This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa
File:                     3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (raw, json)
Hash identifier:          +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=
Subject key identifier:   7B:20:EF:5C:53:14:61:71:22:3E:41:08:61:57:CF:F6:A6:A5:38:73
Certificate issuer:       /CN=8FAB27452D80D270582E88C3F77F13734A31720D
Certificate serial:       560446B5AD054DA4223FDE709BDFCDCCDC42FF8B
Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa
Signing time:             Tue 20 Jan 2026 02:10:54 +0000
ROA not before:           Tue 20 Jan 2026 02:05:54 +0000
ROA not after:            Tue 19 Jan 2027 02:10:54 +0000
asID:                     139148
IP address blocks:        103.145.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:04:46:b5:ad:05:4d:a4:22:3f:de:70:9b:df:cd:cc:dc:42:ff:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D
        Validity
            Not Before: Jan 20 02:05:54 2026 GMT
            Not After : Jan 19 02:10:54 2027 GMT
        Subject: CN=7B20EF5C53146171223E41086157CFF6A6A53873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:18:e7:03:36:92:2f:b1:d9:9a:69:bd:bb:
                    6a:6c:93:9c:d6:47:ad:85:12:6a:6f:3b:1d:1f:19:
                    f4:52:21:98:31:c8:c9:19:5d:43:f5:66:2e:c4:d6:
                    3f:72:60:a5:fc:5f:16:10:37:60:e7:ae:7c:c0:bc:
                    cf:99:e1:2a:9e:e9:9b:70:3d:8c:d4:c2:d0:38:44:
                    7c:13:be:ab:3b:f4:07:9f:c1:a1:7c:ce:c8:89:30:
                    48:0d:b8:f5:f7:94:1c:98:c4:28:71:ba:03:1d:40:
                    36:66:a1:b2:60:4d:3a:19:d9:a0:00:1f:49:3e:2a:
                    33:aa:c4:02:41:0d:13:5d:1e:4b:bf:11:01:98:af:
                    fe:f6:3b:2f:9e:a2:12:14:23:e7:ec:54:f1:08:97:
                    2c:60:9f:5c:8f:1b:be:d6:0b:1b:6a:5c:f5:26:9f:
                    c4:64:05:8a:28:70:b1:29:fa:9a:fe:cf:71:0f:cc:
                    43:be:fe:54:59:43:ab:34:7d:15:ff:b8:7a:e6:01:
                    1f:20:3b:2b:17:5e:99:21:70:ca:dc:0f:74:11:1e:
                    2e:bd:b8:a4:dd:e1:07:8e:84:ae:35:20:80:e4:5a:
                    88:ce:9b:34:b1:e3:0a:7b:94:19:10:64:8a:bb:91:
                    80:fc:42:56:62:5c:b5:6b:7b:0e:48:60:51:77:61:
                    81:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:20:EF:5C:53:14:61:71:22:3E:41:08:61:57:CF:F6:A6:A5:38:73
            X509v3 Authority Key Identifier:
                keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:2c:1e:ba:17:a7:25:0b:6d:32:e3:83:2d:9c:ab:df:5c:28:
         c6:f0:0c:d7:d5:9d:c6:8d:39:c4:2a:02:f2:4a:a6:4f:8b:d2:
         96:98:df:83:6e:6d:ea:22:f7:da:20:26:13:f6:e5:0f:6f:72:
         7e:5e:3e:59:ec:a1:bc:f5:38:86:9f:27:51:26:4e:31:23:c6:
         b5:da:3d:5e:9e:20:ef:5e:fa:87:ab:8f:d9:93:44:40:28:e0:
         c3:83:3d:f0:f5:71:0a:a2:53:26:ba:5c:85:39:ed:d4:f0:63:
         91:29:95:5a:55:fe:6f:5b:67:cf:69:cb:6e:94:53:f5:7e:87:
         70:9e:b0:a7:72:ed:47:bb:53:ca:a1:c8:a6:b1:9b:62:42:37:
         30:a8:66:9f:33:e2:2f:92:78:e3:7f:59:4d:1c:09:8c:66:c6:
         10:ac:9a:8c:26:75:81:5e:62:9b:a8:a3:0a:6b:d8:b1:ae:0f:
         43:30:bd:74:5a:09:c1:97:e6:14:f0:f0:98:09:a3:c5:e4:50:
         4a:3e:63:77:ec:58:17:da:dd:0f:7b:9f:af:a3:cb:40:e5:17:
         2a:81:37:8b:24:82:13:04:36:68:38:0d:54:1b:a9:23:27:51:
         bc:af:80:1b:7f:cb:10:69:d3:1c:b8:2e:c4:c6:a2:34:6f:6d:
         46:b0:22:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:38 2026 by rpki-client