This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347257857/0/3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa
File:                     3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa (raw, json)
Hash identifier:          /2j657ZNKnXylTL0BBEZpQWo5lSSz8aNTtJ94OfC7Eg=
Subject key identifier:   2B:2F:84:C4:A9:06:5E:04:C4:82:50:85:E1:D0:E6:5F:46:43:11:98
Certificate issuer:       /CN=335692178DD0300DC3B374F86B473CB008656DCF
Certificate serial:       026DEAC720110CF205AC394AA16583C8C6743269
Authority key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa
Signing time:             Tue 20 Jan 2026 02:07:13 +0000
ROA not before:           Tue 20 Jan 2026 02:02:13 +0000
ROA not after:            Tue 19 Jan 2027 02:07:13 +0000
asID:                     137768
IP address blocks:        103.131.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6d:ea:c7:20:11:0c:f2:05:ac:39:4a:a1:65:83:c8:c6:74:32:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335692178DD0300DC3B374F86B473CB008656DCF
        Validity
            Not Before: Jan 20 02:02:13 2026 GMT
            Not After : Jan 19 02:07:13 2027 GMT
        Subject: CN=2B2F84C4A9065E04C4825085E1D0E65F46431198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e8:d3:cd:a3:89:42:72:cd:a4:b7:56:24:25:
                    d8:1d:fb:43:f9:75:17:6d:13:5b:8b:97:d7:a0:04:
                    09:bb:b5:9a:9a:ef:c2:3b:c8:0a:bf:1f:d7:53:6d:
                    ed:80:d5:86:79:49:ac:34:a5:05:87:df:b5:16:07:
                    8d:27:15:ae:b7:b1:a6:c4:78:2e:14:c2:f3:15:d0:
                    27:13:d1:58:e4:1d:1a:19:33:b5:9c:59:8e:14:8f:
                    07:88:18:17:28:14:74:d0:fe:a6:43:fb:47:e9:38:
                    a4:a1:d7:4f:a7:05:22:23:48:f6:f8:14:24:b2:3f:
                    5a:49:db:12:c4:cc:a1:fc:8a:b3:7f:21:e6:e8:e8:
                    b8:9c:2d:d0:f7:34:10:77:d4:0c:03:e4:f3:58:b9:
                    34:4f:4f:11:2d:a7:ac:ee:14:f2:ed:46:05:b8:ff:
                    55:72:ea:62:64:5b:0a:c2:fb:54:05:70:55:c7:c8:
                    11:84:76:06:fe:d9:4b:b5:91:82:90:f8:f4:12:88:
                    e9:92:03:09:53:9e:a6:1d:81:c8:8f:d7:8b:35:fc:
                    35:c0:37:f0:ca:ca:1f:c5:a5:f8:8e:07:c8:94:e2:
                    f0:d8:7c:c7:9d:85:bd:8c:04:0e:d3:c4:27:93:0e:
                    44:40:d5:80:91:e8:1a:88:48:49:d9:62:d3:e8:76:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2F:84:C4:A9:06:5E:04:C4:82:50:85:E1:D0:E6:5F:46:43:11:98
            X509v3 Authority Key Identifier:
                keyid:33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:27:79:b6:96:1f:8b:e9:c5:4f:9b:c1:f1:b7:43:a5:dd:10:
         3a:9d:2b:a9:dd:f3:0d:2f:b5:e2:0e:26:ef:5d:42:17:22:b4:
         d0:8c:f5:10:cc:c2:cf:19:95:49:e6:88:ae:22:54:98:cb:87:
         5a:e2:27:86:67:c9:4d:e4:43:43:c7:68:7f:cb:2e:3d:4b:8c:
         0b:c8:10:09:59:5c:2e:61:6f:05:05:77:53:56:71:ac:00:92:
         f2:ec:fd:92:95:2f:58:c2:32:c9:65:21:66:b9:2a:02:bc:77:
         44:56:e0:1d:b1:17:30:b4:84:e6:18:2d:d5:7f:e3:5d:9b:92:
         5f:e2:ae:e9:c4:bc:58:9b:0d:4e:af:bf:15:e6:a0:1a:00:de:
         33:bc:23:24:64:89:4d:6c:47:5f:8b:34:b1:9b:36:a8:d2:00:
         e1:67:a9:e5:32:13:a7:29:49:af:25:fd:64:d7:17:14:e0:2e:
         0e:93:89:bb:98:8b:c9:6d:6a:08:b9:a1:4c:36:2b:81:5b:7d:
         b5:21:6e:83:ea:22:a9:19:40:44:28:d1:79:69:a0:a9:a7:9c:
         34:82:6d:31:90:43:3b:bb:58:9f:40:4e:f4:85:a1:2a:7e:30:
         7f:2c:8c:96:c4:bf:de:9d:3b:9c:ad:e0:b0:6e:c4:80:cb:af:
         c0:18:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:22:02 2026 by rpki-client