This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577596930/0/3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa
File:                     3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa (raw, json)
Hash identifier:          P+f1ZXGwHVSKGlNUY9mpTNk0/ILFxlAfGXJFsffvGXo=
Subject key identifier:   4B:FE:4F:3C:D8:13:42:B5:E2:BA:E7:5B:25:C5:C9:DF:2F:95:64:69
Certificate issuer:       /CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Certificate serial:       71ADC943F9ACB2CBA809D9DB3AF414349857A3C1
Authority key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa
Signing time:             Tue 20 Jan 2026 02:21:39 +0000
ROA not before:           Tue 20 Jan 2026 02:16:39 +0000
ROA not after:            Tue 19 Jan 2027 02:21:39 +0000
asID:                     63603
IP address blocks:        103.102.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ad:c9:43:f9:ac:b2:cb:a8:09:d9:db:3a:f4:14:34:98:57:a3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B75163A575523EE408D2A2F59F8DD509D80F164
        Validity
            Not Before: Jan 20 02:16:39 2026 GMT
            Not After : Jan 19 02:21:39 2027 GMT
        Subject: CN=4BFE4F3CD81342B5E2BAE75B25C5C9DF2F956469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:20:92:3d:d2:8d:c4:c5:18:b8:7f:79:4d:cc:
                    c1:61:fd:d2:86:5a:70:c0:75:2f:82:98:1c:ad:66:
                    1b:f9:13:63:55:67:9f:52:d6:15:fd:fe:db:85:04:
                    e4:ee:73:a0:4b:9d:35:0a:f0:77:ab:9e:ca:93:c3:
                    6f:b6:4b:07:3d:4e:ee:b2:50:be:73:09:82:87:8c:
                    8d:f5:06:b5:ef:f5:c4:b7:d2:05:dd:19:19:e9:6f:
                    25:79:27:4e:81:45:67:80:33:0d:b0:e6:22:62:51:
                    b2:50:3d:fe:5a:d1:56:4c:d4:33:d1:73:41:af:9c:
                    39:56:aa:8f:d9:c9:0f:2f:11:c9:2a:e9:33:38:20:
                    25:4f:c7:e0:cc:56:10:09:c3:30:98:64:14:5b:9b:
                    81:09:30:39:e1:9a:82:70:71:0c:3c:2c:04:d2:8a:
                    73:db:54:f3:8e:fa:a4:72:80:be:69:05:34:dd:61:
                    05:b8:43:57:ae:f0:41:46:92:3e:9f:dd:71:e0:50:
                    35:f3:55:42:7b:08:79:87:63:96:ce:7e:39:8b:29:
                    68:b6:3e:f4:32:56:5c:5c:d0:66:b6:d3:f8:5b:b7:
                    45:cc:3d:10:77:ac:bd:26:52:53:85:f8:93:57:ed:
                    ad:2a:ff:d3:14:db:3f:2a:59:78:33:da:7b:d0:5e:
                    83:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FE:4F:3C:D8:13:42:B5:E2:BA:E7:5B:25:C5:C9:DF:2F:95:64:69
            X509v3 Authority Key Identifier:
                keyid:8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:2e:6f:d9:8a:b1:78:ea:2e:f8:41:93:9e:c2:8e:65:40:b0:
