This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e35362e302f32312d3234203d3e2034383131.roa
File:                     31342e3130332e35362e302f32312d3234203d3e2034383131.roa (raw, json)
Hash identifier:          QV+s/WZHv04nFbuRVq7XxLTuVg5o07r6D/EJUk/gpSM=
Subject key identifier:   39:AC:E2:78:DF:8B:FF:8A:49:85:DE:D4:9A:3B:28:B5:E0:55:C4:92
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       4642A6CE2E9BC45DD50E34B434F30ACF6D7F5064
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e35362e302f32312d3234203d3e2034383131.roa
Signing time:             Tue 20 Jan 2026 02:09:44 +0000
ROA not before:           Tue 20 Jan 2026 02:04:44 +0000
ROA not after:            Tue 19 Jan 2027 02:09:44 +0000
asID:                     4811
IP address blocks:        14.103.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:42:a6:ce:2e:9b:c4:5d:d5:0e:34:b4:34:f3:0a:cf:6d:7f:50:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jan 20 02:04:44 2026 GMT
            Not After : Jan 19 02:09:44 2027 GMT
        Subject: CN=39ACE278DF8BFF8A4985DED49A3B28B5E055C492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:81:d9:b6:54:d4:9a:b2:1d:f7:b3:d6:d3:
                    73:c9:37:4f:97:97:4b:14:d0:a9:d7:82:d4:ed:f9:
                    04:10:52:02:6e:52:7f:e9:9e:f7:a5:5a:5a:91:f2:
                    c2:37:1a:1d:a5:21:f9:af:57:d6:21:29:54:57:f3:
                    da:0c:b4:5a:62:c3:0e:1a:9d:cf:cd:20:4a:cf:5f:
                    30:61:1d:28:84:3b:cc:c9:96:d9:52:41:b8:d8:8d:
                    5c:50:fe:eb:45:e1:76:2c:57:8e:65:0c:c2:09:1c:
                    79:d0:de:cd:0b:58:39:63:cf:d0:f4:20:18:ad:a8:
                    a5:96:e5:ee:b5:c8:67:b0:45:3e:43:b9:d2:88:ba:
                    d4:f7:7e:7b:c4:e0:9b:80:a6:db:2e:bf:2e:e6:f8:
                    de:dc:8b:e4:93:53:d5:94:fb:48:6c:30:10:12:bc:
                    a7:a8:dc:ff:9b:e7:61:69:2e:37:1f:25:74:71:e1:
                    b5:4f:e5:61:af:b5:eb:ab:7c:43:a1:1e:e3:12:4e:
                    68:97:66:0a:35:d1:0e:3a:1f:dd:5a:16:71:b4:47:
                    72:b0:a0:7a:be:53:46:86:8c:08:c7:87:d6:04:8a:
                    1f:de:53:7d:e0:23:94:8a:18:89:42:15:a0:ca:59:
                    02:5e:50:2f:4d:d7:bb:05:80:94:08:a9:93:4a:94:
                    36:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AC:E2:78:DF:8B:FF:8A:49:85:DE:D4:9A:3B:28:B5:E0:55:C4:92
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e35362e302f32312d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.103.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:c0:ff:ff:5d:11:b6:6c:f0:ea:39:78:7e:40:4f:6d:56:
         e8:ba:e1:38:77:4d:88:bc:22:40:98:68:42:bd:8c:c9:51:86:
         bc:db:84:5e:d2:ff:25:01:89:9e:07:40:44:5e:22:91:a0:ae:
         1a:b3:bf:b7:a3:1a:a1:73:a5:6e:62:91:19:06:97:13:c3:9d:
         6a:1e:e4:07:ca:0f:ef:f7:c8:13:1c:47:cd:75:34:6b:67:a6:
         37:9a:33:9d:ad:ed:01:00:1e:0a:82:f1:bc:c5:56:53:ec:59:
         de:9d:db:d1:1e:d3:c1:52:d5:5b:b8:0a:d9:9c:9d:93:17:d3:
         92:cc:04:5b:47:42:55:f7:90:96:70:5e:d7:df:a7:e4:82:67:
         d9:62:8e:e0:90:56:de:24:05:44:c9:61:bd:f7:d7:4e:47:3c:
         c9:37:8d:da:1e:56:d0:64:33:a4:33:17:92:a7:82:2b:72:15:
         db:3d:89:56:67:37:f4:cd:88:ba:a5:dd:f3:82:2f:0d:76:be:
         9d:0c:32:06:ae:b5:3e:80:a9:c4:a0:e8:0e:8a:9d:de:d5:de:
         bf:f1:64:49:f7:9c:69:ef:ea:57:41:50:0a:f0:4e:65:bc:54:
         f7:a2:46:85:96:47:eb:6b:b0:15:48:f3:3d:c8:94:c8:7b:49:
         6d:9e:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:33:26 2026 by rpki-client