This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232392e302f32342d3234203d3e20323131333932.roa
File:                     3130332e37392e3232392e302f32342d3234203d3e20323131333932.roa (raw, json)
Hash identifier:          rsuWCgFTJM7kwDQugqS8iN58RPhA8LDLNc55i7Mxj8Q=
Subject key identifier:   BF:2D:A9:F7:80:16:2C:48:9E:64:3A:27:09:4E:8E:11:EA:8F:0E:70
Certificate issuer:       /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial:       68780BEABA47873CAE36002EBE86E15C7957B9AD
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232392e302f32342d3234203d3e20323131333932.roa
Signing time:             Tue 20 Jan 2026 02:20:20 +0000
ROA not before:           Tue 20 Jan 2026 02:15:20 +0000
ROA not after:            Tue 19 Jan 2027 02:20:20 +0000
asID:                     211392
IP address blocks:        103.79.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:78:0b:ea:ba:47:87:3c:ae:36:00:2e:be:86:e1:5c:79:57:b9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
        Validity
            Not Before: Jan 20 02:15:20 2026 GMT
            Not After : Jan 19 02:20:20 2027 GMT
        Subject: CN=BF2DA9F780162C489E643A27094E8E11EA8F0E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:66:78:5b:a2:ff:68:dc:c7:26:0e:2a:46:
                    1f:6b:c9:7e:49:aa:83:de:24:c3:84:57:3a:5a:7d:
                    e1:f6:b4:69:59:19:dc:1f:63:ec:60:43:09:37:d7:
                    ee:a4:dc:c3:7b:30:ed:67:ad:01:1f:96:b5:31:44:
                    d9:54:65:1a:28:1f:84:4b:9b:79:f0:16:c0:f2:b9:
                    bd:d0:4b:af:90:25:b6:56:f4:2b:14:ff:c8:9d:2c:
                    c7:21:5c:0c:2a:31:d9:e0:a7:b9:26:ce:9e:f4:cb:
                    7e:c3:09:ed:1f:19:fd:30:bd:72:03:5a:73:3b:a1:
                    32:9a:e3:bb:15:99:60:70:45:10:20:fd:37:59:0d:
                    cd:82:48:9f:d1:9e:18:18:2f:1c:0e:01:7a:9b:e1:
                    5b:f5:90:b5:d9:6c:a8:5d:a3:2d:16:a9:2b:a0:19:
                    14:11:3b:d7:61:3b:41:10:ef:7d:3a:ae:64:c6:fd:
                    3b:2c:8b:91:e6:3b:39:72:bc:e3:e6:16:39:37:37:
                    a6:7b:99:11:59:8b:57:e8:ea:cd:12:fb:a6:5a:7d:
                    3f:50:59:50:5b:37:88:e8:75:55:9b:33:92:bd:cb:
                    46:97:3c:d7:51:1b:f7:93:32:7c:4e:eb:92:83:1a:
                    f9:5a:ff:78:b3:3e:0e:5d:5b:32:ca:c1:19:c1:e7:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2D:A9:F7:80:16:2C:48:9E:64:3A:27:09:4E:8E:11:EA:8F:0E:70
            X509v3 Authority Key Identifier:
                keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/3130332e37392e3232392e302f32342d3234203d3e20323131333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:dd:c5:64:7d:66:b2:b1:e6:e2:d3:b7:96:0b:9a:d3:d6:e8:
