This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32332d3233203d3e203133333335.roa
File:                     3130332e37392e3232382e302f32332d3233203d3e203133333335.roa (raw, json)
Hash identifier:          icPTuWnFdkxfGAESZWoKu8fJXdwoMelu+pn2DNwzqEM=
Subject key identifier:   C4:61:8E:FE:DA:E0:FF:D8:5A:34:3A:83:E3:1B:68:1C:7A:62:FD:4D
Certificate issuer:       /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial:       1EB2824399D10C4C07EC48346811F36DC9213D4F
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32332d3233203d3e203133333335.roa
Signing time:             Tue 20 Jan 2026 02:20:22 +0000
ROA not before:           Tue 20 Jan 2026 02:15:22 +0000
ROA not after:            Tue 19 Jan 2027 02:20:22 +0000
asID:                     13335
IP address blocks:        103.79.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b2:82:43:99:d1:0c:4c:07:ec:48:34:68:11:f3:6d:c9:21:3d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
        Validity
            Not Before: Jan 20 02:15:22 2026 GMT
            Not After : Jan 19 02:20:22 2027 GMT
        Subject: CN=C4618EFEDAE0FFD85A343A83E31B681C7A62FD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:bd:ee:75:02:7c:d0:e3:85:bb:31:1a:bf:
                    07:18:a6:0f:4f:e7:f0:9a:40:18:3a:14:57:76:ef:
                    90:22:fc:76:df:ba:4c:5d:98:b2:ed:9b:5a:6d:9a:
                    4e:b1:b5:9d:17:3c:10:95:44:6f:45:19:51:9c:aa:
                    cb:be:8d:1b:d7:7d:9b:16:39:76:0c:3c:cd:18:51:
                    13:95:16:76:09:d0:d2:93:64:26:64:a5:99:49:4d:
                    b4:c9:2e:04:7a:b6:1a:5c:00:8a:86:70:f9:61:4f:
                    21:57:3e:dc:76:c1:48:b6:81:2f:87:f7:a3:09:ec:
                    af:df:d9:f6:55:6b:8a:70:13:ad:b3:30:5c:91:10:
                    c2:73:5b:84:79:25:36:ac:a0:c0:d7:09:97:31:cc:
                    e0:0b:e1:07:fd:69:4f:92:01:a9:26:a2:f2:b2:02:
                    f5:1c:9a:76:4b:7f:e3:6a:0d:02:33:e6:cf:51:07:
                    d8:ab:b4:07:6b:51:20:a6:f5:ae:29:0c:a6:78:4a:
                    88:8e:fb:dc:e6:47:2f:14:7b:49:96:de:5c:ee:3c:
                    74:4d:d2:ff:4e:60:dd:7e:51:87:4b:48:21:a0:73:
                    e9:68:44:97:7b:e2:54:8f:17:f1:30:02:9f:34:e4:
                    47:83:00:a9:58:6d:fa:36:2b:cf:9a:55:8b:17:fa:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:61:8E:FE:DA:E0:FF:D8:5A:34:3A:83:E3:1B:68:1C:7A:62:FD:4D
            X509v3 Authority Key Identifier:
                keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32332d3233203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:39:7b:99:b8:e7:37:27:cb:e4:fe:74:4f:cd:8b:c9:55:17:
         ea:5f:d6:df:1e:36:73:61:48:00:34:96:ca:7f:8a:80:62:8e:
         4b:d1:07:6c:34:a3:ab:fe:37:ce:5e:fb:e3:06:92:21:9f:e9:
         85:fe:1f:ca:dc:1a:cd:b3:a9:83:2d:50:be:40:2e:fb:f5:f0:
         5e:93:c3:ca:c1:a5:d9:ad:0e:fb:71:3a:ab:1d:c0:70:54:86:
         7f:50:65:d3:fb:c7:cb:ac:6a:bd:5c:63:2c:3f:47:ea:db:74:
         a1:60:79:d1:70:3e:5e:43:7c:cf:4d:bf:40:5d:58:09:1a:fb:
         a3:5f:dd:e8:ba:0d:0b:04:0d:b9:b5:15:e5:2a:7e:7c:98:fb:
         f2:fd:51:20:81:49:da:db:fe:87:44:2f:b6:39:b6:e0:b0:04:
         ce:17:63:2c:c7:a5:c4:47:da:8e:58:65:db:93:7d:e4:85:23:
         e7:8c:d4:21:ae:ad:3c:bd:40:cd:62:fc:43:23:69:13:f5:9e:
         a6:77:1e:78:ff:ee:d3:3d:24:88:83:5b:78:87:11:c3:d7:79:
         ad:06:97:fb:36:93:25:49:c2:ed:6e:73:55:23:9d:cd:2d:2e:
         b7:16:33:e1:6e:8d:f9:24:2d:6c:37:23:67:e7:b9:3c:b0:cf:
         51:df:0d:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:46:04 2026 by rpki-client