This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa
File:                     3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (raw, json)
Hash identifier:          5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=
Subject key identifier:   78:A8:1F:CC:C0:E5:6C:00:C5:52:E5:18:9E:C7:E7:24:0D:37:55:F9
Certificate issuer:       /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E
Certificate serial:       415AAD630F465352078BBAA9B5967E0C04B48BE1
Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa
Signing time:             Tue 20 Jan 2026 02:11:57 +0000
ROA not before:           Tue 20 Jan 2026 02:06:57 +0000
ROA not after:            Tue 19 Jan 2027 02:11:57 +0000
asID:                     9392
IP address blocks:        103.122.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5a:ad:63:0f:46:53:52:07:8b:ba:a9:b5:96:7e:0c:04:b4:8b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E
        Validity
            Not Before: Jan 20 02:06:57 2026 GMT
            Not After : Jan 19 02:11:57 2027 GMT
        Subject: CN=78A81FCCC0E56C00C552E5189EC7E7240D3755F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:6c:7f:b2:d4:d9:89:0c:50:d7:20:30:a6:
                    43:e4:e8:d4:d3:84:8e:29:12:f9:f6:94:0d:c1:73:
                    5e:27:78:49:0a:a4:cd:46:fe:a8:7d:78:c0:5a:e1:
                    26:ed:aa:52:57:a1:0a:99:37:3c:db:88:4c:0f:a3:
                    c3:ce:dc:81:d4:25:d0:4f:69:2f:96:e5:3e:25:1b:
                    df:7f:66:bb:ad:54:b6:bd:65:5d:88:29:d4:f2:21:
                    98:76:39:73:bf:1e:81:b4:30:10:9e:24:10:d9:19:
                    d0:c8:1d:cb:fa:ea:c3:86:78:d3:fe:32:da:f8:04:
                    f5:ad:54:16:e9:d6:6b:3b:3d:00:48:5d:ef:83:cb:
                    66:d7:ee:f0:b1:81:49:d8:5e:06:4e:7c:d4:b4:fd:
                    e6:be:50:ae:09:6a:2a:b4:f3:3f:62:f4:f8:c7:39:
                    c8:67:21:6e:e6:22:3d:4f:16:fa:92:f6:de:e2:88:
                    38:74:ea:bc:0e:77:c0:c1:8f:55:aa:8c:8c:ef:70:
                    3a:a9:ab:78:5a:48:8d:f9:cb:91:53:c9:63:76:13:
                    e1:57:41:d3:b9:c9:84:5d:0c:0d:22:a9:9b:5c:d4:
                    10:14:d5:49:e6:da:5a:a0:c6:63:f8:2d:a0:9c:75:
                    c7:e5:d7:1a:77:13:63:37:cd:29:2d:b6:11:d4:79:
                    2e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A8:1F:CC:C0:E5:6C:00:C5:52:E5:18:9E:C7:E7:24:0D:37:55:F9
            X509v3 Authority Key Identifier:
                keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:7d:c2:9a:9d:54:26:55:c8:67:3d:7a:0f:91:49:fb:ee:1e:
         d5:f3:af:2b:ba:f5:5e:ed:91:ec:0e:2e:d3:67:11:4b:38:56:
         51:8c:60:e7:01:60:d3:59:59:38:19:55:5c:28:a0:f4:5b:98:
         3c:1e:77:b4:92:b4:f1:d7:86:97:ae:a8:db:1e:ac:69:72:1f:
         90:c2:fa:27:b1:39:ca:8e:8f:80:3f:e7:1a:5b:ad:a2:f3:68:
         cb:9a:e4:c7:0f:65:18:e6:a0:3a:2c:ea:77:94:86:b7:9a:c7:
         ff:7f:a8:ef:e1:1d:a6:ec:eb:f7:86:2a:37:b1:c0:0f:32:df:
         d4:db:82:f7:4c:5e:5a:9e:3a:6b:c3:7a:8d:d0:ee:e0:f3:08:
         d5:b7:37:9a:2a:a8:47:ec:79:b2:bd:2a:cf:dc:6e:22:d5:e8:
         1d:85:a6:f8:e7:b3:51:70:11:47:58:ab:26:51:8e:84:f5:55:
         7a:39:8a:66:64:c7:28:61:a2:3e:07:60:ff:82:69:11:82:de:
         f7:0e:ab:13:77:d0:ce:2c:83:fa:62:e1:1d:db:b9:d8:05:79:
         89:e6:f9:20:f6:02:5d:70:be:23:22:d6:ed:2b:34:79:d1:65:
         81:87:f5:d8:aa:e9:5e:29:7a:3e:8a:e7:db:08:e3:e1:b7:64:
         da:7e:c1:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:41 2026 by rpki-client