This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa
File:                     3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (raw, json)
Hash identifier:          OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=
Subject key identifier:   05:5D:FE:73:0E:31:43:CF:F5:D1:E1:AA:1D:F4:8B:90:C4:37:98:66
Certificate issuer:       /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48
Certificate serial:       331245E049D040B2662C28841D6A7F6D301B9D4C
Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa
Signing time:             Tue 20 Jan 2026 02:28:29 +0000
ROA not before:           Tue 20 Jan 2026 02:23:29 +0000
ROA not after:            Tue 19 Jan 2027 02:28:29 +0000
asID:                     131482
IP address blocks:        103.108.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 11:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:12:45:e0:49:d0:40:b2:66:2c:28:84:1d:6a:7f:6d:30:1b:9d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48
        Validity
            Not Before: Jan 20 02:23:29 2026 GMT
            Not After : Jan 19 02:28:29 2027 GMT
        Subject: CN=055DFE730E3143CFF5D1E1AA1DF48B90C4379866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:cf:60:25:ac:b3:e8:dc:09:d0:5e:54:4f:
                    a7:da:12:21:1a:3e:dd:04:88:9b:b0:e0:a4:ac:62:
                    1f:d2:09:71:95:3a:af:44:d4:67:64:81:8b:dc:2a:
                    0c:fe:f1:fa:70:b4:4a:60:1f:24:20:d1:c6:6f:1f:
                    8e:35:20:ba:f6:72:35:a4:48:9a:15:46:e1:25:03:
                    93:cc:42:30:60:b2:a7:6a:a9:52:70:1c:c5:18:fa:
                    3e:f4:67:8b:1f:83:2f:03:74:f2:da:fb:0a:9b:7b:
                    ea:38:40:12:ee:5b:d3:84:d6:33:62:cf:77:06:76:
                    1d:a3:06:ad:ab:89:5d:1a:ca:63:cc:c3:d9:cb:de:
                    81:5e:e4:5d:cc:26:92:73:80:a3:1d:a7:42:28:82:
                    69:b9:6d:81:47:c4:85:bd:35:9d:94:7e:2b:5d:23:
                    07:94:18:b2:d6:e0:3c:82:77:6c:8c:62:3f:1b:fa:
                    9b:11:38:85:14:fd:8b:bc:7b:31:32:02:9b:55:99:
                    84:9d:ce:5f:70:8a:47:f6:d4:5f:ce:4e:13:19:b2:
                    f1:27:7c:ba:48:21:9c:82:b0:46:91:17:6f:d2:93:
                    30:82:ef:36:32:06:c4:15:1d:1b:bb:6a:8e:9f:77:
                    a4:79:94:83:44:aa:c5:00:d0:21:b3:7e:88:06:6a:
                    bb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5D:FE:73:0E:31:43:CF:F5:D1:E1:AA:1D:F4:8B:90:C4:37:98:66
            X509v3 Authority Key Identifier:
                keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:cd:82:ee:8a:f0:7b:34:a6:95:fb:9b:cb:9e:7b:be:92:9f:
         5c:dc:76:1c:81:68:74:5d:d9:db:d8:e6:00:29:30:8b:90:01:
         d5:17:ef:9a:e7:dc:92:61:0d:50:4a:7f:b5:0f:c1:88:e3:e8:
         f0:38:1a:64:34:85:49:55:4a:e0:af:0c:90:a5:01:ec:96:c2:
         a5:de:e5:9a:43:1b:0a:93:ea:38:59:27:45:84:e8:34:72:2b:
         68:c2:04:57:d1:87:09:ff:62:2c:60:26:6b:50:60:0d:4d:76:
         1a:36:13:9b:8e:57:ad:75:b3:b2:91:85:cb:3b:cd:a7:72:1d:
         26:12:b2:65:da:82:96:60:fc:ef:b7:13:34:46:61:cf:d9:84:
         c1:e7:0b:5a:f4:5e:e8:d3:70:61:3a:a8:8c:79:73:41:3c:7f:
         43:1b:93:38:b7:83:72:bd:cf:6a:d8:8e:00:68:35:11:03:23:
         f9:66:1f:3d:9c:2f:1f:41:6c:10:09:cc:7f:51:f5:8e:9a:22:
         77:23:fa:e3:ba:2f:6b:fa:f8:11:fc:45:10:0d:ac:27:70:96:
         eb:7f:9f:6f:85:a0:e0:ef:38:e0:69:45:db:c2:7f:fb:8c:75:
         f8:45:7e:ff:d0:3f:5c:ae:90:2b:74:9d:f5:c6:20:1f:de:88:
         07:c0:a1:62
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUMxJF4EnQQLJmLCiEHWp/bTAbnUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz
MkZDQkI0ODAeFw0yNjAxMjAwMjIzMjlaFw0yNzAxMTkwMjI4MjlaMDMxMTAvBgNV
BAMTKDA1NURGRTczMEUzMTQzQ0ZGNUQxRTFBQTFERjQ4QjkwQzQzNzk4NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI0c9gJayz6NwJ0F5UT6faEiEa
Pt0EiJuw4KSsYh/SCXGVOq9E1GdkgYvcKgz+8fpwtEpgHyQg0cZvH441ILr2cjWk
SJoVRuElA5PMQjBgsqdqqVJwHMUY+j70Z4sfgy8DdPLa+wqbe+o4QBLuW9OE1jNi
z3cGdh2jBq2riV0aymPMw9nL3oFe5F3MJpJzgKMdp0Iogmm5bYFHxIW9NZ2Ufitd
IweUGLLW4DyCd2yMYj8b+psROIUU/Yu8ezEyAptVmYSdzl9wikf21F/OThMZsvEn
fLpIIZyCsEaRF2/SkzCC7zYyBsQVHRu7ao6fd6R5lINEqsUA0CGzfogGartFAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUBV3+cw4xQ8/10eGqHfSLkMQ3mGYwHwYDVR0j
BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE
MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3OTI0NjEwLzAvMzEzMDMzMmUz
MTMwMzgyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMTM0Mzgz
Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmdsoDANBgkqhkiG9w0BAQsFAAOCAQEAZc2C7orwezSmlfub
y557vpKfXNx2HIFodF3Z29jmACkwi5AB1RfvmufckmENUEp/tQ/BiOPo8DgaZDSF
SVVK4K8MkKUB7JbCpd7lmkMbCpPqOFknRYToNHIraMIEV9GHCf9iLGAma1BgDU12
GjYTm45XrXWzspGFyzvNp3IdJhKyZdqClmD877cTNEZhz9mEwecLWvRe6NNwYTqo
jHlzQTx/QxuTOLeDcr3PatiOAGg1EQMj+WYfPZwvH0FsEAnMf1H1jpoidyP647ov
a/r4EfxFEA2sJ3CW63+fb4Wg4O844GlF28J/+4x1+EV+/9A/XK6QK3Sd9cYgH96I
B8ChYg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:52 2026 by rpki-client