This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3130332e3230322e3131362e302f32342d3234203d3e203233373234.roa
File:                     3130332e3230322e3131362e302f32342d3234203d3e203233373234.roa (raw, json)
Hash identifier:          kTJjPihi+5ShHwcjCG95Ksd/IeqfaBWsCJz1Z+qGwi8=
Subject key identifier:   17:8F:7E:A9:19:7D:04:E1:0A:23:87:A5:BC:5A:4B:94:53:6A:68:07
Certificate issuer:       /CN=4B9663C98FB267EE767D89354546CFB5F1950080
Certificate serial:       0888BB0D302071A0AF189E4A2A21EA1D0B74DBC4
Authority key identifier: 4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3130332e3230322e3131362e302f32342d3234203d3e203233373234.roa
Signing time:             Tue 20 Jan 2026 02:15:32 +0000
ROA not before:           Tue 20 Jan 2026 02:10:32 +0000
ROA not after:            Tue 19 Jan 2027 02:15:32 +0000
asID:                     23724
IP address blocks:        103.202.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:88:bb:0d:30:20:71:a0:af:18:9e:4a:2a:21:ea:1d:0b:74:db:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9663C98FB267EE767D89354546CFB5F1950080
        Validity
            Not Before: Jan 20 02:10:32 2026 GMT
            Not After : Jan 19 02:15:32 2027 GMT
        Subject: CN=178F7EA9197D04E10A2387A5BC5A4B94536A6807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:19:eb:d4:2a:ec:c5:5b:18:71:6f:e2:a8:3b:
                    14:4c:59:0c:61:6f:b9:a7:e2:cf:ec:be:55:23:12:
                    90:82:20:80:29:27:42:8c:a3:bb:d9:2a:1b:49:98:
                    49:bf:19:9a:37:bf:fc:4c:86:cb:b3:99:1f:3f:b4:
                    ad:29:c6:99:20:93:46:ae:56:84:80:d8:4c:81:d4:
                    ff:b4:9a:46:78:45:79:fa:c0:19:59:e7:20:35:0a:
                    37:c9:cd:af:ec:ac:4e:a8:18:bd:8d:fd:4b:45:cb:
                    07:e4:fe:85:13:49:d9:d0:ed:97:54:51:10:06:30:
                    19:f9:dc:a2:be:04:a0:c1:81:28:2b:0c:1a:93:17:
                    0a:5e:09:e7:ef:76:1d:3b:d2:be:15:bb:50:dc:4d:
                    52:a9:1f:a5:a5:7b:9e:38:02:f6:27:31:16:7e:4b:
                    f8:66:c9:93:43:37:c2:70:e4:e2:45:fc:cb:18:d7:
                    66:34:aa:d3:1e:7b:e5:99:87:1d:9d:32:1e:2b:d3:
                    cc:52:4f:b4:ad:98:cc:68:10:d6:b1:52:b5:7d:c0:
                    de:c0:1f:2c:83:b3:47:f1:91:6e:34:e7:5b:42:b3:
                    16:16:43:d1:cc:8d:ac:ec:a8:a6:9a:8a:20:15:fd:
                    11:3f:d0:75:3c:7a:6f:c3:c9:c5:f4:87:a9:69:92:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8F:7E:A9:19:7D:04:E1:0A:23:87:A5:BC:5A:4B:94:53:6A:68:07
            X509v3 Authority Key Identifier:
                keyid:4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3130332e3230322e3131362e302f32342d3234203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:5b:f2:b6:09:b5:4f:23:44:2a:d3:a9:6b:f4:94:a7:fa:33:
         2a:69:b1:ef:3a:d0:ea:eb:bd:5e:3c:25:5c:84:21:5c:0d:12:
         44:ae:70:d6:ea:d8:de:84:8d:2e:7b:76:e2:56:8c:c9:05:10:
         14:d6:a4:1c:31:25:94:0e:7b:a8:0e:8a:37:d3:a3:ef:b5:39:
         d7:2a:c7:71:b3:50:29:cf:e6:60:69:5d:89:ac:36:ea:e7:01:
         7d:4d:9b:38:b4:73:04:05:0d:8e:ef:bb:f4:dd:1e:45:1d:58:
         60:9a:c5:83:af:de:44:db:81:c2:e1:a5:0e:cc:48:4f:bc:8c:
         44:1e:51:56:46:3f:58:c9:66:3f:68:5f:34:31:94:5c:c0:50:
         3c:4a:8a:f5:14:cc:d6:d6:00:ea:44:b9:a3:f3:d7:e3:71:a9:
         eb:b3:ab:89:74:5e:2b:62:4c:67:5c:e8:e5:12:70:9b:45:65:
         5e:f9:03:d2:a0:4d:07:52:03:cd:26:aa:aa:dc:12:09:30:6c:
         ae:ea:f3:1b:7e:6e:4d:7f:41:ee:9a:4b:50:9b:59:db:97:49:
         c3:cd:b0:dc:e5:49:a3:fe:b4:e1:be:04:74:40:62:3f:33:7b:
         6f:85:a5:a8:d1:65:d7:1b:51:d1:8e:c3:0c:16:3d:d5:bc:06:
         58:39:71:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:01:54 2026 by rpki-client