This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa
File:                     3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa (raw, json)
Hash identifier:          OqthX14Z5si5Z7IYFzrZNKv5x092FOwbR0BMAozLLVc=
Subject key identifier:   CF:B7:35:91:6C:14:3C:5E:70:2A:7F:82:F4:54:51:3D:55:48:AE:D2
Certificate issuer:       /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial:       6A4CF2A7EA15E3D469FC4A7ECD14BB0A330EBDE1
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa
Signing time:             Tue 20 Jan 2026 02:14:12 +0000
ROA not before:           Tue 20 Jan 2026 02:09:12 +0000
ROA not after:            Tue 19 Jan 2027 02:14:12 +0000
asID:                     133033
IP address blocks:        103.248.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 06:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4c:f2:a7:ea:15:e3:d4:69:fc:4a:7e:cd:14:bb:0a:33:0e:bd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
        Validity
            Not Before: Jan 20 02:09:12 2026 GMT
            Not After : Jan 19 02:14:12 2027 GMT
        Subject: CN=CFB735916C143C5E702A7F82F454513D5548AED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:14:14:85:7a:28:d0:14:3f:90:91:2e:e5:
                    a4:22:33:63:97:cc:f9:de:ba:43:0b:5a:1c:1d:a7:
                    23:fb:d6:27:d8:a2:d4:14:7e:d7:79:93:dc:54:fb:
                    b3:e3:26:a5:c5:db:59:a8:30:44:94:10:db:93:53:
                    ea:b3:01:bb:82:91:12:19:28:38:27:59:02:31:9d:
                    1c:aa:fc:9c:d9:81:b0:9a:46:a4:34:2c:10:78:32:
                    7a:c2:44:31:5a:62:bc:83:e7:84:95:83:93:5d:ed:
                    84:49:ad:d0:a1:e5:87:ed:6c:c2:30:b2:4b:27:be:
                    90:55:70:db:db:cb:16:64:4d:ff:9b:ea:c6:56:e8:
                    32:fb:5b:e6:41:52:a4:89:05:e9:ee:f8:83:65:eb:
                    34:15:d1:8f:d5:30:52:22:e6:ae:56:ed:e4:39:59:
                    44:0a:96:ee:df:f0:c0:7e:de:a8:1e:f0:c2:07:68:
                    45:62:d2:46:0e:ab:43:b4:65:cf:ca:34:d3:5c:9e:
                    ca:47:13:03:21:c5:ab:30:75:3c:4d:ac:07:69:91:
                    d4:2f:2f:23:88:03:73:01:13:c0:d5:f2:84:c4:a3:
                    75:70:d4:52:93:0d:63:64:26:fd:ac:e1:1d:ea:37:
                    4b:1e:92:60:8f:f3:33:eb:9d:2c:c4:74:3d:14:d4:
                    99:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B7:35:91:6C:14:3C:5E:70:2A:7F:82:F4:54:51:3D:55:48:AE:D2
            X509v3 Authority Key Identifier:
                keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:42:bb:d6:a4:c2:bd:e6:1f:4b:36:9b:13:e5:4f:cd:74:24:
         0a:9b:24:44:fe:23:95:05:8b:50:2a:f8:ae:75:c1:5b:a3:07:
         97:86:6d:cb:dd:01:d3:bf:fa:30:63:7a:3c:50:82:24:dc:44:
         26:f3:6c:21:c0:3b:88:ca:b8:52:5e:46:b9:3b:9c:d0:b5:2a:
         bd:23:70:57:83:ed:7e:91:b8:8f:0d:38:f4:40:95:fe:68:b5:
         0b:f2:4e:40:90:04:5f:08:19:1c:fa:a8:6b:d3:8c:11:b5:67:
         2d:00:45:94:43:b5:d4:32:48:d2:60:ed:84:36:c4:10:37:c7:
         13:7d:47:42:78:19:7e:ca:34:b6:56:c0:c0:16:61:21:5d:bd:
         0d:4d:16:c9:c3:08:62:af:40:97:a5:c9:c2:7e:99:ca:89:6d:
         79:41:26:be:39:2d:ca:4c:76:96:8d:25:49:90:1c:ed:9f:fa:
         76:64:72:76:ee:8f:a8:60:78:fc:98:7e:4e:17:c5:28:62:14:
         87:07:9d:2e:15:59:32:bd:ab:c5:da:35:d9:1a:da:e4:79:b3:
         a4:18:a3:5c:78:9f:39:76:c7:de:66:c4:40:5b:83:bc:e5:95:
         6b:88:51:6e:a4:33:a7:b6:d5:68:a4:cc:7a:35:7e:7e:e6:ec:
         a3:40:62:9e
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUakzyp+oV49Rp/Ep+zRS7CjMOveEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC
QUQzQzQyRDAeFw0yNjAxMjAwMjA5MTJaFw0yNzAxMTkwMjE0MTJaMDMxMTAvBgNV
BAMTKENGQjczNTkxNkMxNDNDNUU3MDJBN0Y4MkY0NTQ1MTNENTU0OEFFRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFxQUhXoo0BQ/kJEu5aQiM2OX
zPneukMLWhwdpyP71ifYotQUftd5k9xU+7PjJqXF21moMESUENuTU+qzAbuCkRIZ
KDgnWQIxnRyq/JzZgbCaRqQ0LBB4MnrCRDFaYryD54SVg5Nd7YRJrdCh5YftbMIw
sksnvpBVcNvbyxZkTf+b6sZW6DL7W+ZBUqSJBenu+INl6zQV0Y/VMFIi5q5W7eQ5
WUQKlu7f8MB+3qge8MIHaEVi0kYOq0O0Zc/KNNNcnspHEwMhxaswdTxNrAdpkdQv
LyOIA3MBE8DV8oTEo3Vw1FKTDWNkJv2s4R3qN0sekmCP8zPrnSzEdD0U1JlRAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUz7c1kWwUPF5wKn+C9FRRPVVIrtIwHwYDVR0j
BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG
MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE2OTk2MzU1LzAvMzEzMDMzMmUz
MjM0MzgyZTMxMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMzMwMzMz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGf4mjANBgkqhkiG9w0BAQsFAAOCAQEAUEK71qTCveYfSzab
E+VPzXQkCpskRP4jlQWLUCr4rnXBW6MHl4Zty90B07/6MGN6PFCCJNxEJvNsIcA7
iMq4Ul5GuTuc0LUqvSNwV4PtfpG4jw049ECV/mi1C/JOQJAEXwgZHPqoa9OMEbVn
LQBFlEO11DJI0mDthDbEEDfHE31HQngZfso0tlbAwBZhIV29DU0WycMIYq9Al6XJ
wn6ZyolteUEmvjktykx2lo0lSZAc7Z/6dmRydu6PqGB4/Jh+ThfFKGIUhwedLhVZ
Mr2rxdo12Rra5HmzpBijXHifOXbH3mbEQFuDvOWVa4hRbqQzp7bVaKTMejV+fubs
o0Bing==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:59:42 2026 by rpki-client