This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3130332e3230322e3131362e302f32342d3234203d3e203539303637.roa
File:                     3130332e3230322e3131362e302f32342d3234203d3e203539303637.roa (raw, json)
Hash identifier:          VImbyzhe3gUUh86v0HsN0hITp9TmfCxhigtsSIgpKVQ=
Subject key identifier:   11:F2:96:18:FF:CE:AC:ED:6A:28:54:D3:60:2F:88:87:01:D5:19:1E
Certificate issuer:       /CN=4B9663C98FB267EE767D89354546CFB5F1950080
Certificate serial:       5B4F191861D72B54255DFB0CE805312746E7216A
Authority key identifier: 4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3130332e3230322e3131362e302f32342d3234203d3e203539303637.roa
Signing time:             Tue 20 Jan 2026 02:15:31 +0000
ROA not before:           Tue 20 Jan 2026 02:10:31 +0000
ROA not after:            Tue 19 Jan 2027 02:15:31 +0000
asID:                     59067
IP address blocks:        103.202.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4f:19:18:61:d7:2b:54:25:5d:fb:0c:e8:05:31:27:46:e7:21:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9663C98FB267EE767D89354546CFB5F1950080
        Validity
            Not Before: Jan 20 02:10:31 2026 GMT
            Not After : Jan 19 02:15:31 2027 GMT
        Subject: CN=11F29618FFCEACED6A2854D3602F888701D5191E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:53:a9:bb:4c:c6:6a:0b:ed:3d:61:9a:21:
                    ab:20:33:18:a2:1f:3e:b9:d3:65:68:1a:0c:dc:1c:
                    a9:73:6b:66:04:1a:a0:12:60:80:01:7e:db:38:4a:
                    2f:ac:24:d0:c4:83:96:89:cc:e9:f5:8c:d8:36:87:
                    08:9a:c7:38:19:55:e9:c3:9c:1a:70:48:57:44:ab:
                    9a:2f:db:dc:bd:1b:9f:df:03:87:7e:f2:01:74:33:
                    bf:d5:76:04:be:32:6e:ad:39:a6:ce:ae:ab:93:d0:
                    88:4c:db:5d:82:c4:93:c3:f6:3e:9f:7e:cd:50:3b:
                    ae:69:60:e5:b2:b8:b9:ba:e2:a6:b9:82:f2:78:54:
                    08:19:a3:52:74:bc:69:73:4c:ac:fc:b7:fd:4a:d5:
                    49:7f:c1:68:5a:95:66:45:75:78:bd:90:80:65:49:
                    b9:70:c1:44:04:8e:60:13:23:58:95:ab:2b:64:62:
                    3f:a0:bf:6e:35:24:b5:8d:e1:eb:b7:a3:ac:c4:e4:
                    f6:5f:a3:ba:b4:a6:b7:a3:47:3b:5c:81:5e:ad:8c:
                    d4:fe:2a:43:8a:5e:fd:37:3f:74:2d:6a:e0:24:9d:
                    82:53:41:00:80:25:35:25:6e:5d:e1:69:39:18:dc:
                    b0:95:e1:8e:ba:08:db:92:ed:b1:76:ff:ce:cc:c4:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F2:96:18:FF:CE:AC:ED:6A:28:54:D3:60:2F:88:87:01:D5:19:1E
            X509v3 Authority Key Identifier:
                keyid:4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/3130332e3230322e3131362e302f32342d3234203d3e203539303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:3a:b0:c5:34:a7:19:9e:bb:71:1e:64:17:58:42:61:9a:2e:
         9c:f0:7d:ac:c1:f4:3c:2d:28:65:ea:99:d0:4f:5f:54:37:b0:
         fe:7d:6e:9a:1f:4f:05:aa:c3:6c:74:d9:d5:3b:b9:cc:66:a9:
         0a:4f:a9:87:8a:5f:86:43:81:db:58:1c:9f:71:12:7f:7c:e4:
         46:b4:a2:22:18:67:fb:22:98:78:f6:32:a6:0d:3d:79:d8:dc:
         eb:d3:48:21:80:73:c4:ff:72:5e:c0:32:07:15:a0:3a:ce:49:
         c4:23:0d:c7:80:50:91:18:e3:d4:2a:1b:12:af:83:0b:f5:83:
         0f:38:21:2f:81:40:68:65:93:35:58:43:8c:a7:f8:cf:7d:81:
         82:f6:40:b6:fe:e1:9d:e4:c6:cb:8b:a8:15:7c:a5:94:be:b7:
         5d:78:fe:05:4c:5e:b2:0a:b1:64:40:1c:aa:c7:58:3a:83:f7:
         b9:66:ea:36:7f:43:51:5e:36:7b:af:87:82:72:e3:d5:9b:5f:
         59:33:45:7e:8a:57:c5:d2:f2:7b:8f:a9:6b:8d:4d:6d:df:f8:
         6b:54:bc:f0:db:f1:31:bd:3d:88:f1:ef:c0:b5:87:0c:3c:b9:
         84:b7:b9:76:ef:02:3c:bd:a0:dd:47:f7:ee:26:bb:87:ef:f2:
         52:00:30:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:16:48 2026 by rpki-client