This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32342d3234203d3e20313436383036.roa
File:                     3130332e37392e3232382e302f32342d3234203d3e20313436383036.roa (raw, json)
Hash identifier:          0D8Hi7pwMdtJy2i4BJt6CpP5QBDJpO7WlayP7E+kDJk=
Subject key identifier:   7E:9A:4E:6A:31:CF:63:E0:DC:AA:85:48:25:E5:34:AD:04:F0:09:52
Certificate issuer:       /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial:       3826F834A6D8035E8D7F00C2D5F0E09EDE885D76
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32342d3234203d3e20313436383036.roa
Signing time:             Tue 20 Jan 2026 02:20:21 +0000
ROA not before:           Tue 20 Jan 2026 02:15:21 +0000
ROA not after:            Tue 19 Jan 2027 02:20:21 +0000
asID:                     146806
IP address blocks:        103.79.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:26:f8:34:a6:d8:03:5e:8d:7f:00:c2:d5:f0:e0:9e:de:88:5d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
        Validity
            Not Before: Jan 20 02:15:21 2026 GMT
            Not After : Jan 19 02:20:21 2027 GMT
        Subject: CN=7E9A4E6A31CF63E0DCAA854825E534AD04F00952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2a:03:b7:21:07:d8:88:ce:02:35:94:d9:b0:
                    3d:9d:28:47:c6:3b:e9:5e:4d:a5:51:0a:91:b4:d5:
                    73:2f:3a:e2:8e:28:95:cd:da:33:d6:eb:ed:f7:53:
                    2c:bd:82:50:5b:fa:ec:72:02:80:c0:32:69:99:e3:
                    7c:59:cb:63:cc:ed:aa:c0:f5:b7:b3:5e:b4:b1:6e:
                    81:9c:44:1c:14:c8:67:6b:d9:35:0f:3f:c5:19:2e:
                    19:bc:47:32:52:0d:6a:85:51:f6:39:19:c1:7d:7c:
                    59:16:bc:25:87:b6:74:3e:7c:31:97:f7:94:3a:99:
                    c6:5b:f6:07:50:14:8f:6f:88:73:8c:04:60:cc:35:
                    46:a8:7a:b6:13:2d:c0:a6:d8:fc:5a:17:dd:9d:0f:
                    1a:5a:96:78:18:8d:dc:98:e5:1c:31:58:e4:f8:4a:
                    3d:1a:29:58:28:e8:ab:e0:c1:ae:4e:c1:d1:96:b1:
                    de:e3:40:69:a2:d7:f0:f4:a1:b0:38:e7:10:47:09:
                    0f:31:bc:84:85:0b:87:fa:bd:1a:ff:a1:38:1a:1e:
                    dd:ca:73:e1:0f:bc:23:0d:34:1c:c8:f5:d6:79:de:
                    c7:77:00:b4:57:a1:50:e4:50:1e:90:10:ec:60:d0:
                    83:8f:ab:d2:6b:a5:0f:0d:e2:9b:ee:98:c8:d1:5c:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9A:4E:6A:31:CF:63:E0:DC:AA:85:48:25:E5:34:AD:04:F0:09:52
            X509v3 Authority Key Identifier:
                keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32342d3234203d3e20313436383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:d2:14:85:b9:c7:ea:cb:d4:31:d4:d2:0d:fb:22:d3:8f:a0:
         ce:a4:44:a7:51:aa:6b:75:b0:e8:c5:55:c1:84:37:b9:51:f5:
         d0:96:bb:5f:02:7b:2a:38:07:7f:aa:c0:a4:5b:a9:7c:ab:2d:
         d3:36:39:b3:70:2b:d5:68:b6:60:e3:f5:f4:0f:33:fd:1b:80:
         92:9f:26:14:69:a5:27:00:32:29:8b:6f:3e:24:f1:66:03:24:
         67:11:bc:8e:1b:66:78:5e:e0:c2:f9:8f:87:b4:b8:27:05:97:
         f7:8e:7c:a4:85:7c:0e:10:b1:1e:fb:f2:53:f9:b3:e4:c6:34:
         1e:3e:8f:93:2c:24:38:b6:bc:8a:61:83:e7:ca:ff:e8:32:3b:
         ac:9e:ed:f1:f6:99:c7:03:ed:ac:2b:24:2a:3f:33:31:77:22:
         aa:95:d6:6e:bb:65:26:7c:97:45:22:e5:96:8a:c2:77:86:90:
         eb:94:87:d1:17:7c:fd:6d:f8:71:93:02:ac:ba:8d:81:fe:7b:
         16:df:6f:f0:b4:b4:9b:c1:5d:04:7b:5a:c4:77:ab:3b:cd:b0:
         b0:54:67:a0:d9:5f:ab:8c:a3:a2:ee:bf:d7:86:55:6e:f4:5c:
         4e:8d:47:20:97:df:72:5a:5b:16:61:35:67:50:36:a7:4d:cc:
         43:da:6a:5b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUOCb4NKbYA16NfwDC1fDgnt6IXXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE
NjlFNDc4QjAeFw0yNjAxMjAwMjE1MjFaFw0yNzAxMTkwMjIwMjFaMDMxMTAvBgNV
BAMTKDdFOUE0RTZBMzFDRjYzRTBEQ0FBODU0ODI1RTUzNEFEMDRGMDA5NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKgO3IQfYiM4CNZTZsD2dKEfG
O+leTaVRCpG01XMvOuKOKJXN2jPW6+33Uyy9glBb+uxyAoDAMmmZ43xZy2PM7arA
9bezXrSxboGcRBwUyGdr2TUPP8UZLhm8RzJSDWqFUfY5GcF9fFkWvCWHtnQ+fDGX
95Q6mcZb9gdQFI9viHOMBGDMNUaoerYTLcCm2PxaF92dDxpalngYjdyY5RwxWOT4
Sj0aKVgo6Kvgwa5OwdGWsd7jQGmi1/D0obA45xBHCQ8xvISFC4f6vRr/oTgaHt3K
c+EPvCMNNBzI9dZ53sd3ALRXoVDkUB6QEOxg0IOPq9JrpQ8N4pvumMjRXFiJAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUfppOajHPY+DcqoVIJeU0rQTwCVIwHwYDVR0j
BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0
Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0ODU4MjUvMC8zMTMwMzMyZTM3
MzkyZTMyMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzAzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGdP5DANBgkqhkiG9w0BAQsFAAOCAQEA0dIUhbnH6svUMdTSDfsi
04+gzqREp1Gqa3Ww6MVVwYQ3uVH10Ja7XwJ7KjgHf6rApFupfKst0zY5s3Ar1Wi2
YOP19A8z/RuAkp8mFGmlJwAyKYtvPiTxZgMkZxG8jhtmeF7gwvmPh7S4JwWX9458
pIV8DhCxHvvyU/mz5MY0Hj6PkywkOLa8imGD58r/6DI7rJ7t8faZxwPtrCskKj8z
MXciqpXWbrtlJnyXRSLllorCd4aQ65SH0Rd8/W34cZMCrLqNgf57Ft9v8LS0m8Fd
BHtaxHerO82wsFRnoNlfq4yjou6/14ZVbvRcTo1HIJffclpbFmE1Z1A2p03MQ9pq
Ww==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:58 2026 by rpki-client