         c7:bb:33:d9:45:1c:2f:d8:a0:1c:56:7b:b0:32:29:7d:7c:91:
         d9:d9:82:79:67:71:7b:3e:18:98:5f:7f:31:8f:08:ae:d9:f6:
         e4:bc:6a:e7:87:74:a9:e8:f9:68:47:48:6c:80:2f:20:96:a3:
         a7:e4:7f:ea:65:b4:a2:2c:89:fc:f8:ea:9d:7f:64:87:a2:28:
         10:92:22:eb:e4:93:c3:a4:fb:67:31:95:3d:ff:52:db:77:ba:
         3b:16:17:c6:03:95:d1:7a:0f:66:16:ac:ae:bb:b8:f6:a4:d3:
         e8:5c:3c:f5:27:a9:7b:8c:6c:92:f5:77:34:3a:57:c3:82:5f:
         09:d7:2b:dc:24:e2:0f:30:b8:6c:82:e1:aa:79:69:33:ef:6f:
         34:6f:99:eb:4e:89:f1:38:95:19:f8:bd:3a:64:84:2f:7b:82:
         3c:7a:82:69:9e:85:91:ae:97:75:96:24:ca:25:ea:aa:6b:f9:
         7c:a8:66:b9:4e:9c:84:b6:49:92:58:1c:e6:3f:4b:a0:ab:94:
         fe:a3:03:3e:59:c5:35:b1:10:3a:13:27:c2:16:26:ec:60:ae:
         d5:dd:76:f1:15:8e:a5:e7:b0:43:d7:34:00:d8:ad:ef:75:f0:
         af:89:8e:55
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUca3JQ/msssuoCdnbOvQUNJhXo8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI3NTE2M0E1NzU1MjNFRTQwOEQyQTJGNTlGOERENTA5
RDgwRjE2NDAeFw0yNjAxMjAwMjE2MzlaFw0yNzAxMTkwMjIxMzlaMDMxMTAvBgNV
BAMTKDRCRkU0RjNDRDgxMzQyQjVFMkJBRTc1QjI1QzVDOURGMkY5NTY0NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaIJI90o3ExRi4f3lNzMFh/dKG
WnDAdS+CmBytZhv5E2NVZ59S1hX9/tuFBOTuc6BLnTUK8HernsqTw2+2Swc9Tu6y
UL5zCYKHjI31BrXv9cS30gXdGRnpbyV5J06BRWeAMw2w5iJiUbJQPf5a0VZM1DPR
c0GvnDlWqo/ZyQ8vEckq6TM4ICVPx+DMVhAJwzCYZBRbm4EJMDnhmoJwcQw8LATS
inPbVPOO+qRygL5pBTTdYQW4Q1eu8EFGkj6f3XHgUDXzVUJ7CHmHY5bOfjmLKWi2
PvQyVlxc0Ga20/hbt0XMPRB3rL0mUlOF+JNX7a0q/9MU2z8qWXgz2nvQXoO9AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUS/5PPNgTQrXiuudbJcXJ3y+VZGkwHwYDVR0j
BBgwFoAUi3UWOldVI+5AjSovWfjdUJ2A8WQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzU5NjkzMC8wLzhCNzUxNjNBNTc1NTIzRUU0MDhEMkEyRjU5RjhE
RDUwOUQ4MEYxNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEI3NTE2M0E1NzU1MjNFRTQwOEQyQTJGNTlGOERENTA5RDgwRjE2NC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1OTY5MzAvMC8zMTMwMzMyZTMx
MzAzMjJlMzEzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzAzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGdmxTANBgkqhkiG9w0BAQsFAAOCAQEAaS5v2YqxeOou+EGTnsKO
ZUCwx7sz2UUcL9igHFZ7sDIpfXyR2dmCeWdxez4YmF9/MY8Irtn25Lxq54d0qej5
aEdIbIAvIJajp+R/6mW0oiyJ/PjqnX9kh6IoEJIi6+STw6T7ZzGVPf9S23e6OxYX
xgOV0XoPZhasrru49qTT6Fw89Sepe4xskvV3NDpXw4JfCdcr3CTiDzC4bILhqnlp
M+9vNG+Z606J8TiVGfi9OmSEL3uCPHqCaZ6Fka6XdZYkyiXqqmv5fKhmuU6chLZJ
klgc5j9LoKuU/qMDPlnFNbEQOhMnwhYm7GCu1d128RWOpeewQ9c0ANit73Xwr4mO
VQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:41 2026 by rpki-client