This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa
File:                     3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (raw, json)
Hash identifier:          LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=
Subject key identifier:   44:32:FF:16:14:23:AF:86:64:20:96:2E:B4:5D:AA:95:5E:DE:F8:06
Certificate issuer:       /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140
Certificate serial:       5DD9A82CFD6F7E133AA3BC4E23D70C1622E25351
Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa
Signing time:             Tue 20 Jan 2026 02:21:38 +0000
ROA not before:           Tue 20 Jan 2026 02:16:38 +0000
ROA not after:            Tue 19 Jan 2027 02:21:38 +0000
asID:                     131482
IP address blocks:        103.98.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 14:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d9:a8:2c:fd:6f:7e:13:3a:a3:bc:4e:23:d7:0c:16:22:e2:53:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140
        Validity
            Not Before: Jan 20 02:16:38 2026 GMT
            Not After : Jan 19 02:21:38 2027 GMT
        Subject: CN=4432FF161423AF866420962EB45DAA955EDEF806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:84:fc:9c:72:4c:9c:ed:66:60:65:55:80:
                    ae:7b:8d:79:7f:4b:a9:06:05:27:38:f9:7a:19:fe:
                    ce:cb:4e:cb:bb:6f:36:96:dd:95:2a:0e:ec:8b:da:
                    91:e7:ae:98:c9:e2:8c:b6:cb:f5:b7:26:ba:3d:ed:
                    9d:d1:4a:b0:eb:76:a6:2f:d5:4f:f2:24:31:57:3b:
                    78:29:d9:59:ce:77:fb:b7:90:d3:38:99:b2:64:47:
                    32:85:7a:2f:e5:76:c8:23:55:16:eb:38:38:df:b4:
                    94:8d:d7:a3:5c:19:77:3f:73:ad:96:57:ee:67:fb:
                    54:20:be:6c:f1:6b:0f:45:59:cb:e2:b9:51:7d:51:
                    b9:77:8d:2b:19:fd:dc:1c:18:4b:20:e4:aa:22:8f:
                    c6:fc:aa:94:38:86:3b:e4:25:bf:2a:82:d3:a9:1e:
                    67:0c:e3:82:0a:4b:80:40:14:cc:b1:77:a4:69:b0:
                    6a:8f:5e:b7:d1:2b:80:23:c8:0e:36:a7:5b:95:fa:
                    e1:32:5d:e7:47:bf:d3:b1:53:1e:b8:d5:36:44:51:
                    5c:bb:cb:6d:03:e0:98:8f:d7:ff:e8:76:4a:00:47:
                    40:b2:03:8e:0f:e9:85:0f:59:35:6e:c2:98:31:0b:
                    bb:d7:f7:e6:c6:ae:09:fa:dd:14:af:78:8f:84:6d:
                    78:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:32:FF:16:14:23:AF:86:64:20:96:2E:B4:5D:AA:95:5E:DE:F8:06
            X509v3 Authority Key Identifier:
                keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:42:46:e0:18:6f:6b:9e:42:7c:bc:85:91:b5:52:9f:46:27:
         85:69:a3:42:ed:f8:29:fc:a7:fa:ad:d2:62:14:d4:48:5d:8e:
         b4:de:b7:a5:06:a1:ee:80:91:e0:ff:94:78:b4:da:ff:b8:28:
         e4:96:50:4b:93:45:8e:84:25:9f:2c:dd:ce:ef:68:70:ea:7b:
         42:b4:dd:da:40:5a:71:80:88:93:e1:d6:61:27:61:77:13:aa:
         02:d2:1c:40:20:42:48:ac:44:50:e3:75:33:4f:a8:e2:84:f6:
         f9:fa:46:09:df:e7:3b:a5:d8:38:ab:c3:92:d3:ed:5e:15:04:
         57:8c:48:50:cb:c1:42:6c:3c:fb:0a:5e:b7:da:06:f0:5b:3b:
         39:45:11:3e:5f:aa:97:a2:ed:58:e3:dc:dc:26:ca:ee:61:75:
         8a:b1:fc:49:9d:7e:59:c6:ec:b8:8d:37:ed:49:f6:da:94:4c:
         e6:30:80:6a:dc:94:8d:68:07:3e:cf:56:58:bc:56:b1:5f:49:
         48:99:2e:fe:17:c8:6d:91:d2:76:2e:c6:1e:08:1f:7b:c6:4f:
         15:d2:06:66:33:9d:76:9b:34:cb:b4:dd:8c:03:f9:39:9b:3f:
         6f:0c:3d:58:60:0d:21:70:1d:bc:2b:28:74:1f:f3:56:53:25:
         8b:15:ae:2e
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUXdmoLP1vfhM6o7xOI9cMFiLiU1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw
NkNFQzE0MDAeFw0yNjAxMjAwMjE2MzhaFw0yNzAxMTkwMjIxMzhaMDMxMTAvBgNV
BAMTKDQ0MzJGRjE2MTQyM0FGODY2NDIwOTYyRUI0NURBQTk1NUVERUY4MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8noT8nHJMnO1mYGVVgK57jXl/
S6kGBSc4+XoZ/s7LTsu7bzaW3ZUqDuyL2pHnrpjJ4oy2y/W3Jro97Z3RSrDrdqYv
1U/yJDFXO3gp2VnOd/u3kNM4mbJkRzKFei/ldsgjVRbrODjftJSN16NcGXc/c62W
V+5n+1Qgvmzxaw9FWcviuVF9Ubl3jSsZ/dwcGEsg5Koij8b8qpQ4hjvkJb8qgtOp
HmcM44IKS4BAFMyxd6RpsGqPXrfRK4AjyA42p1uV+uEyXedHv9OxUx641TZEUVy7
y20D4JiP1//odkoAR0CyA44P6YUPWTVuwpgxC7vX9+bGrgn63RSveI+EbXjNAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQURDL/FhQjr4ZkIJYutF2qlV7e+AYwHwYDVR0j
BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0
QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC8zMTMwMzMyZTM5
MzgyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMTM0MzgzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdipDANBgkqhkiG9w0BAQsFAAOCAQEAfUJG4Bhva55CfLyFkbVS
n0YnhWmjQu34Kfyn+q3SYhTUSF2OtN63pQah7oCR4P+UeLTa/7go5JZQS5NFjoQl
nyzdzu9ocOp7QrTd2kBacYCIk+HWYSdhdxOqAtIcQCBCSKxEUON1M0+o4oT2+fpG
Cd/nO6XYOKvDktPtXhUEV4xIUMvBQmw8+wpet9oG8Fs7OUURPl+ql6LtWOPc3CbK
7mF1irH8SZ1+WcbsuI037Un22pRM5jCAatyUjWgHPs9WWLxWsV9JSJku/hfIbZHS
di7GHggfe8ZPFdIGZjOddps0y7TdjAP5OZs/bww9WGANIXAdvCsodB/zVlMlixWu
Lg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:44 2026 by rpki-client