This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39322e302f32332d3233203d3e203337393639.roa
File:                     3130332e39382e39322e302f32332d3233203d3e203337393639.roa (raw, json)
Hash identifier:          zC7YUsoG9YndgbwsUW+Z6HXvHMqUOapjBkDkzwd1a+E=
Subject key identifier:   25:83:9D:C2:3D:2F:38:76:21:46:DA:C2:90:B3:F5:8C:1C:72:86:81
Certificate issuer:       /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial:       5045730F9345827235CEB24340A73067F81CCE23
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39322e302f32332d3233203d3e203337393639.roa
Signing time:             Tue 20 Jan 2026 02:23:48 +0000
ROA not before:           Tue 20 Jan 2026 02:18:48 +0000
ROA not after:            Tue 19 Jan 2027 02:23:48 +0000
asID:                     37969
IP address blocks:        103.98.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:45:73:0f:93:45:82:72:35:ce:b2:43:40:a7:30:67:f8:1c:ce:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
        Validity
            Not Before: Jan 20 02:18:48 2026 GMT
            Not After : Jan 19 02:23:48 2027 GMT
        Subject: CN=25839DC23D2F38762146DAC290B3F58C1C728681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6e:5e:b0:77:7c:25:85:58:af:e7:d0:4f:dd:
                    8f:e6:71:60:4f:ee:16:d2:05:bf:85:33:ec:b4:26:
                    64:21:bb:73:9f:74:08:62:47:30:0f:24:b1:52:30:
                    a6:bc:53:80:97:5e:50:d3:f8:a5:ba:8b:66:7d:da:
                    e6:1e:ef:50:bd:56:85:77:aa:88:68:10:43:b8:d8:
                    a8:8b:cf:28:22:c2:c6:02:01:cb:a3:ac:57:20:5f:
                    5f:80:0b:2c:8f:9a:44:05:8f:6e:bd:3a:15:51:ca:
                    1e:9b:98:15:15:02:22:4d:84:ce:8c:f8:28:48:09:
                    fc:f7:07:12:7f:08:13:c7:ae:96:1a:4e:35:23:9d:
                    4c:60:b2:9f:58:98:cd:93:76:f9:84:48:26:fe:12:
                    eb:e7:60:51:06:8c:b0:31:f3:65:eb:c4:04:a1:36:
                    0c:43:60:ad:d6:2d:66:0d:55:9b:7b:07:10:cc:59:
                    e0:33:ba:e2:9a:29:52:d4:42:5a:3a:fc:74:34:1c:
                    5f:2c:e0:47:05:93:1e:23:fa:21:ed:62:0f:ea:45:
                    c7:a3:e6:83:f7:2f:5d:7c:17:ec:ee:a1:5c:25:20:
                    82:ed:20:1e:05:9e:09:3b:53:40:dc:c5:6b:9b:a2:
                    2b:a8:78:ce:23:ae:23:c6:8d:f1:1e:a0:27:ed:89:
                    48:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:83:9D:C2:3D:2F:38:76:21:46:DA:C2:90:B3:F5:8C:1C:72:86:81
            X509v3 Authority Key Identifier:
                keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39322e302f32332d3233203d3e203337393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:38:2e:62:e1:64:3f:05:cc:4b:fd:a0:8e:a0:c5:94:df:ce:
         15:39:ca:74:dc:3f:34:30:e2:c9:52:13:f2:82:0a:32:18:f8:
         ac:83:82:f1:8a:84:2c:13:e0:86:47:80:6a:90:ca:85:4d:88:
         1c:c4:6c:54:c4:bc:db:21:99:a7:5d:dc:9b:0b:56:16:f5:79:
         47:ca:de:c5:78:dd:75:dd:f0:dd:10:8c:44:17:7d:2b:c3:a6:
         ff:5f:21:c7:9a:a5:0b:24:18:ac:7f:30:b6:63:b9:99:a3:c5:
         24:42:b2:74:f6:91:37:06:c2:3e:28:02:55:21:46:50:8d:0f:
         09:3a:15:47:06:69:c5:e4:2a:9b:c1:4f:d2:12:1a:38:4e:11:
         b5:94:f7:4e:90:63:31:89:7d:8d:b4:09:a5:7a:72:91:fc:bc:
         95:a0:e3:f2:29:b1:b5:e4:a5:b3:86:39:80:f2:2f:ff:ec:ff:
         3c:66:c2:9c:83:6b:b1:5a:1c:08:94:cf:33:cd:fe:72:79:69:
         3d:70:e5:92:da:6a:6d:72:18:8a:d0:d3:43:9b:0d:8c:5a:c4:
         7f:88:17:1e:04:ca:9a:58:96:c4:b9:49:53:5e:65:1f:ec:3c:
         77:76:92:23:65:f7:99:9f:1f:26:ce:4c:a6:e2:94:f6:1e:64:
         18:65:c9:07
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUUEVzD5NFgnI1zrJDQKcwZ/gcziMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0
RjhFMzgyNzAeFw0yNjAxMjAwMjE4NDhaFw0yNzAxMTkwMjIzNDhaMDMxMTAvBgNV
BAMTKDI1ODM5REMyM0QyRjM4NzYyMTQ2REFDMjkwQjNGNThDMUM3Mjg2ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUbl6wd3wlhViv59BP3Y/mcWBP
7hbSBb+FM+y0JmQhu3OfdAhiRzAPJLFSMKa8U4CXXlDT+KW6i2Z92uYe71C9VoV3
qohoEEO42KiLzygiwsYCAcujrFcgX1+ACyyPmkQFj269OhVRyh6bmBUVAiJNhM6M
+ChICfz3BxJ/CBPHrpYaTjUjnUxgsp9YmM2TdvmESCb+EuvnYFEGjLAx82XrxASh
NgxDYK3WLWYNVZt7BxDMWeAzuuKaKVLUQlo6/HQ0HF8s4EcFkx4j+iHtYg/qRcej
5oP3L118F+zuoVwlIILtIB4Fngk7U0DcxWuboiuoeM4jriPGjfEeoCftiUj7AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUJYOdwj0vOHYhRtrCkLP1jBxyhoEwHwYDVR0j
BBgwFoAUN+ZdPWC0XBQpZ4QVE9jlbU+OOCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NjA4NDg2Ni8wLzM3RTY1RDNENjBCNDVDMTQyOTY3ODQxNTEzRDhF
NTZENEY4RTM4MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0RjhFMzgyNy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ2MDg0ODY2LzAvMzEzMDMzMmUzOTM4
MmUzOTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzNzM5MzYzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWdiXDANBgkqhkiG9w0BAQsFAAOCAQEAvTguYuFkPwXMS/2gjqDFlN/OFTnK
dNw/NDDiyVIT8oIKMhj4rIOC8YqELBPghkeAapDKhU2IHMRsVMS82yGZp13cmwtW
FvV5R8rexXjddd3w3RCMRBd9K8Om/18hx5qlCyQYrH8wtmO5maPFJEKydPaRNwbC
PigCVSFGUI0PCToVRwZpxeQqm8FP0hIaOE4RtZT3TpBjMYl9jbQJpXpykfy8laDj
8imxteSls4Y5gPIv/+z/PGbCnINrsVocCJTPM83+cnlpPXDlktpqbXIYitDTQ5sN
jFrEf4gXHgTKmliWxLlJU15lH+w8d3aSI2X3mZ8fJs5MpuKU9h5kGGXJBw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:52 2026 by rpki-client