This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32342d3234203d3e20323131333932.roa
File:                     3130332e37392e3232382e302f32342d3234203d3e20323131333932.roa (raw, json)
Hash identifier:          IKDTZ6kdZDVTYNXgl1yPs6HFhzP/yGvI0ZaGZbH9suM=
Subject key identifier:   50:5A:1F:CC:0C:FF:10:03:07:30:88:C3:1C:3C:7B:72:01:9F:D3:59
Certificate issuer:       /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial:       49CC79908C540F6A5307A3CF8CB107ECCF463F90
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32342d3234203d3e20323131333932.roa
Signing time:             Tue 20 Jan 2026 02:20:21 +0000
ROA not before:           Tue 20 Jan 2026 02:15:21 +0000
ROA not after:            Tue 19 Jan 2027 02:20:21 +0000
asID:                     211392
IP address blocks:        103.79.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cc:79:90:8c:54:0f:6a:53:07:a3:cf:8c:b1:07:ec:cf:46:3f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
        Validity
            Not Before: Jan 20 02:15:21 2026 GMT
            Not After : Jan 19 02:20:21 2027 GMT
        Subject: CN=505A1FCC0CFF1003073088C31C3C7B72019FD359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:ba:58:6e:34:20:00:ab:b8:19:db:df:9a:
                    cb:da:85:9c:9a:de:da:e9:b9:77:7c:a1:53:7d:d3:
                    00:84:9a:0c:70:7b:63:a6:46:26:f1:59:df:dc:85:
                    b9:a4:96:6f:99:30:37:01:9e:0e:01:1d:96:47:0f:
                    2d:03:d9:0c:e4:92:ec:ac:32:62:b9:20:d8:ba:e5:
                    16:57:b7:9c:29:eb:cd:d5:d3:5f:a1:0c:81:7a:f3:
                    ef:d9:6a:b0:57:66:99:08:b3:a8:61:5d:55:61:f3:
                    30:39:06:e3:52:a5:11:69:09:42:26:e9:23:4f:ca:
                    47:61:19:a6:a6:2f:f1:48:35:f1:1a:e3:84:a7:da:
                    57:1e:04:08:dd:94:93:06:ee:1f:5a:12:a4:3d:33:
                    b3:0d:85:83:42:b2:84:68:8d:9f:e4:8a:02:8d:33:
                    1b:12:6d:a2:37:a0:65:ac:1e:6b:09:f2:3b:00:aa:
                    af:7b:65:68:91:23:4d:a7:a5:ab:e6:89:af:f0:f4:
                    52:61:77:d2:e3:36:ee:3d:ed:18:52:1e:92:f4:a1:
                    c5:b6:0b:50:02:c8:0d:25:fe:22:3b:36:5f:81:6d:
                    ce:ac:2d:25:44:b7:d7:3f:56:67:c8:93:88:9d:21:
                    7c:f8:19:e6:a2:81:b0:1d:9f:74:96:17:c9:37:b9:
                    cd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5A:1F:CC:0C:FF:10:03:07:30:88:C3:1C:3C:7B:72:01:9F:D3:59
            X509v3 Authority Key Identifier:
                keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232382e302f32342d3234203d3e20323131333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:91:f0:52:46:80:d1:3e:3b:33:ef:0b:b0:3b:22:36:40:53:
         40:88:6d:83:0c:1f:6e:49:a4:50:73:2b:04:40:63:4d:f5:d8:
         90:9e:67:f8:2c:a7:1c:ce:b0:be:33:6e:24:46:24:b8:2b:7b:
         53:80:db:45:77:06:48:58:b4:92:6a:6d:a8:72:e9:a6:8e:99:
         f7:ab:76:54:0f:d4:95:0b:98:62:05:e0:99:89:f2:39:34:46:
         d6:71:06:c6:1b:b9:6a:3e:d7:ab:a7:ec:f5:ae:85:ab:02:62:
         6e:2e:dd:a7:39:fb:a1:0d:ac:f2:47:51:b9:6d:45:6d:8c:d4:
         23:5f:17:20:b0:26:e2:6f:10:e9:32:92:bf:25:29:d4:d2:63:
         4a:39:d8:0f:cc:ff:19:19:dd:f8:94:9a:c8:fd:f8:aa:9d:41:
         fe:5a:0f:ec:be:47:1f:68:0f:0e:55:08:ef:e5:c4:68:06:c6:
         03:2f:88:68:c4:eb:85:46:76:83:66:95:19:77:31:1c:5f:05:
         c8:e4:00:e4:4d:c0:24:26:73:03:10:b1:0d:8b:c5:d6:45:12:
         60:4d:09:03:1d:c7:a1:aa:90:13:c6:64:b4:80:06:85:d0:cf:
         c8:86:0d:d6:98:4c:bb:34:bc:8c:58:91:f0:a3:49:ea:92:6f:
         dc:57:63:0d
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUScx5kIxUD2pTB6PPjLEH7M9GP5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE
NjlFNDc4QjAeFw0yNjAxMjAwMjE1MjFaFw0yNzAxMTkwMjIwMjFaMDMxMTAvBgNV
BAMTKDUwNUExRkNDMENGRjEwMDMwNzMwODhDMzFDM0M3QjcyMDE5RkQzNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2o7pYbjQgAKu4GdvfmsvahZya
3trpuXd8oVN90wCEmgxwe2OmRibxWd/chbmklm+ZMDcBng4BHZZHDy0D2Qzkkuys
MmK5INi65RZXt5wp683V01+hDIF68+/ZarBXZpkIs6hhXVVh8zA5BuNSpRFpCUIm
6SNPykdhGaamL/FINfEa44Sn2lceBAjdlJMG7h9aEqQ9M7MNhYNCsoRojZ/kigKN
MxsSbaI3oGWsHmsJ8jsAqq97ZWiRI02npavmia/w9FJhd9LjNu497RhSHpL0ocW2
C1ACyA0l/iI7Nl+Bbc6sLSVEt9c/VmfIk4idIXz4GeaigbAdn3SWF8k3uc01AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUUFofzAz/EAMHMIjDHDx7cgGf01kwHwYDVR0j
BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0
Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0ODU4MjUvMC8zMTMwMzMyZTM3
MzkyZTMyMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTMzMzkzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGdP5DANBgkqhkiG9w0BAQsFAAOCAQEAWJHwUkaA0T47M+8LsDsi
NkBTQIhtgwwfbkmkUHMrBEBjTfXYkJ5n+CynHM6wvjNuJEYkuCt7U4DbRXcGSFi0
kmptqHLppo6Z96t2VA/UlQuYYgXgmYnyOTRG1nEGxhu5aj7Xq6fs9a6FqwJibi7d
pzn7oQ2s8kdRuW1FbYzUI18XILAm4m8Q6TKSvyUp1NJjSjnYD8z/GRnd+JSayP34
qp1B/loP7L5HH2gPDlUI7+XEaAbGAy+IaMTrhUZ2g2aVGXcxHF8FyOQA5E3AJCZz
AxCxDYvF1kUSYE0JAx3HoaqQE8ZktIAGhdDPyIYN1phMuzS8jFiR8KNJ6pJv3Fdj
DQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:10 2026 by rpki-client