This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577596930/0/3130332e3130322e3139392e302f32342d3234203d3e203633363033.roa
File:                     3130332e3130322e3139392e302f32342d3234203d3e203633363033.roa (raw, json)
Hash identifier:          8p1bN7o95Nzhj1STP5Gdu458Kd/sUF994fVF4Dc/txk=
Subject key identifier:   9B:95:A0:E2:95:B7:96:C1:78:DD:51:F6:AB:EF:40:A4:46:B4:A3:FF
Certificate issuer:       /CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Certificate serial:       244F0F75F9CE9BD30980A90EB16404D8300A1617
Authority key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/3130332e3130322e3139392e302f32342d3234203d3e203633363033.roa
Signing time:             Tue 20 Jan 2026 02:21:38 +0000
ROA not before:           Tue 20 Jan 2026 02:16:38 +0000
ROA not after:            Tue 19 Jan 2027 02:21:38 +0000
asID:                     63603
IP address blocks:        103.102.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4f:0f:75:f9:ce:9b:d3:09:80:a9:0e:b1:64:04:d8:30:0a:16:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B75163A575523EE408D2A2F59F8DD509D80F164
        Validity
            Not Before: Jan 20 02:16:38 2026 GMT
            Not After : Jan 19 02:21:38 2027 GMT
        Subject: CN=9B95A0E295B796C178DD51F6ABEF40A446B4A3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:54:9e:17:40:a8:fb:b6:e7:cb:3d:ca:2f:
                    a7:2f:84:59:b1:ec:89:56:d4:0b:5e:76:f9:aa:80:
                    80:a0:a8:64:73:69:06:4a:6d:d4:b7:a8:1c:36:a7:
                    a2:3e:e8:09:ee:0f:5d:37:2b:db:c6:b9:72:d2:59:
                    77:9b:9f:8e:a8:96:0a:38:16:f1:ec:f0:aa:84:3d:
                    e0:2a:3e:40:95:2e:70:b8:f4:49:6c:85:5a:b8:4b:
                    85:4f:dc:86:ff:40:20:18:89:84:2d:56:cb:2a:c5:
                    ae:79:5b:92:0e:e2:22:43:b5:3b:7d:0c:c4:d7:4d:
                    47:c1:ad:e5:f2:7b:09:c0:d7:83:fa:be:11:3c:48:
                    68:eb:d2:50:24:25:0a:11:b6:48:3e:68:91:08:c0:
                    c2:47:95:b4:17:a9:25:ba:22:50:34:70:94:d6:8d:
                    20:5f:cf:38:8a:99:a7:11:8c:b1:f0:fb:78:a6:da:
                    54:9c:15:dd:19:50:2c:1e:02:f5:10:70:98:09:be:
                    5c:f0:1d:a4:49:4b:7e:f6:f7:39:b3:f2:e8:ac:bd:
                    ad:86:9d:21:81:3c:cf:d9:09:8c:08:31:74:f7:c2:
                    19:30:26:36:1a:14:5f:de:ea:26:48:03:ec:97:24:
                    e8:0c:41:47:08:ff:fe:4c:20:3b:a7:62:ef:06:62:
                    f1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:95:A0:E2:95:B7:96:C1:78:DD:51:F6:AB:EF:40:A4:46:B4:A3:FF
            X509v3 Authority Key Identifier:
