This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577859074/0/3130332e3134302e31342e302f32332d3332203d3e203137363231.roa
File:                     3130332e3134302e31342e302f32332d3332203d3e203137363231.roa (raw, json)
Hash identifier:          2cWU5UH8whnz87agI1VludkKe4lf2cSxtmFnl04vmyI=
Subject key identifier:   0A:7D:DB:45:58:83:77:B6:E5:4F:AE:4D:28:8F:14:1C:DA:EF:3E:28
Certificate issuer:       /CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316
Certificate serial:       5824F84F6ACF5E1FF37AA55E56EE0BBB0816F792
Authority key identifier: 67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/3130332e3134302e31342e302f32332d3332203d3e203137363231.roa
Signing time:             Tue 20 Jan 2026 02:18:09 +0000
ROA not before:           Tue 20 Jan 2026 02:13:09 +0000
ROA not after:            Tue 19 Jan 2027 02:18:09 +0000
asID:                     17621
IP address blocks:        103.140.14.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:24:f8:4f:6a:cf:5e:1f:f3:7a:a5:5e:56:ee:0b:bb:08:16:f7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316
        Validity
            Not Before: Jan 20 02:13:09 2026 GMT
            Not After : Jan 19 02:18:09 2027 GMT
        Subject: CN=0A7DDB45588377B6E54FAE4D288F141CDAEF3E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:78:3f:ea:34:c9:0b:6f:1e:7d:68:4b:91:
                    7c:c0:62:ee:61:c3:05:82:d3:2c:66:44:a3:cd:42:
                    6b:7a:d4:73:a9:f1:a0:59:bb:ba:4f:c4:2a:76:82:
                    06:a5:7c:42:75:99:06:44:b7:79:6c:d5:d6:2d:98:
                    47:c5:34:4a:86:55:36:bf:d5:84:fe:df:22:44:6e:
                    a8:7f:e6:db:fb:01:74:d5:01:4e:cd:9c:c9:27:ee:
                    33:53:b6:d0:9c:7f:a7:84:9f:de:ff:41:3b:25:9a:
                    79:94:04:72:e7:98:ff:54:5b:68:e2:1e:98:45:61:
                    5c:41:16:49:ee:5a:ed:ce:61:89:6f:db:af:2f:d6:
                    e9:3d:5c:b6:91:f3:e1:d0:16:1c:7a:e9:20:ed:77:
                    51:3a:d5:6b:9b:34:d2:91:5b:9c:58:0e:07:c5:f9:
                    bd:74:c5:f7:87:bd:cd:34:1e:c5:4c:b3:b5:e8:f2:
                    62:a2:e4:b1:65:84:36:8a:0c:4a:e8:32:24:43:58:
                    80:2d:26:70:98:73:59:b0:7d:f1:43:f7:96:63:39:
                    1a:69:f3:6d:18:ae:e9:ba:48:73:3c:e2:76:c6:f4:
                    2b:34:7e:ca:38:34:a9:ab:87:00:df:b3:08:18:47:
                    7f:a2:08:5b:f2:9f:2e:33:bf:c5:c7:db:f1:b7:c6:
                    63:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7D:DB:45:58:83:77:B6:E5:4F:AE:4D:28:8F:14:1C:DA:EF:3E:28
            X509v3 Authority Key Identifier:
                keyid:67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/3130332e3134302e31342e302f32332d3332203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:2d:e7:e1:f4:a6:0f:f1:fe:26:27:99:64:ec:35:69:c3:bd:
         ff:0a:76:18:e5:1f:bf:94:ac:61:28:2c:da:49:75:0c:e8:cb:
         55:54:1a:6e:5d:d8:8b:e5:2f:61:c2:58:22:51:53:bd:fa:ac:
         24:80:76:48:11:8b:c0:92:90:d5:31:18:60:ec:52:e8:dd:69:
         4d:e4:ab:04:53:a0:e1:a3:85:0e:5e:61:50:01:1e:f0:c7:ad:
         d1:8e:fe:6a:2a:ce:c0:1c:52:2b:a4:f3:fb:ab:27:56:c8:b6:
         29:45:e6:7b:ba:21:41:3c:11:27:59:cf:9d:b5:77:05:62:49:
         33:51:50:27:59:90:5f:95:6d:ba:f3:0a:a7:22:c7:ed:59:46:
         27:54:11:d9:ce:25:4c:6b:3b:41:17:d7:09:70:40:54:9c:3b:
         ef:73:e5:13:f5:ef:95:4b:3b:0c:a7:02:8e:8e:69:1b:f4:49:
         77:32:87:94:fb:3f:0b:ff:09:39:49:90:b9:a7:80:89:5b:48:
         aa:ab:cd:95:cf:9e:12:34:d3:8b:4c:28:a6:0e:fd:80:7b:48:
         3f:c1:75:17:85:84:5c:1e:45:ea:0f:51:f3:55:d7:a2:89:9a:
         5a:d5:f9:62:19:76:0e:54:6b:70:ab:8c:07:84:38:b3:f3:10:
         ff:06:68:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:34:44 2026 by rpki-client