This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133342e302f32342d3234203d3e203535393931.roa
File:                     3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (raw, json)
Hash identifier:          Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=
Subject key identifier:   AA:F5:7E:53:C3:26:E2:B6:7C:7E:E0:F0:53:A3:02:B3:5B:67:23:09
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       70DC096662E74D04525FFA240569826D1E969DBC
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133342e302f32342d3234203d3e203535393931.roa
Signing time:             Tue 20 Jan 2026 02:12:02 +0000
ROA not before:           Tue 20 Jan 2026 02:07:02 +0000
ROA not after:            Tue 19 Jan 2027 02:12:02 +0000
asID:                     55991
IP address blocks:        103.43.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:dc:09:66:62:e7:4d:04:52:5f:fa:24:05:69:82:6d:1e:96:9d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Jan 20 02:07:02 2026 GMT
            Not After : Jan 19 02:12:02 2027 GMT
        Subject: CN=AAF57E53C326E2B67C7EE0F053A302B35B672309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:ae:2a:12:fd:74:6e:33:7e:be:77:48:57:
                    02:74:47:d0:4f:fd:d5:8a:2e:a7:62:78:11:48:f0:
                    35:a9:82:38:66:cd:29:5c:f5:d8:96:1c:25:50:f8:
                    c6:86:4c:20:65:c9:c1:60:95:d2:34:a1:2e:fb:3e:
                    54:ed:f8:65:bc:da:75:3c:8f:ca:6b:7e:f1:ca:b5:
                    e4:32:e3:7f:dc:5f:56:4e:83:3f:70:d7:7e:a4:ac:
                    1c:16:ed:d4:31:83:87:07:e6:ba:66:c7:c9:ea:13:
                    12:bd:c7:2d:35:66:54:a9:e1:2d:a7:03:45:4a:41:
                    82:8f:9f:62:ec:bf:08:f2:15:a2:42:4d:4d:f2:39:
                    3c:fe:49:dc:b1:23:cd:82:37:af:fc:0b:bb:3d:a6:
                    e4:f9:8a:02:90:d3:93:47:6d:d7:78:39:4d:6d:6f:
                    39:36:e4:75:c5:69:c6:6d:97:b3:05:17:55:48:ac:
                    24:f0:fc:c3:55:f0:cf:46:2f:6e:eb:06:c4:d3:2d:
                    38:a3:41:f5:1a:86:bf:29:26:fa:6b:97:61:a2:0f:
                    db:c9:a1:a4:04:2f:66:54:be:39:1c:0f:b0:c4:55:
                    67:96:72:16:7b:b3:e4:cd:b0:23:de:90:ae:88:78:
                    e6:5e:6f:52:7d:2d:11:b4:ba:3a:12:13:c1:ff:f7:
                    67:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F5:7E:53:C3:26:E2:B6:7C:7E:E0:F0:53:A3:02:B3:5B:67:23:09
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e34332e3133342e302f32342d3234203d3e203535393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:6d:d2:44:1d:09:05:d4:1c:ca:c8:3e:24:07:e9:64:c2:b7:
         ec:e8:8c:d3:dd:35:02:64:49:50:26:d9:07:dd:dd:44:e5:79:
         b9:9a:3d:72:b4:ca:3c:78:88:dd:3e:12:6e:7e:2f:19:e3:a8:
         3b:2b:2f:e2:b7:cb:be:4a:88:54:0b:fe:ea:fe:c4:dd:81:05:
         77:13:82:fc:e5:3f:8a:61:62:a0:d0:1f:79:3b:32:e2:d9:3f:
         7e:06:54:a8:25:df:21:9a:e0:1e:99:16:78:c2:8b:43:ec:5b:
         a3:b5:d0:49:d5:6c:93:ec:69:7f:f1:e4:bd:63:06:8c:6e:80:
         bd:5b:d9:63:b4:16:26:6a:4a:1b:f1:d9:be:80:ed:9e:24:36:
         29:53:00:dc:1a:d7:fc:ae:3c:6d:17:1f:a3:df:fb:ab:73:f5:
         35:01:57:7a:5d:73:4a:fe:72:66:05:a4:fd:61:15:10:b5:2f:
         64:04:8d:bc:f9:db:8b:1c:0d:5a:4d:6f:73:b8:ca:be:c7:ea:
         52:9f:b0:3b:bb:ff:28:6b:6e:dd:61:73:49:a8:2e:3c:d5:36:
         6c:50:a0:2d:26:54:6c:74:49:a8:f3:5c:c0:dc:85:d1:4b:c3:
         bc:52:49:5c:49:2f:12:52:83:4a:04:8e:22:c5:b1:65:70:7a:
         21:c6:53:b7
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUcNwJZmLnTQRSX/okBWmCbR6WnbwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC
QTcwMTlCQjAeFw0yNjAxMjAwMjA3MDJaFw0yNzAxMTkwMjEyMDJaMDMxMTAvBgNV
BAMTKEFBRjU3RTUzQzMyNkUyQjY3QzdFRTBGMDUzQTMwMkIzNUI2NzIzMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI564qEv10bjN+vndIVwJ0R9BP
/dWKLqdieBFI8DWpgjhmzSlc9diWHCVQ+MaGTCBlycFgldI0oS77PlTt+GW82nU8
j8prfvHKteQy43/cX1ZOgz9w136krBwW7dQxg4cH5rpmx8nqExK9xy01ZlSp4S2n
A0VKQYKPn2LsvwjyFaJCTU3yOTz+SdyxI82CN6/8C7s9puT5igKQ05NHbdd4OU1t
bzk25HXFacZtl7MFF1VIrCTw/MNV8M9GL27rBsTTLTijQfUahr8pJvprl2GiD9vJ
oaQEL2ZUvjkcD7DEVWeWchZ7s+TNsCPekK6IeOZeb1J9LRG0ujoSE8H/92dnAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUqvV+U8Mm4rZ8fuDwU6MCs1tnIwkwHwYDVR0j
BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD
QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTM4OTI2NTI4OTIxNy8wLzMxMzAzMzJlMzQz
MzJlMzEzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGcrhjANBgkqhkiG9w0BAQsFAAOCAQEANG3SRB0JBdQcysg+JAfpZMK3
7OiM0901AmRJUCbZB93dROV5uZo9crTKPHiI3T4Sbn4vGeOoOysv4rfLvkqIVAv+
6v7E3YEFdxOC/OU/imFioNAfeTsy4tk/fgZUqCXfIZrgHpkWeMKLQ+xbo7XQSdVs
k+xpf/HkvWMGjG6AvVvZY7QWJmpKG/HZvoDtniQ2KVMA3BrX/K48bRcfo9/7q3P1
NQFXel1zSv5yZgWk/WEVELUvZASNvPnbixwNWk1vc7jKvsfqUp+wO7v/KGtu3WFz
SaguPNU2bFCgLSZUbHRJqPNcwNyF0UvDvFJJXEkvElKDSgSOIsWxZXB6IcZTtw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:37 2026 by rpki-client