This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134342e302f32322d3232203d3e203535393931.roa
File:                     3130332e34342e3134342e302f32322d3232203d3e203535393931.roa (raw, json)
Hash identifier:          9QpEwcLlTSumOVyS9dHL6HMKkLj+qy0YVIHIa2L518I=
Subject key identifier:   89:8A:44:D0:B1:18:10:62:71:0C:B3:5C:5A:D3:68:87:E3:8D:52:54
Certificate issuer:       /CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Certificate serial:       4CAFC332561B77095296A73D7BA7FBAE895404DE
Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134342e302f32322d3232203d3e203535393931.roa
Signing time:             Tue 20 Jan 2026 02:09:30 +0000
ROA not before:           Tue 20 Jan 2026 02:04:30 +0000
ROA not after:            Tue 19 Jan 2027 02:09:30 +0000
asID:                     55991
IP address blocks:        103.44.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:af:c3:32:56:1b:77:09:52:96:a7:3d:7b:a7:fb:ae:89:54:04:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075
        Validity
            Not Before: Jan 20 02:04:30 2026 GMT
            Not After : Jan 19 02:09:30 2027 GMT
        Subject: CN=898A44D0B1181062710CB35C5AD36887E38D5254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:50:7f:fc:db:60:29:06:92:44:71:c9:81:
                    11:24:d9:ab:dc:27:1f:0c:5e:a0:f3:22:1b:df:f4:
                    47:70:88:4d:e0:46:c7:fd:3f:bc:18:30:a7:f3:16:
                    f6:c4:cd:09:2b:83:53:0f:11:9d:d9:62:f1:11:d7:
                    b6:5e:d7:99:c7:32:15:8c:23:32:c2:9f:42:5a:59:
                    21:ad:b2:2d:0c:68:89:23:b4:18:29:e8:46:38:06:
                    05:a3:1f:f5:12:8d:0c:b6:cc:8b:46:40:5b:76:39:
                    49:e6:a4:ef:31:1e:cf:58:66:5e:25:ee:4d:56:62:
                    bf:6a:e8:87:94:f9:2b:f4:17:74:2c:a6:c5:32:2e:
                    d8:e4:6d:90:b7:54:67:e0:a9:a9:c4:6d:b4:01:81:
                    5f:1a:28:d7:4f:1d:15:d0:7c:61:c3:ba:2f:96:fc:
                    14:30:6c:8d:5b:56:f5:86:03:bf:1b:5b:70:7b:74:
                    a0:16:7f:bd:d6:55:88:3f:56:89:b4:16:ea:2e:b3:
                    c2:9a:6b:8e:a0:6a:80:94:ae:88:7e:0b:72:44:ce:
                    ec:66:fe:95:7f:2d:ab:ab:b2:cd:d1:e4:c1:a9:35:
                    37:f3:0f:29:be:b6:2d:d7:9e:8c:90:fd:80:39:3c:
                    28:2a:cd:cd:d7:56:31:2d:6f:3f:f7:27:e8:d0:5c:
                    d4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8A:44:D0:B1:18:10:62:71:0C:B3:5C:5A:D3:68:87:E3:8D:52:54
            X509v3 Authority Key Identifier:
                keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134342e302f32322d3232203d3e203535393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:45:ac:68:a6:24:e6:44:9d:7a:46:2b:3b:cc:74:49:d5:c4:
         5f:70:d6:3c:a3:41:d1:b5:b4:e7:71:1f:dd:81:fc:41:11:e6:
         20:e1:31:b8:19:32:89:b7:ee:8b:2e:77:7a:ef:8d:63:75:43:
         d1:28:01:fa:01:24:ad:9d:b4:b3:55:a8:57:ae:ea:11:46:fc:
         85:2d:43:c0:10:77:e3:7d:d5:b3:d5:36:33:5b:fe:c0:b9:e8:
         ef:17:15:c6:7c:8f:02:65:61:9f:1e:cd:26:37:da:f5:86:61:
         5e:4f:ca:1e:b0:22:2d:df:98:63:7d:f7:4e:61:06:3c:6c:41:
         f8:e0:40:c8:2c:76:64:6d:53:c4:c2:93:83:43:e9:f8:08:87:
         8e:57:b9:f7:43:b4:af:22:64:98:4e:c9:49:f2:2f:38:13:2a:
         3d:b9:9e:fb:a0:d3:d6:4b:7b:7d:23:0a:6e:25:47:aa:46:c3:
         31:45:1b:4c:bb:19:73:ef:81:2a:a1:5c:c7:12:ec:ed:ed:0e:
         bc:e4:86:35:51:20:eb:74:cf:84:24:34:fa:ec:bb:d1:a6:8f:
         52:96:2d:52:59:1c:3b:49:d1:46:03:de:ca:b9:df:88:5f:13:
         36:bb:2f:f5:e1:2d:b4:ad:03:49:22:c8:9a:ee:b2:62:df:04:
         2b:03:25:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:55:16 2026 by rpki-client