This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39362e302f32332d3233203d3e203337393639.roa
File:                     3130332e39382e39362e302f32332d3233203d3e203337393639.roa (raw, json)
Hash identifier:          amSgo0avG8Yncop6x773vasjfY91dw5093cZlhDa0s8=
Subject key identifier:   C6:8A:ED:03:26:BC:96:21:7B:87:54:72:58:E0:F9:64:5D:B3:5A:2D
Certificate issuer:       /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial:       63282413A5A1DDDE5A31E46090863E22578CC03B
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39362e302f32332d3233203d3e203337393639.roa
Signing time:             Tue 20 Jan 2026 02:23:48 +0000
ROA not before:           Tue 20 Jan 2026 02:18:48 +0000
ROA not after:            Tue 19 Jan 2027 02:23:48 +0000
asID:                     37969
IP address blocks:        103.98.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:28:24:13:a5:a1:dd:de:5a:31:e4:60:90:86:3e:22:57:8c:c0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
        Validity
            Not Before: Jan 20 02:18:48 2026 GMT
            Not After : Jan 19 02:23:48 2027 GMT
        Subject: CN=C68AED0326BC96217B87547258E0F9645DB35A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:92:c9:7c:73:68:9a:76:f2:45:9b:bc:a2:
                    c9:b0:49:8f:1e:b7:29:7f:57:f1:b7:ef:85:5f:09:
                    f1:d6:2d:df:68:8d:3d:a9:fb:71:14:ca:0e:54:0b:
                    26:c1:1c:2e:55:cd:57:d2:73:6c:33:4b:e1:a2:84:
                    dd:6d:ef:ad:17:41:4e:5e:71:54:dd:7d:40:10:60:
                    cb:31:8f:ee:14:11:09:ce:1e:11:61:db:2e:43:f4:
                    db:87:31:72:2e:ad:7b:c6:28:7b:bd:ec:7a:b7:2a:
                    37:c7:3c:89:f1:f5:d9:f4:20:8d:05:a7:4e:3d:21:
                    1c:2b:e0:19:c7:01:45:40:4b:34:80:b5:37:aa:e4:
                    92:85:5d:f4:21:c3:90:59:cf:2d:b9:50:06:e2:54:
                    f4:a3:b6:54:c8:f8:4b:c9:61:84:e8:94:67:f9:d8:
                    33:4b:51:9a:b5:f2:27:d3:e7:3b:fd:ae:9d:ae:eb:
                    e5:f5:89:13:aa:ec:4d:85:ea:1b:1e:db:8a:ac:28:
                    57:24:c3:ca:7f:3b:14:10:7c:0a:46:b9:1c:c9:42:
                    77:79:e8:52:a4:c2:3e:d9:a9:12:aa:7d:84:cb:c7:
                    1b:62:8e:24:7c:84:77:f1:4b:23:a3:5a:55:b6:2d:
                    d2:64:3e:b2:84:aa:58:1f:c3:39:75:bd:55:c2:97:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8A:ED:03:26:BC:96:21:7B:87:54:72:58:E0:F9:64:5D:B3:5A:2D
            X509v3 Authority Key Identifier:
                keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39362e302f32332d3233203d3e203337393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:26:91:a5:c6:15:29:d7:05:02:47:34:63:b0:a1:01:8c:e4:
         79:30:92:bc:3d:61:09:e3:a6:4c:b1:19:53:4f:02:11:55:62:
         44:ce:b7:7f:ea:3b:5c:7e:b1:fe:0b:a5:80:8f:80:03:b6:de:
         04:b3:f8:c0:db:cc:46:cf:cb:7c:12:0b:76:48:72:f2:3f:7c:
         e0:37:35:e2:21:b2:c3:cd:d5:41:5f:e6:14:c0:27:e6:ad:aa:
         de:06:87:92:8e:13:5d:0f:80:e8:b8:c1:89:ca:e7:7c:3c:fe:
         04:36:95:64:0a:93:be:4c:75:e6:f8:09:71:02:2d:be:35:ef:
         e8:6e:93:68:70:63:6a:5e:b6:cb:09:b6:99:99:50:6c:9b:ef:
         40:90:bb:ad:e8:0c:67:b7:5a:8d:db:56:28:88:a7:e1:d7:c0:
         fe:ec:b6:e2:e6:5b:15:bf:87:4f:79:6c:1d:54:49:fd:72:a8:
         ca:47:2c:9b:a7:fb:14:1c:4d:fa:2d:a0:b5:45:e8:04:a5:e1:
         ea:43:cc:1a:c3:fc:4b:ed:4a:ee:82:3f:92:c7:6f:4f:ce:68:
         8a:1b:c8:4d:94:44:35:65:91:5f:c1:67:30:6b:b3:80:d2:17:
         db:13:28:eb:3c:4b:0f:3f:a0:2e:6e:43:7f:da:57:66:25:d4:
         99:83:64:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:53 2026 by rpki-client