                keyid:8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/3130332e3130322e3139392e302f32342d3234203d3e203633363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:9b:10:d6:22:11:e2:68:8c:e4:c5:6e:79:7f:05:ee:5e:81:
         db:8d:61:9b:7b:62:ea:8c:8f:12:f4:8a:f3:b1:27:e6:1b:45:
         82:c4:85:14:3b:ba:97:52:1c:ce:9a:3d:4a:a1:ec:f9:d9:75:
         02:b8:d3:ae:7e:5f:bf:3c:d1:5c:e4:11:bd:7a:53:01:39:5f:
         9e:e0:65:80:a6:8e:90:dd:2f:28:90:60:8b:17:85:6b:89:6a:
         48:e5:12:ec:b0:60:4d:5c:49:de:bd:e9:06:f2:2b:b1:5a:6f:
         fc:0d:0d:28:b2:71:8b:b5:ca:29:a7:77:4d:8d:30:6d:b1:81:
         45:1a:01:f6:54:f6:07:b6:cc:24:04:53:8e:ae:d0:b0:d5:1a:
         47:ca:36:9c:f4:b7:e8:77:e5:96:5d:8a:30:2d:e8:43:73:7f:
         20:76:70:bf:20:de:30:9e:69:f7:7e:21:a5:fe:fa:1d:82:4a:
         3b:4a:e6:0e:62:17:af:de:9e:15:b6:a1:98:95:db:2a:3d:97:
         66:cc:03:b9:01:e5:1b:50:3f:ee:7f:e0:0c:bb:67:40:eb:f2:
         91:38:ec:61:cf:4d:89:da:4f:7a:83:cf:51:bc:96:8b:e5:c3:
         48:07:26:5b:23:f6:00:40:0a:d3:bf:00:f4:4e:ac:6f:58:15:
         bc:5e:9a:3c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUJE8PdfnOm9MJgKkOsWQE2DAKFhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI3NTE2M0E1NzU1MjNFRTQwOEQyQTJGNTlGOERENTA5
RDgwRjE2NDAeFw0yNjAxMjAwMjE2MzhaFw0yNzAxMTkwMjIxMzhaMDMxMTAvBgNV
BAMTKDlCOTVBMEUyOTVCNzk2QzE3OERENTFGNkFCRUY0MEE0NDZCNEEzRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk8VSeF0Co+7bnyz3KL6cvhFmx
7IlW1AtedvmqgICgqGRzaQZKbdS3qBw2p6I+6AnuD103K9vGuXLSWXebn46olgo4
FvHs8KqEPeAqPkCVLnC49ElshVq4S4VP3Ib/QCAYiYQtVssqxa55W5IO4iJDtTt9
DMTXTUfBreXyewnA14P6vhE8SGjr0lAkJQoRtkg+aJEIwMJHlbQXqSW6IlA0cJTW
jSBfzziKmacRjLHw+3im2lScFd0ZUCweAvUQcJgJvlzwHaRJS3729zmz8uisva2G
nSGBPM/ZCYwIMXT3whkwJjYaFF/e6iZIA+yXJOgMQUcI//5MIDunYu8GYvEtAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUm5Wg4pW3lsF43VH2q+9ApEa0o/8wHwYDVR0j
BBgwFoAUi3UWOldVI+5AjSovWfjdUJ2A8WQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzU5NjkzMC8wLzhCNzUxNjNBNTc1NTIzRUU0MDhEMkEyRjU5RjhE
RDUwOUQ4MEYxNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEI3NTE2M0E1NzU1MjNFRTQwOEQyQTJGNTlGOERENTA5RDgwRjE2NC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1OTY5MzAvMC8zMTMwMzMyZTMx
MzAzMjJlMzEzOTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzAzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGdmxzANBgkqhkiG9w0BAQsFAAOCAQEAE5sQ1iIR4miM5MVueX8F
7l6B241hm3ti6oyPEvSK87En5htFgsSFFDu6l1Iczpo9SqHs+dl1ArjTrn5fvzzR
XOQRvXpTATlfnuBlgKaOkN0vKJBgixeFa4lqSOUS7LBgTVxJ3r3pBvIrsVpv/A0N
KLJxi7XKKad3TY0wbbGBRRoB9lT2B7bMJARTjq7QsNUaR8o2nPS36Hflll2KMC3o
Q3N/IHZwvyDeMJ5p934hpf76HYJKO0rmDmIXr96eFbahmJXbKj2XZswDuQHlG1A/
7n/gDLtnQOvykTjsYc9NidpPeoPPUbyWi+XDSAcmWyP2AEAK078A9E6sb1gVvF6a
PA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:40:12 2026 by rpki-client