This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e3231392e36342e302f32322d3232203d3e203133333335.roa
File:                     3130332e3231392e36342e302f32322d3232203d3e203133333335.roa (raw, json)
Hash identifier:          Vqr/7jqAG4qam75dZc42K+KH3yBWofvtQeZuXIqgEi0=
Subject key identifier:   AE:49:8B:1C:64:C8:C2:78:AE:4D:05:05:92:41:BB:31:8A:CC:CA:DE
Certificate issuer:       /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial:       1C6EA66CF5C63A523D0298933E33918D4963C980
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e3231392e36342e302f32322d3232203d3e203133333335.roa
Signing time:             Tue 20 Jan 2026 02:20:21 +0000
ROA not before:           Tue 20 Jan 2026 02:15:21 +0000
ROA not after:            Tue 19 Jan 2027 02:20:21 +0000
asID:                     13335
IP address blocks:        103.219.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6e:a6:6c:f5:c6:3a:52:3d:02:98:93:3e:33:91:8d:49:63:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
        Validity
            Not Before: Jan 20 02:15:21 2026 GMT
            Not After : Jan 19 02:20:21 2027 GMT
        Subject: CN=AE498B1C64C8C278AE4D05059241BB318ACCCADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:d1:8a:02:41:e7:b3:cf:9a:15:cd:c6:38:
                    88:ea:3b:43:bd:ec:5b:00:08:0a:86:ad:21:a3:d3:
                    1d:ab:80:17:ba:97:56:7e:ec:ac:91:71:1b:71:d3:
                    b3:c9:a3:55:41:cc:22:cb:a7:d4:ea:b8:47:c6:1e:
                    d8:44:47:ee:52:3a:1c:86:39:f3:ba:6c:14:f9:56:
                    21:5d:fd:b1:e2:e1:38:18:f4:4e:bf:73:9f:11:c9:
                    98:ef:a4:04:03:62:54:e2:1f:05:05:76:ca:d2:26:
                    92:96:0d:9e:30:7a:c2:5a:40:7c:eb:66:3d:f8:42:
                    ac:cc:be:31:6a:7a:37:c3:e7:d9:9e:14:7a:e7:8a:
                    b1:a2:bb:e2:9e:37:93:75:25:24:4c:e4:98:ad:38:
                    0d:2e:84:28:41:d2:d6:b9:b9:0b:89:8a:df:22:ee:
                    86:48:bf:57:46:b0:7f:8c:7a:db:eb:91:4c:92:91:
                    11:00:9e:83:a5:8b:6a:b2:db:f3:0a:18:50:ed:a5:
                    3c:b1:98:72:ab:dd:8a:e4:bb:62:cb:b3:14:39:4c:
                    d4:58:73:c3:74:f8:27:30:46:c1:2f:48:b4:94:72:
                    17:b6:3a:82:1a:2f:fa:15:64:0a:98:0e:d7:50:f9:
                    30:47:c7:a6:ad:8c:d6:e9:97:cc:d4:16:e1:c0:40:
                    a7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:49:8B:1C:64:C8:C2:78:AE:4D:05:05:92:41:BB:31:8A:CC:CA:DE
            X509v3 Authority Key Identifier:
                keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e3231392e36342e302f32322d3232203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:7d:17:52:63:82:2c:ff:c2:a5:81:a3:6c:4b:cb:cc:57:a9:
         ba:a1:5c:a7:5c:22:34:d3:d0:df:2c:fb:f5:a3:51:d3:77:82:
         3b:fb:43:85:95:c3:57:3e:31:63:5d:73:2d:88:bc:ce:6e:ff:
         af:1c:83:e3:84:14:a0:f5:ea:e4:b8:ed:c4:02:b6:37:db:23:
         83:0c:89:5a:1f:1c:4c:5c:ff:ff:b9:70:d3:3b:24:61:4f:b6:
         de:46:fa:eb:b8:9d:0a:53:13:62:7b:d5:1b:ca:8c:33:50:8e:
         f1:fd:78:b9:d5:fd:b0:81:35:00:7f:d9:80:41:e8:f3:da:ff:
         d2:1d:46:d9:f7:45:31:35:4f:13:00:0c:f7:a1:b7:31:2a:8a:
         c8:99:1c:09:1e:b2:23:1c:d8:4d:31:1b:ff:34:c5:38:6b:24:
         cc:27:c0:37:8b:0d:24:a5:19:a1:cc:8e:01:22:de:3d:03:ef:
         77:ba:8e:fd:c4:e6:d8:a1:9f:f3:14:66:70:87:be:f8:33:7a:
         1a:60:f7:13:05:89:e5:d7:62:a8:e6:e7:71:13:29:49:7f:61:
         23:94:7a:f3:d6:3a:2a:06:93:72:c7:54:27:1e:4f:fa:a4:1b:
         f5:b2:03:1b:31:46:3d:d3:64:d9:88:80:40:4e:fd:11:1e:61:
         33:57:cd:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:20:49 2026 by rpki-client