This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39362e302f32322d3232203d3e203337393639.roa
File:                     3130332e39382e39362e302f32322d3232203d3e203337393639.roa (raw, json)
Hash identifier:          h9WXMWDymxQDY/QK9E51g64sUZ5u+JliT0Z+Wmwqwx4=
Subject key identifier:   8A:37:FF:78:18:7B:16:AE:D3:F3:1B:61:20:4B:12:26:AE:F3:C9:85
Certificate issuer:       /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial:       53EAD5CEC6CAFDB54FF84A40EBE5A1A5BFC89A7B
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39362e302f32322d3232203d3e203337393639.roa
Signing time:             Tue 20 Jan 2026 02:23:48 +0000
ROA not before:           Tue 20 Jan 2026 02:18:48 +0000
ROA not after:            Tue 19 Jan 2027 02:23:48 +0000
asID:                     37969
IP address blocks:        103.98.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ea:d5:ce:c6:ca:fd:b5:4f:f8:4a:40:eb:e5:a1:a5:bf:c8:9a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
        Validity
            Not Before: Jan 20 02:18:48 2026 GMT
            Not After : Jan 19 02:23:48 2027 GMT
        Subject: CN=8A37FF78187B16AED3F31B61204B1226AEF3C985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:2c:70:4c:5c:4a:98:74:11:c5:44:f4:f6:
                    02:fa:a1:c1:c3:cf:88:bd:f8:0a:a1:4b:45:e3:87:
                    44:7d:9c:82:08:e4:bd:63:fa:60:26:81:d5:4a:7c:
                    07:ae:de:8c:81:55:98:29:21:a2:a6:80:6a:72:e1:
                    95:91:39:24:48:4d:4e:28:60:e4:ad:da:51:38:8b:
                    57:98:dc:90:39:de:c1:fa:ab:4d:d5:71:2b:cb:a7:
                    25:e7:92:75:eb:83:25:1a:02:7b:79:52:4d:4a:d4:
                    51:4a:ec:14:ef:25:1b:84:68:78:70:61:eb:09:a6:
                    cb:ae:c7:ef:5e:c2:63:2d:8c:c6:90:0e:e1:fd:1b:
                    a6:26:aa:c5:77:6a:38:1f:14:28:32:56:33:d1:a2:
                    4a:5c:42:b3:b3:06:bf:ef:ff:86:3d:87:37:af:6c:
                    4c:9d:c6:7d:16:bc:52:03:b3:3a:7c:c1:69:94:1b:
                    70:14:75:45:ef:b8:19:3c:30:ee:12:fa:f9:52:fa:
                    0d:6a:d3:9d:53:93:2f:b9:69:7c:d2:d7:0a:9e:a3:
                    44:58:e6:02:80:e8:f0:a2:72:65:a0:95:6b:fb:82:
                    cf:9c:09:87:81:99:35:78:82:3d:b7:5b:5f:f6:1b:
                    ad:c2:3d:4b:52:e7:86:b3:d7:ad:3d:83:3f:43:fb:
                    5f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:37:FF:78:18:7B:16:AE:D3:F3:1B:61:20:4B:12:26:AE:F3:C9:85
            X509v3 Authority Key Identifier:
                keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39362e302f32322d3232203d3e203337393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:95:8c:76:00:d7:12:2e:33:f2:f6:de:b0:49:05:47:19:88:
         47:da:58:9a:cc:a3:75:18:0a:64:7e:f9:04:fd:4f:93:13:bf:
         e3:cd:7f:ff:8f:d1:45:ee:03:40:c6:dc:2d:3c:c6:c1:4d:94:
         d1:3c:72:b8:1a:1f:ab:18:08:39:34:b3:e9:d2:81:b4:1e:23:
         24:d2:05:c8:07:47:b1:1c:f9:b9:88:0f:4e:10:6d:88:d6:0b:
         1d:fe:b7:28:10:28:f0:c5:b1:77:52:b0:59:aa:08:05:53:4e:
         29:ca:da:6c:df:54:27:76:8e:00:c4:83:f5:a7:65:ea:ea:61:
         90:f5:7e:16:c6:b9:7e:9c:9b:5a:67:d4:fe:f8:40:c3:01:ac:
         cf:f0:b3:0c:cf:ec:93:b1:00:8d:f6:17:a2:f3:a9:0b:47:2e:
         f8:8f:2e:c4:77:29:2b:0e:7e:68:b8:0a:5c:1a:ac:80:38:b8:
         d6:cc:50:27:44:95:ec:00:09:48:98:ab:2c:23:d2:0c:d1:76:
         34:7f:61:5e:a8:d0:4a:ec:10:28:43:04:14:73:73:72:f0:01:
         4c:46:c6:2b:9c:29:b7:bf:57:3f:22:e6:f7:ad:23:b1:92:1c:
         65:83:bd:69:e7:0a:a9:87:5e:2b:9c:08:cb:0f:da:72:b2:4c:
         ec:69:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:50 2026 by rpki-client