:c6:7d:94:e3:20:c0:
                    12:22:0e:a3:94:6e:68:e6:bd:c7:d2:2c:e3:93:60:
                    a4:8d:6b:b5:60:12:8c:a9:db:36:e5:d4:96:7a:6e:
                    fa:d1:92:db:e5:69:3f:64:e2:bd:54:11:8c:e3:f7:
                    a8:09:26:60:d6:ad:b5:95:fa:26:5d:72:4e:d6:f6:
                    1c:76:22:99:3a:43:3e:c9:fa:0e:9e:c8:a6:df:5d:
                    97:ef:21:e9:c7:d9:64:64:48:17:66:3e:24:33:9c:
                    0a:6d:a6:bc:ab:7c:45:33:d1:8c:bc:0a:93:bb:2f:
                    72:b7:30:cb:f6:35:c2:c4:53:c2:84:41:5b:67:57:
                    25:aa:08:0e:45:f6:00:48:76:e6:d5:5d:2a:b1:b0:
                    83:bb:de:8c:89:4c:61:be:8a:a7:7d:b3:be:9c:23:
                    24:3d:89:89:1b:69:0c:9f:1a:be:b6:62:12:bd:f8:
                    3d:36:2f:34:80:82:fa:33:35:4f:e1:51:1c:11:b9:
                    1f:81:d3:cf:f1:2f:31:ae:10:29:f2:0f:64:b1:bb:
                    60:61:ef:5c:d6:9a:f4:ab:7b:d5:a7:dc:34:5c:d9:
                    58:82:ed:ed:66:39:cd:1e:6f:89:0f:d8:c3:be:c8:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:93:68:54:BD:89:0E:3F:C3:9E:28:49:AC:B2:D4:B6:5B:9C:73:BE
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36322e302f32342d3234203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:5b:96:3f:79:c0:ff:99:c2:51:9f:42:a3:20:ca:75:d5:df:
         a6:7c:6e:b8:7e:a1:bb:de:72:d2:37:f9:c4:dd:64:75:7b:49:
         6b:22:d4:c8:c8:bf:b6:62:dc:7d:0d:2f:b3:b1:bf:79:d9:9b:
         3a:1c:14:15:47:56:86:5d:e1:72:55:c2:01:b5:23:88:37:97:
         87:06:2a:68:ac:31:cf:31:7d:b2:8c:15:ec:6f:39:82:8f:82:
         e4:f9:be:15:4e:e0:22:83:3a:8d:af:62:1f:8c:ba:3d:cb:20:
         9c:cf:d7:de:be:38:90:00:be:b0:2c:76:62:67:66:b1:32:48:
         b6:ea:d7:13:c6:ae:a9:85:46:0b:14:78:d7:5a:09:07:f2:49:
         c5:58:ae:1d:23:4e:e1:0b:f1:d5:9d:af:13:62:b5:07:be:43:
         1a:21:f5:18:bc:0a:ab:90:9f:35:5f:60:d7:23:94:b7:e7:88:
         71:7c:27:92:87:e8:b0:0a:57:a6:75:66:29:91:05:49:a4:c1:
         31:21:0c:c1:86:f1:6e:28:f5:78:64:fd:0c:99:bd:72:7e:81:
         a8:ae:8e:b6:f1:18:60:e2:c4:4b:8c:95:34:c4:c4:d3:4a:dc:
         30:48:90:6d:2e:f7:ce:41:f0:ea:4b:45:9d:a6:50:17:f8:d9:
         89:5d:c0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:00:29 2026 by rpki-client