This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577465858/0/3130332e39362e382e302f32342d3234203d3e20313331353637.roa
File:                     3130332e39362e382e302f32342d3234203d3e20313331353637.roa (raw, json)
Hash identifier:          b+gYOwGiVr48N6B4aubz7OTISZ1HUMqOe7UJxxSY10A=
Subject key identifier:   89:4F:04:EE:8D:AA:7B:39:15:9A:2B:07:26:F0:F5:27:11:BB:0B:D7
Certificate issuer:       /CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B
Certificate serial:       4B26AD3EA9721B49AF6A8DF7CAEDB071DFEF7833
Authority key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/3130332e39362e382e302f32342d3234203d3e20313331353637.roa
Signing time:             Tue 20 Jan 2026 02:27:19 +0000
ROA not before:           Tue 20 Jan 2026 02:22:19 +0000
ROA not after:            Tue 19 Jan 2027 02:27:19 +0000
asID:                     131567
IP address blocks:        103.96.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 01:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:26:ad:3e:a9:72:1b:49:af:6a:8d:f7:ca:ed:b0:71:df:ef:78:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B
        Validity
            Not Before: Jan 20 02:22:19 2026 GMT
            Not After : Jan 19 02:27:19 2027 GMT
        Subject: CN=894F04EE8DAA7B39159A2B0726F0F52711BB0BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:19:ca:62:24:2e:c7:fc:14:00:3f:ec:1e:
                    09:b4:ea:3b:36:76:58:07:52:15:9a:80:a5:3a:cd:
                    5f:43:9c:d1:be:14:f1:dd:25:89:3c:15:62:bb:fc:
                    c8:b0:ec:52:db:37:34:cc:f8:80:9e:59:e0:3d:5f:
                    00:75:c0:9f:f6:d1:db:21:56:1b:42:cc:5c:a7:1c:
                    19:c1:cc:8e:7f:46:32:91:8c:25:2c:45:9e:f9:ef:
                    d8:06:4a:1e:6e:f7:78:44:e6:8b:af:ec:cc:a6:de:
                    57:3e:67:77:e9:6e:72:29:6b:89:85:e6:a1:4f:57:
                    3c:27:31:a2:78:7f:15:49:d8:5a:79:c7:30:b3:18:
                    49:1b:4e:c7:d4:9c:4e:ec:53:f8:2b:19:25:a1:4e:
                    ad:43:c3:31:ef:fc:da:be:2e:46:9f:6c:8a:7a:64:
                    dd:21:13:63:70:24:01:61:e6:8c:fb:54:9b:ae:3d:
                    13:f4:c0:fb:a5:96:56:e2:e1:ad:65:a0:3b:c2:ec:
                    2c:82:55:84:4d:62:b8:04:bf:26:c4:f8:fc:a8:7a:
                    95:cb:9a:43:8d:be:02:04:0f:d7:bb:4f:60:6a:cd:
                    49:4b:0f:06:5b:06:a5:74:92:d3:7c:a5:8c:67:25:
                    e9:de:a3:97:12:53:3a:f4:d7:78:62:a0:86:f2:aa:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4F:04:EE:8D:AA:7B:39:15:9A:2B:07:26:F0:F5:27:11:BB:0B:D7
            X509v3 Authority Key Identifier:
                keyid:A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/3130332e39362e382e302f32342d3234203d3e20313331353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:fc:97:f3:c7:46:46:96:98:1f:02:c4:b4:22:fb:40:09:0b:
         c6:80:ee:93:76:6f:8f:4d:f4:ee:9c:bf:f4:52:0c:99:3f:0e:
         79:da:e1:66:fa:04:ac:41:9d:80:e6:e2:07:77:2f:9e:1b:a7:
         d2:5d:63:b3:4d:16:e7:b0:74:b4:ff:e4:39:28:08:cd:05:0f:
         7f:0a:7a:19:c9:c6:61:ec:ae:f3:a3:d9:8f:30:dc:a0:4b:1f:
         0e:af:7c:eb:bc:ba:ac:d6:3a:11:00:00:61:07:aa:5d:51:7d:
         f7:8f:3b:20:33:a5:22:23:a2:2b:5b:ff:be:dd:ef:5c:2f:65:
         68:94:be:51:59:41:66:62:5d:88:c3:8a:11:a2:54:08:47:fd:
         7a:1a:42:a1:59:69:1e:b0:13:0a:8e:c8:9d:07:93:99:45:65:
         10:4c:49:55:37:eb:45:f5:d2:7c:dd:96:0d:39:1d:d4:f4:36:
         77:60:ff:26:5b:07:50:bb:0f:ae:3e:c6:d8:e3:56:85:f4:a6:
         6e:60:5d:78:9e:d3:3b:a3:3e:72:fc:cf:5e:73:7a:61:33:84:
         f3:b3:0e:17:24:ee:f6:09:d9:b9:e5:40:a8:49:6b:51:ee:df:
         49:34:0e:12:fb:83:1f:37:11:67:c9:ab:60:df:bb:1b:dc:cc:
         27:9c:c1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:45 2026 by rpki-client