This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32332d3233203d3e20343031313630.roa
File:                     3130332e37392e3232382e302f32332d3233203d3e20343031313630.roa (raw, json)
Hash identifier:          gKXWXqmzrPrr4+18k7z9bjKGsLAmMHTynuE1OPX37W8=
Subject key identifier:   5E:AB:04:49:F2:8A:49:D1:86:3D:07:B1:DE:A9:04:44:B2:6C:0A:18
Certificate issuer:       /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial:       7ABF73F3DAC8DAE1BF533FE0AD481585556F7A5C
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32332d3233203d3e20343031313630.roa
Signing time:             Tue 20 Jan 2026 02:20:20 +0000
ROA not before:           Tue 20 Jan 2026 02:15:20 +0000
ROA not after:            Tue 19 Jan 2027 02:20:20 +0000
asID:                     401160
IP address blocks:        103.79.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bf:73:f3:da:c8:da:e1:bf:53:3f:e0:ad:48:15:85:55:6f:7a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
        Validity
            Not Before: Jan 20 02:15:20 2026 GMT
            Not After : Jan 19 02:20:20 2027 GMT
        Subject: CN=5EAB0449F28A49D1863D07B1DEA90444B26C0A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:07:23:49:14:23:6a:5c:e0:e9:19:71:c0:64:
                    10:19:af:65:e9:bc:6d:c7:c6:d2:7b:d0:16:4c:31:
                    1d:4d:55:7b:25:f6:3f:99:49:34:10:98:74:73:e8:
                    52:fb:4c:c5:de:0d:70:35:e1:3d:c1:ee:81:ab:10:
                    f3:97:ac:ca:57:17:ba:73:d7:d4:87:56:a5:55:2c:
                    20:3b:66:c3:e1:0a:5d:1b:56:d3:b8:bd:f2:e1:f2:
                    56:72:ff:17:fc:5e:d2:11:4b:46:46:df:e4:c6:b6:
                    81:e4:62:ea:37:74:ce:ee:90:6f:c5:ad:aa:d6:af:
                    53:d1:60:7c:f8:e8:c3:3a:8e:64:1d:e3:a2:43:14:
                    23:14:93:fe:6f:38:06:bc:8f:86:e9:3d:f5:4b:85:
                    e5:9d:fd:fd:7c:a8:b6:39:51:17:d3:1a:5d:00:e8:
                    53:0c:23:37:98:df:e7:a2:c2:00:7a:63:3c:2e:eb:
                    59:11:d2:17:5e:45:5b:6e:a9:7f:1a:23:ae:f4:86:
                    d9:c1:66:7d:3e:ba:f7:bf:28:d9:dd:28:c2:fc:01:
                    a0:f0:6d:4a:52:ec:f9:ce:40:a9:0d:1d:de:bb:ea:
                    6c:75:4d:ee:0f:fc:e0:ff:16:30:84:8f:db:32:f9:
                    4f:3f:77:b0:9e:4f:12:21:50:c2:7d:0c:4d:39:31:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AB:04:49:F2:8A:49:D1:86:3D:07:B1:DE:A9:04:44:B2:6C:0A:18
            X509v3 Authority Key Identifier:
                keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32332d3233203d3e20343031313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:e4:70:d1:1c:dc:9b:8a:2e:70:2a:b4:b0:e9:84:a2:2b:5a:
         5e:f7:e8:42:72:e8:ef:eb:32:29:18:da:c8:48:d2:92:4d:1f:
         2e:3d:48:ab:4d:9a:8c:9f:55:65:e0:cc:33:23:3b:00:91:f6:
         82:68:03:b7:80:43:24:5d:bc:cf:6d:d0:d4:40:67:67:af:3b:
         12:4f:91:a0:6b:0a:0a:08:8e:7f:54:f9:90:e2:5b:97:f9:77:
         c6:c7:f9:5d:54:53:46:c8:ec:17:85:4a:e7:ac:b3:25:81:0d:
         77:42:d3:88:e9:65:69:0d:67:a8:8f:41:f7:1a:d9:6c:cf:00:
         32:3f:58:e3:27:08:15:46:3d:0a:88:bd:23:fa:7e:79:87:18:
         2f:bb:f9:bd:47:f7:ec:ee:47:e3:54:58:0b:5d:da:2e:2a:a3:
         f8:5f:72:ee:eb:ec:84:3c:37:b9:e4:3e:d5:07:39:3c:3d:a7:
         ab:22:3c:49:33:8d:17:92:fd:2f:96:1f:03:e5:79:57:6b:dc:
         df:3b:c0:82:8e:a8:d6:59:13:07:5d:24:5c:0f:f7:fa:c6:81:
         bb:f7:7b:64:46:80:20:88:f6:6a:97:02:40:48:de:3d:20:a1:
         6d:2f:c8:c4:00:f2:d6:d1:4c:3d:d2:7a:4a:54:e9:55:d0:5e:
         df:f0:eb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:53 2026 by rpki-client