This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3233312e302f32342d3234203d3e2034383337.roa
File:                     3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=
Subject key identifier:   6A:72:6B:A9:77:9F:ED:54:A5:D4:A0:F0:10:30:67:47:54:45:DE:44
Certificate issuer:       /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial:       2975C84A845A8603AED26F70A0DE29AF12337C8F
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3233312e302f32342d3234203d3e2034383337.roa
Signing time:             Tue 20 Jan 2026 02:26:10 +0000
ROA not before:           Tue 20 Jan 2026 02:21:10 +0000
ROA not after:            Tue 19 Jan 2027 02:26:10 +0000
asID:                     4837
IP address blocks:        103.24.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:75:c8:4a:84:5a:86:03:ae:d2:6f:70:a0:de:29:af:12:33:7c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
        Validity
            Not Before: Jan 20 02:21:10 2026 GMT
            Not After : Jan 19 02:26:10 2027 GMT
        Subject: CN=6A726BA9779FED54A5D4A0F0103067475445DE44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:d8:da:00:09:9c:ca:b1:25:26:40:50:e6:
                    43:04:b6:ab:45:91:f9:aa:8c:14:d9:f4:36:d6:1c:
                    64:e6:82:09:72:22:ca:9c:aa:bb:89:87:81:8d:65:
                    22:ff:60:97:8e:20:60:bb:9c:06:27:55:ca:c6:42:
                    6e:14:c1:1d:f1:89:79:a6:93:36:f2:54:b5:82:c8:
                    1a:0f:35:93:a9:8c:e0:99:c0:23:1b:a1:28:97:fb:
                    c4:4e:a2:da:b8:38:b6:8a:ed:99:a0:34:2b:17:96:
                    83:93:87:1c:c0:01:41:f1:18:b1:5c:bb:98:3a:52:
                    8c:1d:9e:c6:9c:89:6e:64:84:09:d3:d7:19:40:8d:
                    fd:aa:8a:ed:90:72:a8:3a:f6:9c:77:c1:5a:4e:fd:
                    1b:b3:aa:1a:89:51:36:73:df:6b:05:ef:1b:0e:ac:
                    44:46:e8:34:f8:b5:f0:91:01:ea:81:8b:3d:f0:d4:
                    ad:36:e3:d7:52:14:ca:35:3f:34:fd:06:a4:f3:9d:
                    69:17:17:d0:50:eb:03:bf:78:4a:1f:e3:dd:f8:09:
                    2b:85:08:6a:56:71:c2:63:44:f8:33:29:18:18:d5:
                    82:dc:f4:e4:aa:b8:12:55:21:c0:9e:0f:89:da:57:
                    47:8b:e5:47:0c:79:a1:b8:d2:5d:c2:8a:d1:2e:d2:
                    53:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:72:6B:A9:77:9F:ED:54:A5:D4:A0:F0:10:30:67:47:54:45:DE:44
            X509v3 Authority Key Identifier:
                keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3233312e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:b6:e0:40:1a:73:cf:35:e8:fb:0e:95:7c:2b:77:30:65:d6:
         8c:17:58:be:c3:b8:ac:4e:3a:35:52:8b:b8:ee:f3:cb:7c:09:
         b8:7a:a4:60:d6:20:86:08:ca:02:b0:aa:46:d6:e7:e9:98:f4:
         ce:4c:6c:f9:b9:4a:fd:60:b4:17:3d:fe:cf:e4:e5:6e:b1:67:
         7a:72:00:e0:e2:27:b3:0e:99:96:38:83:f7:ea:a7:fd:29:05:
         5a:6b:a7:b3:59:aa:3c:98:ed:d4:c8:4d:7d:1c:d4:87:3a:2c:
         d0:a0:26:7e:97:47:0f:e5:13:13:69:90:da:51:59:e2:fe:1f:
         97:4f:d6:6e:da:26:89:3d:3f:0c:a4:77:f6:af:3b:cf:ff:9e:
         78:e0:31:d7:08:63:ff:57:16:b9:fd:cb:9c:0d:8f:ae:5b:af:
         fc:68:88:c1:51:6d:cf:31:ba:94:5f:fd:dd:7d:f4:30:e3:df:
         2d:5b:7d:7f:dd:bc:a4:cd:1e:78:b3:5c:d5:f6:ba:12:dd:bb:
         78:ef:8f:00:6e:1e:c2:b7:3a:dd:6c:95:54:68:57:cb:ca:25:
         c3:70:41:0a:c1:07:60:59:80:75:6f:32:4c:78:5d:92:9f:b7:
         18:70:cb:db:d6:cd:df:f4:e9:10:91:d4:73:99:64:e6:53:e7:
         de:7a:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:01:08 2026 by rpki-client