This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36332e302f32342d3234203d3e203633353833.roa
File:                     3130332e36312e36332e302f32342d3234203d3e203633353833.roa (raw, json)
Hash identifier:          hEemPWsCltx6SRIuTQopZXfRUo/5YTVlUzggrs/sQqI=
Subject key identifier:   38:22:AC:8F:08:1E:F4:03:2C:16:A9:23:1C:2E:5B:0B:28:81:06:D6
Certificate issuer:       /CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
Certificate serial:       282EE9D07B3BFADCAFFCB24CA5FF6B075DF4ABCF
Authority key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36332e302f32342d3234203d3e203633353833.roa
Signing time:             Tue 20 Jan 2026 02:15:38 +0000
ROA not before:           Tue 20 Jan 2026 02:10:38 +0000
ROA not after:            Tue 19 Jan 2027 02:15:38 +0000
asID:                     63583
IP address blocks:        103.61.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2e:e9:d0:7b:3b:fa:dc:af:fc:b2:4c:a5:ff:6b:07:5d:f4:ab:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136
        Validity
            Not Before: Jan 20 02:10:38 2026 GMT
            Not After : Jan 19 02:15:38 2027 GMT
        Subject: CN=3822AC8F081EF4032C16A9231C2E5B0B288106D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:a4:22:11:62:eb:ad:bf:21:d6:2b:00:d9:
                    99:06:0e:1d:d8:ff:c5:df:c7:77:cb:22:47:e0:0e:
                    8b:0c:f9:67:50:17:3a:13:01:89:af:4a:c8:a7:6c:
                    db:72:fd:b4:b9:13:08:6c:41:b2:a9:5d:8c:7e:1f:
                    55:eb:c1:f1:e2:22:c0:cd:db:2c:77:40:85:d7:ef:
                    0f:bd:3c:37:7e:13:2a:4c:71:dd:a2:41:6e:ce:71:
                    67:52:59:c1:ea:dc:6a:20:0b:b9:84:d7:85:e0:2b:
                    33:8d:79:9b:d9:fa:51:8e:b5:56:8b:ee:27:54:7f:
                    cf:9e:55:7e:08:a8:84:b1:7d:40:25:e0:ad:7c:62:
                    c7:f2:c7:cb:a5:81:1c:4f:9a:b6:40:f7:2f:a5:2f:
                    bc:b3:ef:1e:d2:78:0f:44:fc:40:8b:bf:7f:8c:30:
                    0f:26:0e:79:a3:4f:0a:09:4d:00:c1:0d:d0:2f:a1:
                    59:d0:8b:79:78:b4:fb:57:37:22:77:b8:53:7b:71:
                    04:9c:6f:fb:95:8c:e7:e8:50:f8:54:21:8a:58:77:
                    55:3d:32:b4:07:b3:a9:01:ed:de:bf:f8:cd:15:22:
                    1a:eb:10:47:75:72:be:97:41:9e:af:67:52:f8:6b:
                    bf:e2:ce:9e:33:74:55:67:52:31:6a:4f:ca:41:68:
                    59:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:22:AC:8F:08:1E:F4:03:2C:16:A9:23:1C:2E:5B:0B:28:81:06:D6
            X509v3 Authority Key Identifier:
                keyid:5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/3130332e36312e36332e302f32342d3234203d3e203633353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:a0:7a:19:37:4f:2c:ab:9a:f4:58:0b:34:16:a1:ba:7f:bc:
         22:6a:0b:1e:77:93:d3:2d:c8:38:b2:01:b6:4f:bd:cb:cf:54:
         f7:7f:6f:cc:c7:31:0a:1b:e0:55:cb:18:86:9b:e9:d2:d4:c7:
         ee:ed:fd:c9:d3:7f:90:a6:47:0a:2b:46:61:fa:17:38:e0:f3:
         31:b7:3a:2a:15:ac:ec:bc:c4:63:f6:e6:25:9d:85:2a:35:d8:
         e1:f3:fd:7c:2c:7e:ec:58:97:8e:16:ea:c8:4a:5d:de:10:34:
         d5:e4:f1:70:c6:89:69:5d:66:63:2e:df:0c:42:6b:7b:e7:73:
         af:87:52:6b:87:e6:3a:e9:86:48:19:ce:48:c2:61:36:90:c6:
         1b:99:2f:76:8c:6e:9a:a0:a2:97:12:c6:62:1d:8b:32:4e:41:
         14:a2:f8:30:ff:86:44:1e:f9:c2:2f:96:71:54:4e:7a:bc:62:
         8e:29:a1:fb:95:a6:23:6f:db:fd:d8:fc:8e:6b:7c:5b:fe:fa:
         58:92:d0:10:1a:83:6d:ed:74:b0:bf:86:9c:9f:69:1b:4d:29:
         ae:d1:46:98:4c:dc:ec:e0:31:2f:53:8a:a4:fe:35:f7:6e:f3:
         6c:35:ba:e1:26:07:9d:d9:62:70:cb:3d:b6:c3:ff:fb:72:6a:
         11:58:0a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:06:46 2026 by rpki-client