This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32342d3234203d3e20313337343433.roa
File:                     3130332e39372e35362e302f32342d3234203d3e20313337343433.roa (raw, json)
Hash identifier:          Usfk3vKW8a6sdncccfCTAd6Pdzalj50eZ7FYBMBrLaI=
Subject key identifier:   79:EF:8B:9C:92:37:52:12:3E:85:90:0E:07:63:57:BF:0E:4C:C6:D1
Certificate issuer:       /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial:       0F37C13AED0DDAAB01C06A2A2EC2691DFC63E3FB
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32342d3234203d3e20313337343433.roa
Signing time:             Tue 20 Jan 2026 02:08:27 +0000
ROA not before:           Tue 20 Jan 2026 02:03:27 +0000
ROA not after:            Tue 19 Jan 2027 02:08:27 +0000
asID:                     137443
IP address blocks:        103.97.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:37:c1:3a:ed:0d:da:ab:01:c0:6a:2a:2e:c2:69:1d:fc:63:e3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
        Validity
            Not Before: Jan 20 02:03:27 2026 GMT
            Not After : Jan 19 02:08:27 2027 GMT
        Subject: CN=79EF8B9C923752123E85900E076357BF0E4CC6D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:d7:9c:91:29:9b:69:55:22:6b:29:19:c1:
                    a4:be:68:62:50:b8:f5:f6:be:30:5f:25:3b:2c:07:
                    0d:34:9e:3b:79:65:b2:cf:4d:10:b6:36:01:3d:20:
                    60:d0:00:c3:ae:e0:ea:b8:40:15:0c:5a:05:d2:ff:
                    99:20:93:a0:26:bd:ea:37:54:eb:36:13:80:4d:26:
                    fe:e0:48:aa:e5:76:98:a4:e7:a6:58:49:9c:2e:e6:
                    8d:60:60:30:95:eb:79:2d:f5:0f:2f:67:ca:8a:1c:
                    13:2f:de:a2:88:d2:1f:ac:a1:a4:7e:a1:b3:2e:4f:
                    ac:7b:c2:e1:2d:63:a9:c4:63:57:0e:75:3a:74:c2:
                    fc:b1:8c:89:bd:c9:e8:88:e8:48:f8:d9:31:63:6d:
                    73:e7:16:c6:ef:25:26:00:87:8d:90:89:b6:51:5b:
                    54:52:10:a4:71:0b:73:8c:c6:8e:40:89:ff:e7:30:
                    1a:a3:9f:62:70:a0:7b:45:69:0f:38:2e:31:80:cd:
                    48:05:e1:68:b9:8d:f2:7e:87:ba:96:25:9e:3d:d0:
                    d0:b3:44:2b:5b:99:1e:23:92:c4:12:ff:67:3f:f7:
                    d9:2c:99:bc:2e:01:15:05:ae:64:6f:34:ef:09:6d:
                    6c:21:f8:a6:cd:83:a9:7d:a8:88:68:d4:ce:b9:2b:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EF:8B:9C:92:37:52:12:3E:85:90:0E:07:63:57:BF:0E:4C:C6:D1
            X509v3 Authority Key Identifier:
                keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35362e302f32342d3234203d3e20313337343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:3a:87:78:99:c2:56:1f:2e:3d:8f:f3:a8:30:a5:8b:49:39:
         c6:a1:50:96:59:eb:74:de:2e:85:35:21:52:0f:0e:ad:bf:c0:
         ed:90:73:e7:49:d1:9d:cd:eb:21:7e:f0:2b:10:2e:8e:28:b5:
         b7:73:ba:30:80:d0:36:69:3f:ab:52:52:9a:47:8d:fd:c4:92:
         e1:52:70:4e:47:21:ef:c6:22:a7:23:fe:27:84:c7:3e:c2:59:
         c4:17:1d:a8:43:da:cc:7c:ec:51:4f:cd:08:2e:3e:9b:73:1d:
         1e:bb:a0:9a:7a:8c:fb:ae:ee:4b:12:ae:1d:94:ea:2c:08:41:
         74:3a:1f:30:13:68:b1:96:1a:ae:82:5f:2e:53:ff:a4:b3:64:
         5f:09:b6:a2:4f:32:51:c8:33:62:43:31:1a:d0:7f:7f:ef:9c:
         7c:cf:fc:6c:6d:94:55:fe:69:78:cf:83:81:36:65:af:42:1a:
         d3:82:e7:04:fd:82:86:d1:7e:72:cf:d1:9f:52:54:b8:b7:03:
         14:6b:0e:e3:aa:85:2b:73:0d:4f:b4:12:51:58:66:1e:04:59:
         70:4a:c5:44:ac:d1:a4:2b:8e:98:2c:d9:f0:1c:10:5c:b0:04:
         3c:fb:b1:60:d6:b9:33:a2:e8:e2:9c:b6:55:c3:43:0a:cc:b9:
         01:f7:fc:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:16 2026 by rpki-client