This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3130332e322e3136342e302f32322d3234203d3e203337393638.roa
File:                     3130332e322e3136342e302f32322d3234203d3e203337393638.roa (raw, json)
Hash identifier:          i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=
Subject key identifier:   49:57:3D:1D:33:D1:DF:2B:80:AB:4D:74:02:1D:C3:92:E2:7F:D8:A1
Certificate issuer:       /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7
Certificate serial:       42A1F9DC0684D2F35E7EEF32CD44584B2D0E8D3E
Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3130332e322e3136342e302f32322d3234203d3e203337393638.roa
Signing time:             Tue 20 Jan 2026 02:15:33 +0000
ROA not before:           Tue 20 Jan 2026 02:10:33 +0000
ROA not after:            Tue 19 Jan 2027 02:15:33 +0000
asID:                     37968
IP address blocks:        103.2.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a1:f9:dc:06:84:d2:f3:5e:7e:ef:32:cd:44:58:4b:2d:0e:8d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7
        Validity
            Not Before: Jan 20 02:10:33 2026 GMT
            Not After : Jan 19 02:15:33 2027 GMT
        Subject: CN=49573D1D33D1DF2B80AB4D74021DC392E27FD8A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:d3:e7:15:90:74:10:04:0f:07:f7:9f:15:
                    dc:63:0a:b1:12:5d:47:ce:47:f7:bc:03:db:a7:c4:
                    70:2d:81:26:a7:a9:74:fe:e7:ec:37:f0:4f:48:cd:
                    31:c5:cc:82:e0:3f:4f:12:01:9b:a1:cf:7c:47:2c:
                    ce:06:d0:43:7d:82:a8:30:6f:78:dd:39:f8:e6:e8:
                    c2:e8:9b:9c:6f:31:16:16:1f:c5:94:77:21:ed:6e:
                    68:c4:f5:63:58:33:82:f4:f4:df:e5:07:dd:00:2b:
                    d9:89:5f:08:47:b3:b9:30:01:c1:23:a9:71:08:d0:
                    a4:bb:57:d5:6b:ab:5e:62:cb:e9:14:6d:c5:68:ac:
                    d9:bc:8d:f0:28:9d:9e:be:53:15:e4:f3:a9:9f:d2:
                    20:55:98:39:ef:c9:d8:37:2c:99:86:e3:bd:00:98:
                    f9:24:93:d5:d5:37:3e:82:17:01:f6:ce:f6:f4:0f:
                    b3:a8:4d:11:fd:67:97:0b:a2:5b:19:cf:55:35:f2:
                    69:da:d0:5f:03:09:d5:0b:3b:c9:9b:38:ce:58:42:
                    58:2c:d1:6e:bf:44:96:b3:ed:67:e2:0d:79:e3:75:
                    42:39:fd:1a:ae:5c:3e:cd:72:57:7b:89:83:6e:a7:
                    7d:3d:da:7f:ef:03:e4:1e:4d:f9:a1:48:03:f7:e4:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:57:3D:1D:33:D1:DF:2B:80:AB:4D:74:02:1D:C3:92:E2:7F:D8:A1
            X509v3 Authority Key Identifier:
                keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/3130332e322e3136342e302f32322d3234203d3e203337393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:50:17:92:5f:63:b9:eb:b2:ef:eb:81:86:28:75:d5:eb:1a:
         2b:49:e2:c8:b1:37:12:44:e8:9a:1c:72:f1:d0:42:fb:5c:35:
         4e:da:f8:9e:59:79:3c:11:62:86:4a:54:c0:ed:79:0a:88:fb:
         32:bd:24:10:ab:47:97:5f:c6:c9:6b:8e:9e:51:83:07:bc:93:
         08:75:4c:33:09:e9:67:db:20:05:16:cf:9e:cc:a7:35:7a:5d:
         92:a7:88:6d:b8:4e:08:87:16:a9:0d:15:61:8b:cf:ba:64:72:
         f6:7a:9c:03:dd:ee:fa:53:59:93:f0:ab:95:5e:80:79:ab:b9:
         0e:e1:a5:e0:e3:ed:12:03:2c:15:8c:eb:d7:7d:d9:87:56:4e:
         f3:c8:26:65:96:bf:a6:c3:15:d7:27:58:65:83:35:32:e2:72:
         1b:85:a8:c2:63:f6:0a:71:03:18:c7:b9:4c:44:b6:2b:02:03:
         33:e3:17:ac:73:99:ed:8c:a8:ba:e6:69:ff:2c:07:a4:8f:48:
         3a:c1:a3:0a:2d:d9:21:a7:e3:37:fd:c5:e8:9e:4f:ce:bf:3e:
         29:8d:0c:38:23:e0:f4:49:06:6a:fa:3f:93:81:3a:c8:9c:59:
         5c:98:67:c4:a0:b1:95:ce:ad:70:bf:cf:f1:36:ea:15:1f:8d:
         bd:f8:e6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:05:25 2026 by rpki-client