This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e37342e38302e302f32322d3234203d3e20313531323935.roa
File:                     3130332e37342e38302e302f32322d3234203d3e20313531323935.roa (raw, json)
Hash identifier:          hR5faD6uwaAATrG/KGVQ2IXYjvRAKfoMA9T9lydSpTg=
Subject key identifier:   89:BA:62:BE:C8:0A:0A:8B:47:23:D8:10:A2:2F:99:3D:95:C3:77:F0
Certificate issuer:       /CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Certificate serial:       337D988ACB281D0BCF54BF2CADF5B07C57EE5BAB
Authority key identifier: EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e37342e38302e302f32322d3234203d3e20313531323935.roa
Signing time:             Tue 20 Jan 2026 02:23:50 +0000
ROA not before:           Tue 20 Jan 2026 02:18:50 +0000
ROA not after:            Tue 19 Jan 2027 02:23:50 +0000
asID:                     151295
IP address blocks:        103.74.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7d:98:8a:cb:28:1d:0b:cf:54:bf:2c:ad:f5:b0:7c:57:ee:5b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
        Validity
            Not Before: Jan 20 02:18:50 2026 GMT
            Not After : Jan 19 02:23:50 2027 GMT
        Subject: CN=89BA62BEC80A0A8B4723D810A22F993D95C377F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:06:94:49:76:b4:52:d8:5a:75:42:e8:68:
                    9c:74:52:30:2a:c1:2a:83:45:47:3e:6a:b0:bb:2c:
                    c2:37:0d:55:45:55:d0:c1:d3:df:16:7b:9f:b5:e6:
                    c1:40:e3:23:ac:46:e7:11:50:0c:5d:c8:94:c6:33:
                    6d:e5:77:01:37:a5:2d:86:5d:3f:84:2d:2b:47:54:
                    f0:8c:9f:13:c2:ac:e2:bf:44:c8:ff:99:bd:8a:e9:
                    d6:d5:0d:44:09:0a:e5:32:e0:91:14:2a:3a:32:ff:
                    18:c7:7f:2c:c3:38:84:a3:66:b8:34:7a:0e:bb:56:
                    85:7a:e7:bc:e0:7f:71:11:cc:ab:c5:a8:e3:de:82:
                    01:26:91:79:42:fb:86:a2:7a:46:c3:55:e6:14:9e:
                    af:29:35:2b:7c:3f:17:7a:79:c1:f1:45:fc:64:ce:
                    80:2f:c4:3f:8c:97:54:81:67:7b:c4:84:3a:49:39:
                    9a:17:e5:36:f1:b0:84:69:3b:a8:1a:75:ec:e1:1f:
                    ea:c4:72:15:68:e6:f4:34:ff:f1:1c:f1:3d:b5:0a:
                    31:76:c0:fe:f4:91:65:49:36:52:3b:99:b8:7c:6a:
                    0b:1a:72:9e:6a:99:79:fc:07:23:6c:60:30:0e:b8:
                    91:60:14:34:47:55:1a:a8:bb:73:2e:11:56:e9:f8:
                    e4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BA:62:BE:C8:0A:0A:8B:47:23:D8:10:A2:2F:99:3D:95:C3:77:F0
            X509v3 Authority Key Identifier:
                keyid:EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e37342e38302e302f32322d3234203d3e20313531323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dc:60:91:d4:5f:3f:6c:46:75:78:3a:a5:57:66:8b:19:08:20:
         55:3e:5f:e6:36:3e:47:65:2d:52:c6:84:cb:be:32:b4:c3:be:
         40:53:c9:20:6d:84:99:74:86:44:23:b8:17:8a:7c:0a:d8:81:
         a6:42:2f:4c:90:fd:ee:79:2b:f8:c0:1b:f4:6e:3e:c0:bb:02:
         2d:58:54:33:28:cc:b2:e6:57:d5:95:95:12:d1:c9:cc:0f:40:
         05:28:57:7c:b2:3a:f6:ad:1d:f6:42:49:6d:02:3d:d9:40:73:
         c3:a5:15:24:48:83:a5:b1:b3:9f:6e:63:21:6d:af:e7:de:c0:
         5a:80:be:9b:6e:b9:a6:83:26:9f:1d:16:41:df:46:64:7a:49:
         81:36:ca:2b:10:c2:ea:1d:94:ea:96:5b:5c:66:09:c3:d3:16:
         4c:03:04:2a:62:15:28:d7:ba:5a:37:fa:f5:e5:ef:8f:2f:4d:
         92:7b:d5:f5:dc:7c:d1:cd:c5:80:b6:fa:92:93:49:15:b2:10:
         4b:34:78:7f:99:5d:58:88:c8:f0:dc:1e:f2:aa:9a:98:a9:e4:
         60:0f:3c:17:db:56:21:07:8f:83:9c:07:f2:54:94:fb:56:fe:
         e6:41:86:19:cf:72:67:2e:ec:fa:3a:8f:bd:46:0d:8e:f2:c5:
         bf:62:c2:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:22:00 2026 by rpki-client