This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e38332e36342e302f32322d3232203d3e203337393639.roa
File:                     3130332e38332e36342e302f32322d3232203d3e203337393639.roa (raw, json)
Hash identifier:          dVFE7ZjLT8msPl2df750tNHw5+32yu2qtjyfdyG3ykM=
Subject key identifier:   32:75:E0:AA:E3:45:5B:F0:90:49:07:D3:0D:E3:8C:EF:46:06:82:DC
Certificate issuer:       /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial:       798FC0DDDC493CA797DBD2E34CE1EDD5C96634DC
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e38332e36342e302f32322d3232203d3e203337393639.roa
Signing time:             Tue 20 Jan 2026 02:23:48 +0000
ROA not before:           Tue 20 Jan 2026 02:18:48 +0000
ROA not after:            Tue 19 Jan 2027 02:23:48 +0000
asID:                     37969
IP address blocks:        103.83.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8f:c0:dd:dc:49:3c:a7:97:db:d2:e3:4c:e1:ed:d5:c9:66:34:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
        Validity
            Not Before: Jan 20 02:18:48 2026 GMT
            Not After : Jan 19 02:23:48 2027 GMT
        Subject: CN=3275E0AAE3455BF0904907D30DE38CEF460682DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:41:0e:90:b2:4f:ab:58:54:a4:8c:b3:6b:20:
                    a9:7a:9d:1b:2c:09:94:e2:f7:3f:d6:cd:e1:ee:2b:
                    7a:06:2a:81:48:3c:98:c5:c5:8f:7d:12:dc:2e:ef:
                    1c:41:0d:d6:37:32:65:a7:5e:f5:62:e5:00:1d:82:
                    45:10:9e:2d:0c:f9:ba:62:f4:a9:ca:15:6d:8b:ad:
                    1f:c1:fc:e8:37:53:89:b7:6e:43:9f:49:74:5b:f4:
                    b5:f5:fb:79:2b:59:3d:4c:34:1e:de:a1:66:26:39:
                    08:d8:38:54:ab:ff:cf:68:5b:3c:b3:b7:5d:5d:76:
                    1f:4a:e5:74:1e:6c:15:10:4a:62:b1:bb:9a:32:d2:
                    62:8d:19:7b:2b:9d:18:57:95:96:e2:1f:ef:0a:35:
                    39:66:2a:b9:0c:ac:77:3c:68:43:4a:a1:49:19:90:
                    09:44:76:8d:e4:e2:72:9c:25:c9:ca:15:e6:d0:65:
                    94:7a:a3:da:18:fd:14:c6:03:cc:f1:6b:d9:68:bb:
                    2a:84:f0:2f:82:23:fd:4b:2e:5e:90:e0:31:91:c6:
                    3e:e9:c8:21:40:87:bc:5b:93:90:25:88:08:a7:15:
                    8e:80:eb:0e:83:0e:e6:ef:17:48:db:cf:4b:9d:19:
                    63:dc:0c:bb:60:98:cb:cc:30:eb:6a:64:f3:bf:62:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:75:E0:AA:E3:45:5B:F0:90:49:07:D3:0D:E3:8C:EF:46:06:82:DC
            X509v3 Authority Key Identifier:
                keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e38332e36342e302f32322d3232203d3e203337393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:2a:12:f5:63:27:04:34:22:4f:0e:e9:18:f5:a2:72:b1:24:
         20:9b:24:9c:6f:82:0a:8e:7d:ee:b6:94:95:0e:5d:61:3a:12:
         82:21:34:2f:bc:b2:e5:ac:d4:47:bd:2c:a9:b0:01:a9:2f:68:
         45:5c:2e:df:e6:7f:19:a9:58:f0:f9:12:28:d7:53:26:2a:cf:
         20:75:32:66:20:2e:29:b6:c2:83:f1:1f:9f:f8:f5:45:5d:f2:
         dc:69:62:f7:cc:0e:a3:c3:12:51:93:c7:92:78:46:ea:d0:a1:
         d7:69:dc:1b:2f:ca:ac:16:a2:5e:7c:71:05:a2:b3:45:1e:af:
         79:04:f0:87:be:69:83:e0:59:e5:30:2a:32:2d:dd:c2:1f:d9:
         ee:d5:02:8a:0c:00:8f:43:92:12:e0:19:af:a1:e3:0d:98:f6:
         97:01:2b:5a:bb:52:4d:71:b1:cb:50:8c:4a:34:47:df:24:c4:
         1c:9f:e9:0c:76:68:e2:24:18:18:d5:f7:f5:b1:19:0f:bf:04:
         37:65:75:e0:2f:a6:2d:b2:a9:a4:21:15:16:99:9b:27:aa:67:
         16:95:a5:3f:c8:d5:24:54:56:c0:16:4e:3e:a4:47:74:fc:62:
         cd:47:e4:63:11:b6:cb:f9:01:5c:5e:61:6c:93:37:e8:94:8c:
         a1:75:dc:da
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUeY/A3dxJPKeX29LjTOHt1clmNNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0
RjhFMzgyNzAeFw0yNjAxMjAwMjE4NDhaFw0yNzAxMTkwMjIzNDhaMDMxMTAvBgNV
BAMTKDMyNzVFMEFBRTM0NTVCRjA5MDQ5MDdEMzBERTM4Q0VGNDYwNjgyREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiQQ6Qsk+rWFSkjLNrIKl6nRss
CZTi9z/WzeHuK3oGKoFIPJjFxY99Etwu7xxBDdY3MmWnXvVi5QAdgkUQni0M+bpi
9KnKFW2LrR/B/Og3U4m3bkOfSXRb9LX1+3krWT1MNB7eoWYmOQjYOFSr/89oWzyz
t11ddh9K5XQebBUQSmKxu5oy0mKNGXsrnRhXlZbiH+8KNTlmKrkMrHc8aENKoUkZ
kAlEdo3k4nKcJcnKFebQZZR6o9oY/RTGA8zxa9louyqE8C+CI/1LLl6Q4DGRxj7p
yCFAh7xbk5AliAinFY6A6w6DDubvF0jbz0udGWPcDLtgmMvMMOtqZPO/YqtDAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUMnXgquNFW/CQSQfTDeOM70YGgtwwHwYDVR0j
BBgwFoAUN+ZdPWC0XBQpZ4QVE9jlbU+OOCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NjA4NDg2Ni8wLzM3RTY1RDNENjBCNDVDMTQyOTY3ODQxNTEzRDhF
NTZENEY4RTM4MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0RjhFMzgyNy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ2MDg0ODY2LzAvMzEzMDMzMmUzODMz
MmUzNjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzMzNzM5MzYzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdTQDANBgkqhkiG9w0BAQsFAAOCAQEAJioS9WMnBDQiTw7pGPWicrEkIJsk
nG+CCo597raUlQ5dYToSgiE0L7yy5azUR70sqbABqS9oRVwu3+Z/GalY8PkSKNdT
JirPIHUyZiAuKbbCg/Efn/j1RV3y3Gli98wOo8MSUZPHknhG6tCh12ncGy/KrBai
XnxxBaKzRR6veQTwh75pg+BZ5TAqMi3dwh/Z7tUCigwAj0OSEuAZr6HjDZj2lwEr
WrtSTXGxy1CMSjRH3yTEHJ/pDHZo4iQYGNX39bEZD78EN2V14C+mLbKppCEVFpmb
J6pnFpWlP8jVJFRWwBZOPqRHdPxizUfkYxG2y/kBXF5hbJM36JSMoXXc2g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:52 2026 by rpki-client