This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972140035/0/3130332e3131302e3133362e302f32322d3232203d3e203539303132.roa
File:                     3130332e3131302e3133362e302f32322d3232203d3e203539303132.roa (raw, json)
Hash identifier:          Gq1/YwE5iEcyh5S8JhVPyrDBUdmcenxdUCC+8WtWWiQ=
Subject key identifier:   8F:03:DA:59:26:9F:CA:BB:AE:3C:25:7A:76:07:63:54:9D:58:53:38
Certificate issuer:       /CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
Certificate serial:       4B21EDDE7FB03C32E835D7262A36D46B24174C9F
Authority key identifier: A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/3130332e3131302e3133362e302f32322d3232203d3e203539303132.roa
Signing time:             Tue 20 Jan 2026 02:08:27 +0000
ROA not before:           Tue 20 Jan 2026 02:03:27 +0000
ROA not after:            Tue 19 Jan 2027 02:08:27 +0000
asID:                     59012
IP address blocks:        103.110.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:21:ed:de:7f:b0:3c:32:e8:35:d7:26:2a:36:d4:6b:24:17:4c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
        Validity
            Not Before: Jan 20 02:03:27 2026 GMT
            Not After : Jan 19 02:08:27 2027 GMT
        Subject: CN=8F03DA59269FCABBAE3C257A760763549D585338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:ac:13:8a:e4:c3:1e:13:9c:94:7a:8b:10:
                    4b:9d:8c:f7:9e:d9:03:e3:d0:12:ed:d4:ce:a2:86:
                    7a:78:c8:b6:7c:f6:01:1f:d6:f6:1f:b6:cd:ba:d0:
                    8d:b4:65:3f:e3:df:08:d8:f3:8a:72:48:ff:82:63:
                    43:66:a8:51:18:17:02:fe:b3:a1:74:3c:9f:41:37:
                    54:7f:c5:20:36:24:f6:7b:a8:07:dc:3d:46:ed:80:
                    c2:6d:53:25:c5:51:ae:1f:6e:cd:06:cb:36:24:be:
                    43:2b:6a:d6:16:c1:79:ea:1d:af:35:06:70:20:c5:
                    6e:fb:e0:a4:de:23:f4:d4:7e:16:83:fa:f7:57:1a:
                    9a:95:9b:d5:5f:74:93:4a:20:2c:3d:49:46:69:ae:
                    d6:f9:37:c5:12:68:c2:61:f1:48:6b:90:33:be:4e:
                    e0:98:cf:18:85:e1:d2:55:1c:63:cf:82:23:3e:a1:
                    61:7f:f7:71:a0:b1:d0:ce:81:ac:89:b4:3b:00:2e:
                    e6:d0:9d:63:33:c8:c4:f6:93:93:d2:72:bc:58:74:
                    f6:63:22:75:c2:49:7a:9a:4c:42:f5:29:b0:0d:82:
                    a2:e4:57:fe:ae:f5:24:13:51:96:49:e4:6f:8b:09:
                    80:19:9a:30:54:54:71:ff:42:42:7f:c3:eb:65:c3:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:03:DA:59:26:9F:CA:BB:AE:3C:25:7A:76:07:63:54:9D:58:53:38
            X509v3 Authority Key Identifier:
                keyid:A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/3130332e3131302e3133362e302f32322d3232203d3e203539303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:80:94:2e:e9:a4:a5:1b:41:de:a9:aa:60:81:85:2f:ec:73:
         6f:21:29:7b:39:0e:42:4b:ec:35:80:5e:ef:61:dd:57:f6:51:
         57:11:64:19:c9:0f:ff:82:58:34:eb:83:be:3c:4e:41:92:56:
         76:fc:b1:7f:c5:a6:15:70:30:15:ab:67:a6:80:cb:70:dd:9a:
         61:fd:b5:ac:10:5b:e4:99:af:65:47:15:aa:a2:05:a2:b1:19:
         f7:c2:ca:c5:26:66:fa:09:ca:bc:2a:6b:07:79:c4:a5:dc:f1:
         d0:c2:f9:ae:af:65:4e:52:08:07:d0:41:14:59:26:13:11:8e:
         29:6d:2c:43:91:52:fa:b6:ab:77:35:a2:de:93:63:12:af:9a:
         03:d1:31:c3:d8:a6:6a:8c:21:77:51:65:08:07:31:63:65:c5:
         35:dc:c4:7d:fc:10:8f:43:b0:0b:ce:8a:b7:16:aa:65:2f:c8:
         0b:b6:4f:f6:f8:0b:c0:65:09:73:ec:b5:e7:10:f0:b8:51:f9:
         ab:a4:42:1e:37:f0:93:07:73:d1:36:80:55:28:44:3d:b7:70:
         9b:4d:0b:d4:ed:ae:64:65:8a:40:48:e3:09:16:d2:56:38:66:
         4d:85:f2:15:c1:dc:49:29:12:e2:7b:18:23:05:84:82:94:81:
         f7:e5:21:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:46 2026 by rpki-client