         37:8d:9c:90:c2:18:8e:61:3a:1a:5b:00:92:00:06:6b:8c:0e:
         00:2c:ab:38:57:74:e6:b2:8a:16:d5:b3:82:e7:a1:98:41:5a:
         1d:89:db:37:82:20:ef:3c:19:42:75:5f:0d:10:b4:b8:b0:2d:
         a6:21:59:4d:84:0e:12:e5:14:70:a0:9a:47:5c:2a:05:0f:2d:
         e6:7f:5a:86:53:ed:22:b7:b0:42:ff:65:aa:7e:a8:a5:b4:bf:
         ab:12:2f:c1:87:d6:ec:ef:fe:98:1e:ec:56:70:27:7d:35:e1:
         72:39:25:fa:25:03:5b:d7:9d:06:58:32:7a:82:9b:bd:d4:42:
         1b:93:fe:bc:86:94:2f:92:5a:86:02:dc:ef:d9:3a:5a:8b:d4:
         5d:c9:5f:db:26:a5:33:9c:14:69:b1:5e:52:93:d5:35:f5:c2:
         77:5a:12:ed:d3:e8:50:e8:05:0f:a6:b2:3c:53:8a:06:3a:a7:
         59:a9:f3:0f:3e:ea:b0:98:18:ec:7f:bd:11:80:90:5b:4a:04:
         fc:ea:f3:32:d5:94:b7:a6:b8:53:38:34:d1:20:50:f9:5b:0b:
         fb:6a:90:f5:9a:de:df:70:ea:b2:68:5b:fd:b1:14:50:20:05:
         47:24:e1:ef
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUaHgL6rpHhzyuNgAuvobhXHlXua0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdE
NjlFNDc4QjAeFw0yNjAxMjAwMjE1MjBaFw0yNzAxMTkwMjIwMjBaMDMxMTAvBgNV
BAMTKEJGMkRBOUY3ODAxNjJDNDg5RTY0M0EyNzA5NEU4RTExRUE4RjBFNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PmZ4W6L/aNzHJg4qRh9ryX5J
qoPeJMOEVzpafeH2tGlZGdwfY+xgQwk31+6k3MN7MO1nrQEflrUxRNlUZRooH4RL
m3nwFsDyub3QS6+QJbZW9CsU/8idLMchXAwqMdngp7kmzp70y37DCe0fGf0wvXID
WnM7oTKa47sVmWBwRRAg/TdZDc2CSJ/RnhgYLxwOAXqb4Vv1kLXZbKhdoy0WqSug
GRQRO9dhO0EQ7306rmTG/Tssi5HmOzlyvOPmFjk3N6Z7mRFZi1fo6s0S+6ZafT9Q
WVBbN4jodVWbM5K9y0aXPNdRG/eTMnxO65KDGvla/3izPg5dWzLKwRnB5zVLAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUvy2p94AWLEieZDonCU6OEeqPDnAwHwYDVR0j
BBgwFoAUYyoBxPHVyZC/azY6Z4lMx9aeR4swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTQ4NTgyNS8wLzYzMkEwMUM0RjFENUM5OTBCRjZCMzYzQTY3ODk0
Q0M3RDY5RTQ3OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjMyQTAxQzRGMUQ1Qzk5MEJGNkIzNjNBNjc4OTRDQzdENjlFNDc4Qi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0ODU4MjUvMC8zMTMwMzMyZTM3
MzkyZTMyMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTMzMzkzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGdP5TANBgkqhkiG9w0BAQsFAAOCAQEAi93FZH1msrHm4tO3lgua
09boN42ckMIYjmE6GlsAkgAGa4wOACyrOFd05rKKFtWzguehmEFaHYnbN4Ig7zwZ
QnVfDRC0uLAtpiFZTYQOEuUUcKCaR1wqBQ8t5n9ahlPtIrewQv9lqn6opbS/qxIv
wYfW7O/+mB7sVnAnfTXhcjkl+iUDW9edBlgyeoKbvdRCG5P+vIaUL5JahgLc79k6
WovUXclf2yalM5wUabFeUpPVNfXCd1oS7dPoUOgFD6ayPFOKBjqnWanzDz7qsJgY
7H+9EYCQW0oE/OrzMtWUt6a4Uzg00SBQ+VsL+2qQ9Zre33Dqsmhb/bEUUCAFRyTh
7w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:10 2026 by rpki-client