This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39382e302f32332d3233203d3e203337393639.roa
File:                     3130332e39382e39382e302f32332d3233203d3e203337393639.roa (raw, json)
Hash identifier:          r5YVhLkGCOHeSpaGRlVI7e+/dsgC+y22CaKPtz0iMa8=
Subject key identifier:   E3:B2:D8:7C:27:73:45:88:D6:40:7F:D8:41:1E:25:D6:45:57:A5:DE
Certificate issuer:       /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial:       79323088FE4D741B5B4A07F27A2972CF8E7042B4
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39382e302f32332d3233203d3e203337393639.roa
Signing time:             Tue 20 Jan 2026 02:23:49 +0000
ROA not before:           Tue 20 Jan 2026 02:18:49 +0000
ROA not after:            Tue 19 Jan 2027 02:23:49 +0000
asID:                     37969
IP address blocks:        103.98.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:32:30:88:fe:4d:74:1b:5b:4a:07:f2:7a:29:72:cf:8e:70:42:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
        Validity
            Not Before: Jan 20 02:18:49 2026 GMT
            Not After : Jan 19 02:23:49 2027 GMT
        Subject: CN=E3B2D87C27734588D6407FD8411E25D64557A5DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:e9:d0:71:28:a8:ac:9e:46:93:dd:33:0a:
                    6c:8b:4a:5f:c0:43:ae:76:67:72:06:7c:9d:39:8d:
                    dd:a8:54:a2:e8:64:65:1d:db:e4:f0:8f:f5:42:28:
                    e2:70:55:08:ce:4f:44:15:4e:13:30:ac:21:b0:d3:
                    22:5b:0e:da:cc:cb:09:b3:46:e6:75:3f:e4:df:e0:
                    28:f5:07:e6:cc:54:b9:10:a3:17:1a:0c:8d:2c:cd:
                    68:bc:be:57:33:2f:d4:d5:ad:49:92:bd:2e:10:13:
                    c1:22:a0:15:fb:fa:94:95:c1:46:a2:97:5a:52:84:
                    a5:5a:2a:21:24:40:86:4c:0d:58:be:34:8f:9d:e8:
                    53:d4:e7:6c:b2:cc:07:05:d5:c0:6a:4d:f0:4b:1c:
                    0e:19:c3:d5:39:0a:71:20:bf:6d:3f:a6:05:2e:02:
                    c5:8b:89:16:38:fb:0c:09:8e:5d:ac:b9:d1:a3:e2:
                    07:e7:ab:f2:6c:88:c3:e3:6a:aa:7f:4e:39:90:ff:
                    ee:cd:9c:33:29:46:13:d5:9a:d5:af:b6:29:37:78:
                    d6:b5:26:e2:4d:f0:b1:6c:fb:7c:33:98:e2:3f:01:
                    25:f0:dd:db:fc:e6:b0:e3:db:b1:c8:e4:88:b1:28:
                    6b:7e:60:08:b6:69:36:df:2b:bf:19:81:d9:ad:07:
                    8d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B2:D8:7C:27:73:45:88:D6:40:7F:D8:41:1E:25:D6:45:57:A5:DE
            X509v3 Authority Key Identifier:
                keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/3130332e39382e39382e302f32332d3233203d3e203337393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:46:f2:4f:4a:36:47:53:8e:3e:66:b0:ea:50:a5:95:e7:d6:
         0e:0f:1b:a0:c2:a4:1b:53:60:0d:15:83:a3:82:86:82:96:5c:
         c7:92:a7:ac:a9:2a:93:32:df:c7:f0:d1:53:c9:4d:a7:ed:c1:
         fc:c5:6b:80:ae:41:88:f2:7d:16:5a:4c:6e:d6:88:c1:13:50:
         95:63:96:03:be:ae:3d:a3:da:60:44:b8:54:ce:b0:ac:73:15:
         26:66:8e:50:2e:98:1f:15:04:f3:c9:b4:c0:b1:0e:11:23:ff:
         88:bc:66:6f:b3:61:88:0d:e5:2b:1e:83:89:2e:3d:1a:d5:f3:
         db:a0:79:62:e6:96:6e:86:a4:fd:97:d4:2b:a6:19:c3:f2:7a:
         87:32:8b:72:a6:d9:97:44:05:59:e8:46:a4:16:eb:64:fc:3c:
         3c:2c:87:2d:f1:c7:e2:b5:2a:2b:70:27:84:8a:c4:0a:03:34:
         bd:ad:d1:ff:c1:2a:d8:e9:ec:77:1e:e4:ba:61:f6:4a:ee:74:
         f7:88:46:95:bd:49:c2:87:1f:46:51:2c:e0:2b:8f:b2:4a:2b:
         88:4b:ec:7c:ac:30:07:65:36:a7:02:c5:45:60:04:b4:e6:75:
         4e:6e:00:64:bd:00:bb:2a:93:c8:11:24:9f:19:4f:02:fc:a1:
         93:e3:0d:fa
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUeTIwiP5NdBtbSgfyeilyz45wQrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0
RjhFMzgyNzAeFw0yNjAxMjAwMjE4NDlaFw0yNzAxMTkwMjIzNDlaMDMxMTAvBgNV
BAMTKEUzQjJEODdDMjc3MzQ1ODhENjQwN0ZEODQxMUUyNUQ2NDU1N0E1REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApunQcSiorJ5Gk90zCmyLSl/A
Q652Z3IGfJ05jd2oVKLoZGUd2+Twj/VCKOJwVQjOT0QVThMwrCGw0yJbDtrMywmz
RuZ1P+Tf4Cj1B+bMVLkQoxcaDI0szWi8vlczL9TVrUmSvS4QE8EioBX7+pSVwUai
l1pShKVaKiEkQIZMDVi+NI+d6FPU52yyzAcF1cBqTfBLHA4Zw9U5CnEgv20/pgUu
AsWLiRY4+wwJjl2sudGj4gfnq/JsiMPjaqp/TjmQ/+7NnDMpRhPVmtWvtik3eNa1
JuJN8LFs+3wzmOI/ASXw3dv85rDj27HI5IixKGt+YAi2aTbfK78ZgdmtB40JAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU47LYfCdzRYjWQH/YQR4l1kVXpd4wHwYDVR0j
BBgwFoAUN+ZdPWC0XBQpZ4QVE9jlbU+OOCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NjA4NDg2Ni8wLzM3RTY1RDNENjBCNDVDMTQyOTY3ODQxNTEzRDhF
NTZENEY4RTM4MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0RjhFMzgyNy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ2MDg0ODY2LzAvMzEzMDMzMmUzOTM4
MmUzOTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzNzM5MzYzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWdiYjANBgkqhkiG9w0BAQsFAAOCAQEAUEbyT0o2R1OOPmaw6lCllefWDg8b
oMKkG1NgDRWDo4KGgpZcx5KnrKkqkzLfx/DRU8lNp+3B/MVrgK5BiPJ9FlpMbtaI
wRNQlWOWA76uPaPaYES4VM6wrHMVJmaOUC6YHxUE88m0wLEOESP/iLxmb7NhiA3l
Kx6DiS49GtXz26B5YuaWboak/ZfUK6YZw/J6hzKLcqbZl0QFWehGpBbrZPw8PCyH
LfHH4rUqK3AnhIrECgM0va3R/8Eq2Onsdx7kumH2Su5094hGlb1JwocfRlEs4CuP
skoriEvsfKwwB2U2pwLFRWAEtOZ1Tm4AZL0AuyqTyBEknxlPAvyhk+MN+g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:52 2026 by rpki-client