This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e3231362e3133362e302f32322d3234203d3e20313531323935.roa
File:                     3130332e3231362e3133362e302f32322d3234203d3e20313531323935.roa (raw, json)
Hash identifier:          7fhteo35fbuBwR2kMchJmjW4t1i28UKSGfGinCjfnNk=
Subject key identifier:   C2:95:76:21:65:39:03:61:CA:AE:BC:5B:40:92:30:B9:F8:7C:A3:B2
Certificate issuer:       /CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Certificate serial:       624DAD61192A44653B8A057AAD85C88C46A5EF8E
Authority key identifier: EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e3231362e3133362e302f32322d3234203d3e20313531323935.roa
Signing time:             Tue 20 Jan 2026 02:23:50 +0000
ROA not before:           Tue 20 Jan 2026 02:18:50 +0000
ROA not after:            Tue 19 Jan 2027 02:23:50 +0000
asID:                     151295
IP address blocks:        103.216.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4d:ad:61:19:2a:44:65:3b:8a:05:7a:ad:85:c8:8c:46:a5:ef:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
        Validity
            Not Before: Jan 20 02:18:50 2026 GMT
            Not After : Jan 19 02:23:50 2027 GMT
        Subject: CN=C295762165390361CAAEBC5B409230B9F87CA3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:60:82:36:16:4d:e5:12:ea:aa:16:5e:91:
                    56:74:f9:99:ad:67:24:92:64:0f:03:ee:4d:6a:52:
                    1d:e3:ff:60:10:ac:be:9b:d7:a7:fa:e7:08:d1:61:
                    a6:00:50:8b:77:07:35:6d:46:c9:c5:c3:cc:15:aa:
                    c1:6c:28:7a:04:52:3f:e7:87:b0:07:18:21:b8:71:
                    ce:05:8a:20:98:72:94:55:de:66:4d:0a:7e:f1:b8:
                    44:32:67:67:2c:88:70:aa:92:6d:d3:b7:0e:43:eb:
                    52:f5:b9:4a:b5:9c:78:d8:17:7a:e8:e1:03:ba:ec:
                    49:ad:46:5a:6d:dc:47:fa:ae:4d:a9:8a:ac:3a:e0:
                    2d:c6:6a:98:8d:3b:38:e9:31:6c:94:32:63:86:1d:
                    95:15:2a:e7:ad:94:95:4f:b2:1e:04:a1:41:48:f0:
                    d1:92:42:d6:0c:9b:e0:b5:7a:92:d7:7f:27:a2:d1:
                    15:58:03:bc:89:8a:6f:89:73:4b:3b:54:3b:f4:57:
                    9d:35:39:7d:69:c2:13:cf:a1:60:be:bf:b9:6c:f8:
                    38:f0:04:ba:a7:6f:ef:22:aa:e5:0d:03:94:4f:8a:
                    08:8a:2e:ec:85:11:3d:c1:e9:ad:a0:09:06:65:2a:
                    7f:05:36:77:25:07:a7:35:40:35:08:7c:be:23:6c:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:95:76:21:65:39:03:61:CA:AE:BC:5B:40:92:30:B9:F8:7C:A3:B2
            X509v3 Authority Key Identifier:
                keyid:EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e3231362e3133362e302f32322d3234203d3e20313531323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:d0:6b:17:78:34:aa:f5:fd:1a:d4:aa:c0:c9:cb:4c:71:61:
         68:f3:96:ad:de:10:b3:fa:6b:c2:f4:38:f8:bd:0c:54:94:de:
         93:58:1a:a8:a2:86:e8:ce:46:02:81:54:16:f5:0a:78:00:cb:
         7c:db:fb:0a:4b:a9:9c:94:f6:c7:ad:cb:b3:5b:8e:fb:f4:9f:
         0f:e4:9d:d9:e8:b6:4f:e6:af:d5:7f:79:60:30:7b:1d:3f:ee:
         21:4d:a8:52:44:d6:82:0c:e1:79:95:69:4e:b2:23:df:27:4a:
         13:6c:eb:3d:b5:3d:91:6f:ee:01:68:7c:41:17:41:b7:26:2d:
         6e:40:98:ef:a1:07:fc:6e:ae:ec:17:50:8f:c0:5e:5f:87:b9:
         dd:23:7c:c5:9f:c5:2d:f8:1c:cb:c8:d1:12:96:c2:c5:92:8c:
         6b:2b:a1:ca:85:fd:ce:b5:21:c8:86:3e:59:2f:5d:70:ab:4c:
         02:76:98:b4:83:fe:7c:34:cb:19:64:cd:3a:58:3e:ac:2a:86:
         0e:f3:07:5c:80:42:76:e9:76:29:eb:e8:5d:42:a6:3d:cf:77:
         6f:69:e1:50:9e:44:7e:c5:1b:7c:3d:4c:4d:9e:e5:39:1d:8e:
         74:7b:fc:36:88:fd:34:cd:c8:bf:8a:2d:50:f9:b1:54:cd:bf:
         49:ff:b4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:33:37 2026 by rpki-client