This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3130332e3135392e3134322e302f32332d3234203d3e20313337373138.roa
File:                     3130332e3135392e3134322e302f32332d3234203d3e20313337373138.roa (raw, json)
Hash identifier:          5emHD8bqo15k7N5+cWhdeGNDoeB/6z0zjeAE814SHGg=
Subject key identifier:   99:32:57:9E:AB:20:C6:6F:50:3B:3D:47:76:1B:68:A8:D0:6B:18:3B
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       04B81D5EC53D888A1EF44001E39D92531D95B1BC
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3130332e3135392e3134322e302f32332d3234203d3e20313337373138.roa
Signing time:             Tue 20 Jan 2026 02:09:42 +0000
ROA not before:           Tue 20 Jan 2026 02:04:42 +0000
ROA not after:            Tue 19 Jan 2027 02:09:42 +0000
asID:                     137718
IP address blocks:        103.159.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b8:1d:5e:c5:3d:88:8a:1e:f4:40:01:e3:9d:92:53:1d:95:b1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jan 20 02:04:42 2026 GMT
            Not After : Jan 19 02:09:42 2027 GMT
        Subject: CN=9932579EAB20C66F503B3D47761B68A8D06B183B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:25:ae:de:a0:05:62:e8:99:63:6d:12:1b:
                    c3:a4:35:93:5b:6e:f9:a5:7f:da:5c:9c:d0:a8:2d:
                    a0:2a:54:fc:e2:1f:f7:7a:b6:89:74:dc:59:26:85:
                    80:93:ab:fa:98:4a:7c:53:85:11:be:55:57:e0:74:
                    c1:35:d0:d1:05:56:36:1b:5a:2d:53:11:fd:2a:2e:
                    52:a7:c4:48:45:9f:bc:87:c4:02:c3:bc:7b:04:0b:
                    f7:33:9e:c3:e2:55:82:27:cd:f6:6e:b5:04:ed:dd:
                    2c:d1:9d:27:bc:f8:1f:e5:49:13:a1:91:d1:bb:ff:
                    e5:7d:8c:04:19:e5:96:dc:30:06:37:4e:6d:4b:97:
                    ad:ad:a0:3d:1f:95:ae:e0:9e:1c:0c:1d:f4:d1:05:
                    dd:c1:a0:0f:fc:bb:b1:b4:f2:3c:b8:72:38:c1:ce:
                    d4:35:20:40:52:0d:6f:b4:f6:8f:63:64:07:c5:cf:
                    8b:56:96:dd:93:24:0a:9d:2e:a1:9e:91:fc:bc:c6:
                    80:f1:01:40:83:11:e5:4a:c7:a1:83:66:10:4f:95:
                    74:02:48:28:df:97:29:01:49:2d:07:5c:b3:29:c6:
                    1d:7d:59:1b:bf:86:75:d3:98:58:e5:fc:9b:6c:78:
                    a5:bf:fb:51:57:d2:22:2d:49:74:9a:74:5f:0c:4f:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:32:57:9E:AB:20:C6:6F:50:3B:3D:47:76:1B:68:A8:D0:6B:18:3B
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3130332e3135392e3134322e302f32332d3234203d3e20313337373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:62:05:93:d1:07:76:34:9c:13:ff:7b:a3:e2:79:28:2d:81:
         55:cd:35:19:d3:39:19:df:e5:d7:4b:5e:15:31:38:d3:6e:e2:
         c8:db:54:3a:aa:52:bb:74:d3:62:f0:01:41:a4:f6:63:d7:40:
         7f:65:78:60:24:33:64:75:a4:63:e8:8b:4a:57:b4:49:e3:a6:
         de:21:ff:00:89:fe:93:7f:06:6c:b6:4b:83:2e:db:61:35:a3:
         56:29:fd:19:a2:c7:b5:01:2d:89:ba:7f:e4:2e:51:4c:cf:01:
         d3:b5:88:76:82:33:fc:ac:14:32:6b:a9:d6:c6:5e:3b:8b:92:
         fe:62:19:d0:c2:bb:95:cb:62:5d:95:2c:f0:72:c7:35:41:99:
         98:33:2f:c5:b0:0f:f0:7c:21:4a:08:62:31:65:07:45:6e:cc:
         13:8f:3d:21:c9:5d:9d:c7:52:7f:01:36:9d:bd:31:a9:8f:17:
         8d:2e:a1:54:9f:f5:d1:04:a2:3e:68:71:4e:b7:0e:bb:e3:d8:
         ef:98:11:4a:71:a2:53:9f:9d:0f:8e:8c:14:4c:0c:ce:cc:d3:
         ea:e5:12:fa:11:17:89:0d:9d:d4:86:d3:4d:f1:c3:7e:8d:00:
         5c:38:21:65:98:67:d9:32:6a:45:df:eb:77:fd:4b:15:4e:38:
         7d:41:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:39:40 2026 by rpki-client