This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa
File:                     3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (raw, json)
Hash identifier:          mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=
Subject key identifier:   D2:88:55:4C:03:00:C8:E5:ED:66:BC:3B:0F:89:12:8F:5B:82:C4:57
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       0775777FE4AB800766AB65456A0CA435831C7E5F
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa
Signing time:             Tue 20 Jan 2026 02:12:02 +0000
ROA not before:           Tue 20 Jan 2026 02:07:02 +0000
ROA not after:            Tue 19 Jan 2027 02:12:02 +0000
asID:                     55991
IP address blocks:        103.235.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:75:77:7f:e4:ab:80:07:66:ab:65:45:6a:0c:a4:35:83:1c:7e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Jan 20 02:07:02 2026 GMT
            Not After : Jan 19 02:12:02 2027 GMT
        Subject: CN=D288554C0300C8E5ED66BC3B0F89128F5B82C457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:ea:78:ed:47:6e:9c:37:83:05:3b:19:33:
                    f0:70:37:91:52:a8:78:77:30:2b:b6:b8:8c:15:29:
                    b5:07:93:c8:70:30:e4:a5:80:7c:5d:65:74:f1:6f:
                    a1:63:1c:69:fb:fd:9d:12:46:10:f6:b7:ee:ee:85:
                    b3:c5:ac:8f:2d:95:f0:04:9c:5f:8f:01:9c:23:ca:
                    9c:f6:b8:a6:16:fa:90:df:be:e4:5a:9c:ce:fd:ab:
                    b5:32:a2:9d:c9:f6:19:06:3b:cb:96:17:03:27:47:
                    d8:a0:81:42:5a:fe:e1:8c:06:1b:0a:26:12:a3:25:
                    fd:fe:36:26:13:c0:20:53:ac:d0:4e:e7:42:33:eb:
                    0a:80:8b:00:6e:a8:0a:3b:bd:fe:0d:a0:b0:04:da:
                    f7:fd:57:df:6a:cf:bf:20:74:75:96:2f:c8:66:d4:
                    3f:07:3d:b3:2d:8a:fb:54:ea:02:61:7f:f7:bc:5d:
                    31:dd:b7:fa:6f:47:4b:a8:09:9a:67:b7:2a:59:ed:
                    bf:28:7e:37:15:b7:3d:8f:b5:73:de:d1:b3:ce:b6:
                    0a:12:e2:58:5f:eb:84:6d:db:9a:82:33:40:02:15:
                    9f:a6:3f:4c:04:d5:7d:44:ef:b9:a3:6d:61:b3:1e:
                    47:bb:a8:ea:99:ea:90:42:67:f5:c9:51:9e:64:a1:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:88:55:4C:03:00:C8:E5:ED:66:BC:3B:0F:89:12:8F:5B:82:C4:57
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:91:cd:b0:4d:d8:2c:d6:34:6e:68:1c:e5:aa:e8:f8:6b:6e:
         61:42:3e:d6:d8:3d:82:e7:cb:e5:49:fb:0b:d0:9b:0f:59:54:
         6a:77:31:15:11:7a:c5:0f:ed:77:e2:1d:a4:fd:7f:85:d0:7c:
         ac:c7:a6:ef:fb:70:ff:fb:b3:f6:5b:3c:18:c3:75:5f:8a:1d:
         49:59:55:40:0f:47:7a:42:b9:fd:a2:21:8b:bd:62:4c:9b:f4:
         48:0e:86:df:88:a1:5b:a3:93:04:a5:86:2e:73:e1:ca:ff:a7:
         7f:66:50:80:7c:37:dc:61:0d:4a:44:9f:70:91:34:c3:25:1a:
         96:8e:42:c8:2c:b4:b6:6c:c0:c6:2c:db:94:48:3a:8b:d4:db:
         db:39:b2:c8:a6:a4:3d:70:2d:2c:96:12:98:be:f6:d3:cd:d5:
         8e:b1:e8:34:9a:6a:92:aa:ad:13:c5:a8:5b:e0:85:b7:4d:12:
         a6:8c:54:fc:ef:ec:9a:2d:5d:bf:9e:9a:fe:af:0d:b8:26:d3:
         a1:3a:bf:39:39:4e:60:05:ce:3c:46:28:79:72:e5:d4:b2:14:
         1d:69:17:2d:35:05:2d:17:a1:fe:b1:94:46:e1:5c:1f:b0:1f:
         af:af:2c:83:c8:46:a8:41:be:d4:3b:75:92:a1:fd:66:30:32:
         a8:b8:ff:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:59 2026 by rpki-client