This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133332e302f32342d3234203d3e203535393931.roa
File:                     3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (raw, json)
Hash identifier:          XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=
Subject key identifier:   48:8D:7B:AB:61:02:94:78:4B:29:99:46:32:E1:EB:48:87:4F:BE:94
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       6F307BFD0F2ACD855FE1D27E9521607202EC888D
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133332e302f32342d3234203d3e203535393931.roa
Signing time:             Tue 20 Jan 2026 02:12:03 +0000
ROA not before:           Tue 20 Jan 2026 02:07:03 +0000
ROA not after:            Tue 19 Jan 2027 02:12:03 +0000
asID:                     55991
IP address blocks:        103.43.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:30:7b:fd:0f:2a:cd:85:5f:e1:d2:7e:95:21:60:72:02:ec:88:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Jan 20 02:07:03 2026 GMT
            Not After : Jan 19 02:12:03 2027 GMT
        Subject: CN=488D7BAB610294784B29994632E1EB48874FBE94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0a:12:05:91:9d:47:16:f1:31:32:44:09:c1:
                    20:c6:e3:46:69:68:ff:de:f1:52:52:4b:b4:db:18:
                    0f:d9:b9:c1:18:be:58:58:23:a3:d0:41:c5:ea:7d:
                    a1:8e:38:2f:26:8e:58:ad:be:89:a5:d4:d0:80:62:
                    20:72:08:83:a1:20:bd:c8:f2:0f:e1:88:67:7b:95:
                    f4:86:f8:77:49:5e:34:b4:7d:1b:19:dd:af:bf:62:
                    9e:aa:d3:bf:69:dc:f0:8e:f3:c8:9d:f1:0f:8c:ee:
                    bd:9b:8e:d8:aa:99:c8:8d:c7:06:d1:b5:e7:2d:bc:
                    ea:be:f4:7b:70:2d:26:27:e1:0e:07:17:4b:f1:bb:
                    91:ea:a4:95:0e:be:e8:b9:cd:0b:5e:d6:05:89:25:
                    b5:09:f1:7c:14:3d:20:82:cb:d2:35:5f:f6:67:81:
                    b1:47:3f:63:4d:e7:cf:6c:24:fb:5b:5d:2b:57:e1:
                    77:f7:23:ef:58:a1:ee:ad:7c:32:df:4a:bf:ac:44:
                    6b:80:a2:44:de:9f:fe:0d:4d:48:a5:e5:3b:fa:6c:
                    50:b5:32:e7:c1:c4:d6:d7:6c:55:1f:52:52:f6:88:
                    05:8d:2a:16:fe:54:bb:a2:c8:c6:57:29:55:b8:94:
                    20:14:24:a5:0c:41:d2:b0:f5:d0:76:01:d4:c7:b5:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8D:7B:AB:61:02:94:78:4B:29:99:46:32:E1:EB:48:87:4F:BE:94
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133332e302f32342d3234203d3e203535393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:d8:39:a8:12:46:63:22:0f:2a:36:97:ee:24:e8:90:fd:41:
         8c:ea:c2:b3:f9:d1:ea:35:de:e2:ff:6d:ea:86:c5:02:0c:29:
         8d:69:2b:f8:53:c3:87:a4:0d:c8:8a:04:5c:bc:6c:b3:72:8f:
         b4:98:b7:f3:ea:8d:93:ce:f6:8b:fb:38:e8:a7:d9:a1:5a:78:
         af:0f:3c:28:ee:47:37:36:97:64:98:d4:5e:a8:1f:57:0b:1b:
         5b:9c:11:d2:46:2d:7a:19:5e:46:01:ca:56:ef:63:29:54:07:
         4b:16:d3:c3:1e:25:89:f1:68:15:57:a3:8f:91:96:3d:dc:93:
         ea:8b:d7:f0:3f:a9:69:3f:84:07:93:c0:76:61:f4:33:73:5f:
         b8:25:18:32:59:4c:fa:21:c5:e8:3d:c2:06:75:29:9f:c3:ab:
         a6:44:51:3c:c3:ee:77:7e:df:ce:a4:92:1d:34:6f:96:b4:0e:
         e2:95:a2:ff:ed:27:dd:2c:ce:14:86:95:b1:9d:b1:29:f3:a3:
         c3:e1:3e:3b:fc:c8:70:14:49:77:1a:82:92:9d:e3:20:e0:08:
         68:32:41:9d:e5:e8:2d:5b:7f:62:7d:62:f4:72:f5:47:13:48:
         a7:e7:7e:71:5c:62:5b:1f:20:99:21:d7:49:fb:07:82:c9:85:
         80:97:1f:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:11 2026 by rpki-client