This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa
File:                     3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (raw, json)
Hash identifier:          bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=
Subject key identifier:   1F:15:4A:22:13:E4:13:A7:F0:A5:E8:4B:6C:1B:8D:60:18:B1:15:B5
Certificate issuer:       /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A
Certificate serial:       04B7BB762AC04FCF4564F278BB9EE3BDAE364D39
Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa
Signing time:             Tue 20 Jan 2026 02:23:47 +0000
ROA not before:           Tue 20 Jan 2026 02:18:47 +0000
ROA not after:            Tue 19 Jan 2027 02:23:47 +0000
asID:                     4837
IP address blocks:        103.163.180.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 17:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b7:bb:76:2a:c0:4f:cf:45:64:f2:78:bb:9e:e3:bd:ae:36:4d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A
        Validity
            Not Before: Jan 20 02:18:47 2026 GMT
            Not After : Jan 19 02:23:47 2027 GMT
        Subject: CN=1F154A2213E413A7F0A5E84B6C1B8D6018B115B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d7:2f:0e:89:6a:45:fa:3b:d4:22:90:21:ed:
                    2b:12:9f:29:2e:4a:ef:d1:7b:c9:00:77:7a:e4:cb:
                    ea:8a:4a:f0:41:79:ec:ff:d6:74:75:f2:97:54:3e:
                    b2:85:d1:eb:00:88:d7:43:72:56:2d:5d:40:86:20:
                    af:9b:ba:8f:07:05:a8:d9:6c:20:99:8f:71:23:ed:
                    48:7b:80:16:87:72:d4:9f:07:a1:94:fe:72:6f:7e:
                    3c:1c:23:64:06:84:b7:a1:d3:1b:bf:50:27:e6:65:
                    b3:50:7b:67:2b:08:52:ab:c6:60:50:c7:26:da:5f:
                    63:8b:12:2e:d7:f3:f9:9a:75:f6:2b:a5:e5:6b:ac:
                    67:38:1c:3c:88:57:fc:e2:42:e9:8a:e4:ca:90:7a:
                    2d:94:10:ac:c8:04:5f:42:26:dc:b0:8a:07:42:f9:
                    6c:cf:d9:fd:70:24:fe:a7:2c:f4:12:41:16:86:f0:
                    40:0d:cb:24:ee:b7:fe:dc:76:07:0a:96:6a:77:17:
                    32:50:67:c3:a1:6b:72:40:9e:97:c4:83:bc:53:4f:
                    48:60:d6:7d:bd:53:1e:24:82:aa:86:05:d7:d9:43:
                    a5:cf:a7:70:fe:03:96:6d:b3:a4:b4:cc:e0:7b:fe:
                    51:3a:e8:3e:39:c2:91:f5:a0:a0:ff:a6:40:e8:6a:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:15:4A:22:13:E4:13:A7:F0:A5:E8:4B:6C:1B:8D:60:18:B1:15:B5
            X509v3 Authority Key Identifier:
                keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:cd:03:0d:d1:12:8e:f8:08:9e:e3:45:1c:dd:59:32:e7:f9:
         30:14:a3:15:fc:da:37:4a:23:82:79:6a:d1:16:9f:3a:9c:31:
         06:65:07:92:45:85:6c:47:bf:a6:bb:4d:65:1b:14:e5:51:ec:
         50:e0:92:65:8f:cf:6a:13:de:d8:33:90:a8:45:bf:61:61:02:
         c4:5c:67:e1:23:f5:a8:a2:de:96:e2:38:c9:2d:4d:3a:ef:45:
         da:fc:00:f4:54:09:99:f3:81:5e:74:91:d4:8f:bd:c5:66:bd:
         20:21:dd:02:ad:94:4b:2b:2b:b1:07:31:d8:6b:15:00:49:d2:
         15:d3:66:2e:50:ba:29:de:ac:1a:67:06:9c:ca:ff:b6:65:a8:
         93:94:a6:6b:e2:3d:13:91:7b:ee:30:14:d4:b0:20:ce:17:8a:
         69:88:1e:8f:fa:ae:5d:32:28:91:f9:52:16:03:6c:e3:1e:c5:
         5a:1f:b3:97:62:31:c3:f5:a1:4e:1f:ff:8c:bc:94:88:0e:ac:
         21:5c:b6:44:4c:84:5e:aa:15:d8:04:f7:99:83:e4:57:be:d1:
         16:f3:16:b2:4e:cb:d5:da:96:8b:c4:0c:c6:c7:b2:ef:f6:27:
         7f:47:28:b0:41:f1:08:39:5f:2b:5e:c2:58:df:65:1d:fa:03:
         68:63:f1:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:44 2026 by rpki-client