This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32322d3232203d3e20313532303932.roa
File:                     3130332e39372e35362e302f32322d3232203d3e20313532303932.roa (raw, json)
Hash identifier:          xzVFs6aTjbygQXEe4vJkKPr2ZvERkqIPBfioErfexIo=
Subject key identifier:   44:7F:C0:1A:47:F2:F5:24:36:8A:CF:F0:DB:19:68:A2:C8:F6:5C:53
Certificate issuer:       /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial:       100B14EE9A416E2698F6FECCDE6F41487E34AD26
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32322d3232203d3e20313532303932.roa
Signing time:             Tue 20 Jan 2026 02:08:28 +0000
ROA not before:           Tue 20 Jan 2026 02:03:28 +0000
ROA not after:            Tue 19 Jan 2027 02:08:28 +0000
asID:                     152092
IP address blocks:        103.97.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0b:14:ee:9a:41:6e:26:98:f6:fe:cc:de:6f:41:48:7e:34:ad:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
        Validity
            Not Before: Jan 20 02:03:28 2026 GMT
            Not After : Jan 19 02:08:28 2027 GMT
        Subject: CN=447FC01A47F2F524368ACFF0DB1968A2C8F65C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:2e:c4:d0:02:03:6d:c2:7f:bc:dd:c3:05:
                    f0:8e:b1:71:9b:10:ca:30:d1:4b:c5:cc:72:c4:05:
                    fe:83:5e:16:48:a7:aa:e1:b9:96:7b:a7:46:ec:df:
                    ab:4a:e4:15:df:1f:8a:4c:1c:7d:16:bf:83:89:e0:
                    08:f4:3f:00:80:1f:45:c2:17:2e:95:62:47:c7:0c:
                    cf:57:70:ea:19:a2:da:a5:51:56:e8:98:30:43:f9:
                    f2:84:91:22:10:98:15:a8:2d:8a:4a:5d:f8:03:8b:
                    ad:b3:8d:ec:23:21:eb:38:55:7b:3b:63:46:10:82:
                    d9:be:f1:6a:8f:8f:68:09:03:43:42:33:26:9b:c1:
                    35:f2:c6:5a:24:08:82:59:b1:a5:0e:8c:6b:87:bb:
                    52:0a:63:e7:55:75:18:8f:59:e8:76:d4:fe:ad:fa:
                    1a:18:cd:9d:e1:04:97:22:b6:72:92:a1:d4:b2:f6:
                    60:0c:df:e8:d6:12:f0:d6:0d:8f:f9:e8:d1:e8:51:
                    28:4e:b7:a0:0b:8c:82:1f:b7:bd:92:dd:6a:b0:b9:
                    b9:e4:bd:63:38:18:bc:1f:e4:ea:7c:87:de:aa:b4:
                    7e:92:cb:c7:30:bc:db:1a:ed:99:fc:51:88:08:90:
                    08:1f:34:1c:a7:a3:31:b7:e7:d2:1e:0c:46:45:2a:
                    63:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7F:C0:1A:47:F2:F5:24:36:8A:CF:F0:DB:19:68:A2:C8:F6:5C:53
            X509v3 Authority Key Identifier:
                keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32322d3232203d3e20313532303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:36:cd:82:eb:51:67:11:f9:c1:19:75:92:ea:ad:3c:ea:64:
         78:9c:b5:a4:29:bd:3a:f1:a4:6c:78:6e:c0:5b:e6:a4:ed:75:
         07:39:bc:66:19:0a:0a:e6:2b:6f:21:ea:f3:7c:e8:83:ff:af:
         e6:fa:92:99:82:3b:c4:0c:50:af:48:f4:33:9b:44:53:0c:f2:
         80:59:82:7b:2b:99:31:01:8d:80:8b:dd:2b:42:f7:b3:65:1f:
         a8:0a:31:f4:46:db:7d:00:bb:c3:43:4a:72:2a:64:88:8b:74:
         e8:96:52:bc:78:86:e6:42:9f:b3:e5:c1:ca:46:d4:c2:be:a2:
         41:21:ba:bb:fa:c5:e4:e1:35:26:bd:14:c7:5c:53:c3:53:60:
         a5:91:87:d0:e3:69:70:e0:05:75:73:3c:b3:e3:2a:c8:b2:3e:
         76:91:6b:b8:0e:ac:cd:12:42:cd:7e:8e:7b:86:bf:b9:f0:03:
         ab:fe:2a:0f:d0:70:45:41:ff:6b:23:ee:18:2d:1f:ff:f9:65:
         79:a0:7c:3f:eb:05:df:0d:f6:7e:04:c8:fd:73:d7:b3:0a:a3:
         f1:be:d2:d8:1b:89:ba:69:a3:db:ec:8b:41:95:8f:e5:51:3b:
         8e:f4:d8:6c:87:82:67:5b:8c:3d:42:ed:ef:49:ec:f2:d0:cc:
         fc:65:f4:5f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUEAsU7ppBbiaY9v7M3m9BSH40rSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2
MzU0NjFBQjAeFw0yNjAxMjAwMjAzMjhaFw0yNzAxMTkwMjA4MjhaMDMxMTAvBgNV
BAMTKDQ0N0ZDMDFBNDdGMkY1MjQzNjhBQ0ZGMERCMTk2OEEyQzhGNjVDNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3bS7E0AIDbcJ/vN3DBfCOsXGb
EMow0UvFzHLEBf6DXhZIp6rhuZZ7p0bs36tK5BXfH4pMHH0Wv4OJ4Aj0PwCAH0XC
Fy6VYkfHDM9XcOoZotqlUVbomDBD+fKEkSIQmBWoLYpKXfgDi62zjewjIes4VXs7
Y0YQgtm+8WqPj2gJA0NCMyabwTXyxlokCIJZsaUOjGuHu1IKY+dVdRiPWeh21P6t
+hoYzZ3hBJcitnKSodSy9mAM3+jWEvDWDY/56NHoUShOt6ALjIIft72S3Wqwubnk
vWM4GLwf5Op8h96qtH6Sy8cwvNsa7Zn8UYgIkAgfNBynozG359IeDEZFKmOdAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQURH/AGkfy9SQ2is/w2xloosj2XFMwHwYDVR0j
BBgwFoAUsENZPzBtdQDSKENMmXOxuWNUYaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNTE2NzEwNS8wL0IwNDM1OTNGMzA2RDc1MDBEMjI4NDM0Qzk5NzNC
MUI5NjM1NDYxQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2MzU0NjFBQi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODMzNTUyNTE2NzEwNS8wLzMxMzAzMzJlMzkz
NzJlMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzUzMjMwMzkzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmdhODANBgkqhkiG9w0BAQsFAAOCAQEAJjbNgutRZxH5wRl1kuqtPOpk
eJy1pCm9OvGkbHhuwFvmpO11Bzm8ZhkKCuYrbyHq83zog/+v5vqSmYI7xAxQr0j0
M5tEUwzygFmCeyuZMQGNgIvdK0L3s2UfqAox9EbbfQC7w0NKcipkiIt06JZSvHiG
5kKfs+XBykbUwr6iQSG6u/rF5OE1Jr0Ux1xTw1NgpZGH0ONpcOAFdXM8s+MqyLI+
dpFruA6szRJCzX6Oe4a/ufADq/4qD9BwRUH/ayPuGC0f//lleaB8P+sF3w32fgTI
/XPXswqj8b7S2BuJummj2+yLQZWP5VE7jvTYbIeCZ1uMPULt70ns8tDM/GX0Xw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:40:46 2026 by rpki-client