This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa
File:                     3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (raw, json)
Hash identifier:          bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=
Subject key identifier:   FE:1F:1C:C9:55:9B:AF:D5:04:82:51:0D:C0:39:B1:7A:DA:75:AD:AD
Certificate issuer:       /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E
Certificate serial:       0F28FD142F597EA21CB825B51EE680D3CBE20ED5
Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa
Signing time:             Tue 20 Jan 2026 02:11:57 +0000
ROA not before:           Tue 20 Jan 2026 02:06:57 +0000
ROA not after:            Tue 19 Jan 2027 02:11:57 +0000
asID:                     9392
IP address blocks:        103.122.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:28:fd:14:2f:59:7e:a2:1c:b8:25:b5:1e:e6:80:d3:cb:e2:0e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E
        Validity
            Not Before: Jan 20 02:06:57 2026 GMT
            Not After : Jan 19 02:11:57 2027 GMT
        Subject: CN=FE1F1CC9559BAFD50482510DC039B17ADA75ADAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:49:a1:b7:7a:c3:3d:dc:99:63:ca:02:4b:
                    74:53:55:3a:d9:bd:ed:f9:93:b3:99:c1:d2:f8:7f:
                    47:1f:51:36:6e:8e:d3:92:27:f8:03:c1:b0:22:ae:
                    df:9f:ca:79:8b:9c:14:f3:15:33:7b:8d:6d:56:cf:
                    8b:46:04:33:63:0d:6c:84:54:9a:ae:76:b1:0d:63:
                    ec:fb:30:42:e5:d2:7e:bd:ce:af:b3:af:f2:79:13:
                    17:cf:cd:b3:96:bd:8e:b0:23:6f:4b:85:56:7f:ee:
                    88:7d:20:bd:a9:f6:9a:0a:f5:25:78:bb:4d:c7:7e:
                    16:00:45:a4:fe:ed:fb:15:f7:74:c6:42:73:d6:c5:
                    e6:2f:80:e8:84:0d:77:32:dc:16:80:c8:df:31:92:
                    2d:dc:81:37:35:66:15:2c:9e:a6:14:f5:45:52:a1:
                    56:66:3b:98:c5:3b:8a:06:42:44:72:8c:57:04:66:
                    6e:a3:71:a5:ba:87:26:07:af:e7:cd:69:60:c5:b0:
                    0f:dc:32:be:ff:ea:cb:69:21:c8:fc:a9:d2:39:cd:
                    02:19:df:cc:ae:78:68:71:cc:12:05:d6:28:b8:3f:
                    84:54:96:ce:1d:1f:e7:83:4b:f3:80:f2:a3:5c:be:
                    bf:e5:e9:8c:60:06:79:0d:55:29:ea:c7:e4:41:5a:
                    9c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1F:1C:C9:55:9B:AF:D5:04:82:51:0D:C0:39:B1:7A:DA:75:AD:AD
            X509v3 Authority Key Identifier:
                keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:4d:1e:b0:fa:5f:88:bf:ce:d8:91:ce:6b:e6:16:ec:43:c0:
         b2:a4:64:fb:dd:59:c0:fa:e5:10:5e:db:da:46:20:c7:d2:75:
         93:60:11:0b:3a:bc:ed:4d:44:fd:2a:05:c5:00:d2:d1:ed:f1:
         09:92:27:bd:53:47:91:2b:9f:ed:4c:1a:b3:9c:87:9b:b2:f9:
         95:bc:d1:59:88:06:3a:86:4e:8b:3e:b8:5f:54:f8:e6:55:e1:
         a7:63:f0:81:e0:55:89:f3:c3:5d:fc:0d:cf:7c:81:30:07:39:
         a9:dd:44:ff:30:f9:d8:cf:57:2b:39:05:4e:4c:e1:db:6b:8b:
         64:53:07:d3:78:f3:c9:cd:bc:bf:92:89:74:af:df:12:e2:3f:
         44:2b:1f:0a:a1:9f:26:e1:62:26:03:c8:39:d7:24:36:d5:b6:
         5f:61:1b:98:44:bc:6b:92:b2:b4:3e:92:82:26:d1:97:d7:bd:
         fb:eb:8c:97:94:3d:f9:75:a0:de:a9:9b:6f:36:81:60:e5:ff:
         0d:94:2d:6c:ce:d4:02:b1:0c:17:79:c5:df:0d:bd:bd:0a:48:
         c6:c2:cd:e4:50:da:a6:d2:de:1a:5d:17:f0:d6:d5:3e:a2:65:
         0a:e7:b2:ce:e5:e9:3c:13:15:4a:da:6a:4d:53:a3:a4:dc:ba:
         65:03:a7:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:48 2026 by rpki-client