This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e3231392e36342e302f32322d3232203d3e20323039323432.roa
File:                     3130332e3231392e36342e302f32322d3232203d3e20323039323432.roa (raw, json)
Hash identifier:          N9Tc/2OS8IhiGhYYyYnHtYWE9HmtpOkkoty46x/owIc=
Subject key identifier:   8D:A3:9B:7F:79:5F:CB:35:32:26:83:DB:1A:32:4A:4D:35:98:D1:12
Certificate issuer:       /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial:       7DAB7B2B8ABE31414F04C32084EF77AFFC3AE9D2
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e3231392e36342e302f32322d3232203d3e20323039323432.roa
Signing time:             Tue 20 Jan 2026 02:20:22 +0000
ROA not before:           Tue 20 Jan 2026 02:15:22 +0000
ROA not after:            Tue 19 Jan 2027 02:20:22 +0000
asID:                     209242
IP address blocks:        103.219.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ab:7b:2b:8a:be:31:41:4f:04:c3:20:84:ef:77:af:fc:3a:e9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
        Validity
            Not Before: Jan 20 02:15:22 2026 GMT
            Not After : Jan 19 02:20:22 2027 GMT
        Subject: CN=8DA39B7F795FCB35322683DB1A324A4D3598D112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:9c:12:0e:96:50:3e:c2:21:3d:28:16:47:
                    27:9b:fd:de:68:c8:41:d6:0b:65:88:fe:69:eb:df:
                    2b:22:5a:58:d8:9e:72:3c:04:86:ac:2e:66:ff:d5:
                    84:b6:2e:ba:2c:cd:b6:b4:ad:c4:21:3d:6c:5c:02:
                    fe:52:3f:c7:63:88:10:17:65:5d:e7:62:10:dd:e8:
                    52:22:6b:3b:21:f3:b8:c3:c2:0a:af:83:d5:b8:94:
                    f9:37:45:11:7a:dd:34:8d:85:20:21:74:c8:39:6a:
                    c1:ba:d2:9e:e4:27:cf:ab:eb:ee:bf:89:72:c1:67:
                    48:bd:fc:8f:34:96:e9:93:12:c8:8f:0b:86:5c:b1:
                    20:19:b8:80:83:07:29:4c:8d:e1:98:f2:ae:22:79:
                    37:e5:65:8c:52:59:0e:25:bd:97:e3:cd:22:30:b8:
                    0f:23:ae:82:44:f0:c6:a4:50:27:04:5d:c2:46:cc:
                    82:be:54:e7:c5:27:70:4e:b6:26:65:6b:7f:d8:f6:
                    21:4c:fc:36:2f:89:f3:74:8a:85:8b:83:2a:8d:8e:
                    21:90:a1:cf:d8:ff:17:12:03:a7:bc:df:2d:ba:1a:
                    25:32:6c:2d:e4:87:60:8a:5e:44:db:68:21:d9:5b:
                    c8:20:ad:2d:f5:9c:41:2e:4a:1a:0f:0a:4f:c1:58:
                    7a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A3:9B:7F:79:5F:CB:35:32:26:83:DB:1A:32:4A:4D:35:98:D1:12
            X509v3 Authority Key Identifier:
                keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e3231392e36342e302f32322d3232203d3e20323039323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:b8:d4:97:6e:b1:45:fa:b3:93:cb:cb:bc:89:d6:5a:8e:e9:
         8f:b1:e2:b7:42:dd:3d:84:a8:37:2e:35:0a:68:9e:93:14:d5:
         46:ac:b4:c3:e9:1d:e1:67:4f:a7:e7:f0:e3:49:58:d8:40:cc:
         56:63:68:00:2c:25:26:b6:74:6b:a3:ed:86:ed:e5:79:00:c0:
         a2:6c:fa:20:70:ac:46:52:eb:14:67:15:1d:7e:1c:6e:f3:54:
         bf:02:74:39:01:1b:aa:c9:1a:86:ed:6e:6a:04:e3:bf:41:c3:
         1f:6c:b6:4e:d7:a2:9e:36:1f:99:2f:20:9f:86:28:69:4f:c6:
         75:fd:59:86:d2:3c:f0:45:f6:d2:eb:48:a2:74:8e:a6:60:74:
         05:17:5d:c6:39:45:86:bf:d2:e0:35:4e:ce:1c:2b:48:92:4e:
         33:b8:6b:ca:b8:b2:41:63:19:14:73:d3:56:ee:43:7b:2a:ce:
         9a:18:8a:bb:a0:9f:da:65:a5:8c:09:f8:aa:ef:18:fb:99:12:
         6c:bb:7d:fd:83:f1:48:fa:4a:dd:12:4d:20:bc:cf:bb:ba:e2:
         69:c4:60:33:23:b5:ad:f3:47:01:64:e6:a7:db:4f:f9:b2:94:
         2b:b1:e6:24:22:fb:10:ba:00:f0:9f:d3:76:be:00:7b:25:a2:
         49:70:b7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:11:47 2026 by rpki-client