This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa
File:                     3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (raw, json)
Hash identifier:          6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=
Subject key identifier:   F1:A7:B6:C2:9E:7F:D7:E1:4E:DF:02:AD:A0:52:4A:74:92:90:A9:72
Certificate issuer:       /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
Certificate serial:       2ED33E2AD132C753CF8DB26925EF59A1AB029F4C
Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa
Signing time:             Tue 20 Jan 2026 02:09:30 +0000
ROA not before:           Tue 20 Jan 2026 02:04:30 +0000
ROA not after:            Tue 19 Jan 2027 02:09:30 +0000
asID:                     131541
IP address blocks:        103.103.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d3:3e:2a:d1:32:c7:53:cf:8d:b2:69:25:ef:59:a1:ab:02:9f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
        Validity
            Not Before: Jan 20 02:04:30 2026 GMT
            Not After : Jan 19 02:09:30 2027 GMT
        Subject: CN=F1A7B6C29E7FD7E14EDF02ADA0524A749290A972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:67:20:c1:c4:7e:86:b1:e9:a3:2b:5f:4d:
                    53:95:0c:18:0e:8f:09:c3:ac:29:e4:cc:79:33:ac:
                    63:c0:7f:1f:ea:9a:16:b0:b7:cf:ae:68:4d:3b:eb:
                    61:e3:48:72:fb:7a:6d:1d:22:d8:a8:7a:a0:a7:de:
                    6d:40:47:54:0d:af:85:f1:32:aa:2e:6b:83:2a:a3:
                    33:88:cf:9c:c8:19:b7:e1:d6:b1:0b:63:45:66:82:
                    f8:95:73:e6:ce:3d:b2:a4:f7:6f:0b:f4:6f:03:a6:
                    a2:c8:57:93:86:e3:d3:3b:e5:70:37:de:b0:0f:3e:
                    78:56:6d:22:e7:52:16:44:ce:f2:9c:f6:4d:cd:aa:
                    48:a8:a8:67:04:ee:00:8d:61:b0:c1:6d:bb:88:6f:
                    84:17:62:df:ae:2b:76:67:b9:6d:bf:27:47:a4:16:
                    72:05:b2:d2:cb:09:bd:91:e8:f8:96:37:13:4f:f4:
                    07:c0:d8:ce:81:a4:df:f9:4c:3c:34:f5:41:79:f9:
                    a2:3f:26:9e:a9:e2:9f:d9:59:1d:f4:2f:26:9a:37:
                    67:bb:15:bc:8a:42:24:0a:eb:de:3e:57:ab:4b:35:
                    45:65:be:62:f1:0e:24:ad:0c:2a:c7:d1:fc:7d:2f:
                    75:c5:0c:ac:b7:53:2d:86:f1:62:a7:14:ab:4e:26:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A7:B6:C2:9E:7F:D7:E1:4E:DF:02:AD:A0:52:4A:74:92:90:A9:72
            X509v3 Authority Key Identifier:
                keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:0e:83:00:1f:63:8c:7f:4b:2a:b5:15:ae:8c:7e:3a:85:23:
         a1:9a:7f:35:6a:65:7d:86:2c:17:da:86:59:ab:b5:6b:eb:75:
         dc:f7:11:d1:46:42:ba:fb:e4:30:32:80:39:8d:1a:61:95:e7:
         ac:96:4a:f4:d2:fa:18:d5:1b:10:5b:b7:47:e3:a3:c0:b9:49:
         a7:9f:80:1e:57:90:16:9e:05:a2:33:c4:f8:11:bc:03:3f:1e:
         7d:6f:eb:02:7e:bf:15:0a:bf:2e:2a:fa:77:a2:16:bd:fe:21:
         0b:e0:17:6e:d3:df:51:ca:26:a7:58:d4:6e:10:19:2a:ce:da:
         cb:68:05:c0:54:cd:4b:12:6f:da:d3:f2:66:ab:25:92:af:bd:
         3b:d7:37:a9:b9:9f:17:a9:cc:60:21:b0:fd:47:9d:15:a6:9e:
         60:0b:f7:0c:2a:41:51:cb:42:e3:5e:af:fe:63:c6:df:04:38:
         54:aa:10:71:e5:c0:00:6a:eb:6b:93:43:fd:b2:3f:37:e3:47:
         ab:cc:5d:59:96:67:ef:0e:81:49:ae:e5:ae:c6:63:0c:9a:09:
         ae:de:3f:eb:0e:2b:d7:fc:7a:92:35:c7:08:58:a1:39:76:35:
         5a:6b:ee:27:9d:91:49:ca:22:d4:3e:2d:0f:3d:4b:72:b9:3f:
         72:c0:cf:3e
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIULtM+KtEyx1PPjbJpJe9ZoasCn0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUx
QjEwQUJGMjAeFw0yNjAxMjAwMjA0MzBaFw0yNzAxMTkwMjA5MzBaMDMxMTAvBgNV
BAMTKEYxQTdCNkMyOUU3RkQ3RTE0RURGMDJBREEwNTI0QTc0OTI5MEE5NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBWcgwcR+hrHpoytfTVOVDBgO
jwnDrCnkzHkzrGPAfx/qmhawt8+uaE0762HjSHL7em0dItioeqCn3m1AR1QNr4Xx
Mqoua4MqozOIz5zIGbfh1rELY0VmgviVc+bOPbKk928L9G8DpqLIV5OG49M75XA3
3rAPPnhWbSLnUhZEzvKc9k3NqkioqGcE7gCNYbDBbbuIb4QXYt+uK3ZnuW2/J0ek
FnIFstLLCb2R6PiWNxNP9AfA2M6BpN/5TDw09UF5+aI/Jp6p4p/ZWR30LyaaN2e7
FbyKQiQK694+V6tLNUVlvmLxDiStDCrH0fx9L3XFDKy3Uy2G8WKnFKtOJr1HAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU8ae2wp5/1+FO3wKtoFJKdJKQqXIwHwYDVR0j
BBgwFoAUgWyBmI7L63AfTqWT008olRsQq/IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MzIyMTk3MTk0MzQyNy8wLzgxNkM4MTk4OEVDQkVCNzAxRjRFQTU5M0QzNEYy
ODk1MUIxMEFCRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUxQjEwQUJGMi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzE5NDM0MjcvMC8zMTMwMzMyZTMx
MzAzMzJlMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTM1MzQzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGdnJDANBgkqhkiG9w0BAQsFAAOCAQEARQ6DAB9jjH9LKrUVrox+
OoUjoZp/NWplfYYsF9qGWau1a+t13PcR0UZCuvvkMDKAOY0aYZXnrJZK9NL6GNUb
EFu3R+OjwLlJp5+AHleQFp4FojPE+BG8Az8efW/rAn6/FQq/Lir6d6IWvf4hC+AX
btPfUcomp1jUbhAZKs7ay2gFwFTNSxJv2tPyZqslkq+9O9c3qbmfF6nMYCGw/Ued
FaaeYAv3DCpBUctC416v/mPG3wQ4VKoQceXAAGrra5ND/bI/N+NHq8xdWZZn7w6B
Sa7lrsZjDJoJrt4/6w4r1/x6kjXHCFihOXY1WmvuJ52RScoi1D4tDz1Lcrk/csDP
Pg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:48 2026 by rpki-client