This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35382e302f32342d3234203d3e20313337343433.roa
File:                     3130332e39372e35382e302f32342d3234203d3e20313337343433.roa (raw, json)
Hash identifier:          JF5TxoFp3gy3/wvpBMe2C5Y2Ij/Gp3tRmMrWijml7no=
Subject key identifier:   CB:C3:12:F8:54:59:E1:FC:84:C0:93:0C:FB:A6:9C:2B:56:55:21:D8
Certificate issuer:       /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial:       5AD9CC162B8D9A1D99728FA03C76E7AA3848F402
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35382e302f32342d3234203d3e20313337343433.roa
Signing time:             Tue 20 Jan 2026 02:08:28 +0000
ROA not before:           Tue 20 Jan 2026 02:03:28 +0000
ROA not after:            Tue 19 Jan 2027 02:08:28 +0000
asID:                     137443
IP address blocks:        103.97.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d9:cc:16:2b:8d:9a:1d:99:72:8f:a0:3c:76:e7:aa:38:48:f4:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
        Validity
            Not Before: Jan 20 02:03:28 2026 GMT
            Not After : Jan 19 02:08:28 2027 GMT
        Subject: CN=CBC312F85459E1FC84C0930CFBA69C2B565521D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:01:2b:04:92:57:50:e1:ef:f8:02:69:98:
                    14:dc:4e:3f:05:b4:76:be:08:59:52:1a:14:16:d5:
                    19:6a:41:73:5b:8d:c8:33:f0:e4:a6:89:dd:8a:a0:
                    ff:d7:38:5b:f6:f6:17:31:4c:15:3f:95:8f:98:b9:
                    85:aa:89:0c:8b:1b:f8:4f:db:bf:af:3d:5c:c7:0d:
                    ff:77:86:0c:9a:5a:ec:a2:79:e7:e2:8c:14:0d:4a:
                    ae:ae:49:86:33:d0:3a:4d:25:1c:2f:1d:80:aa:90:
                    12:94:c3:27:c7:b2:cb:a9:a7:63:43:8d:bd:d9:39:
                    41:dc:e0:50:ab:18:e7:67:0c:a1:91:11:a7:d2:84:
                    e0:88:b8:24:f7:82:8d:3b:c1:c4:06:1f:2f:e5:7f:
                    7a:3f:e1:35:45:79:9a:8f:ba:92:c4:d2:d4:fd:d5:
                    de:ab:be:91:e4:c7:ae:ca:0e:ef:2e:ab:7b:4b:8c:
                    bf:25:79:32:92:10:3e:1b:53:1f:29:c1:78:49:fa:
                    63:79:0a:6b:8e:7b:df:14:49:a1:2f:6a:10:15:a6:
                    d0:a6:da:0a:7d:ea:63:f4:53:98:70:7f:c8:18:e1:
                    2b:da:d8:a2:60:7b:6e:df:a9:27:1b:4a:c6:60:d5:
                    c5:42:93:4a:f1:ad:03:cc:9f:32:a4:a7:ae:62:6e:
                    0a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C3:12:F8:54:59:E1:FC:84:C0:93:0C:FB:A6:9C:2B:56:55:21:D8
            X509v3 Authority Key Identifier:
                keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35382e302f32342d3234203d3e20313337343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:13:d9:38:20:5b:31:af:c9:6f:65:c5:a1:00:4f:82:e6:f3:
         99:9f:86:1d:58:72:9d:68:b5:e6:a9:7d:e2:06:84:f6:4d:9f:
         dc:01:6b:dc:cb:9b:71:bf:2f:a9:ae:c8:58:e7:ef:09:eb:c4:
         11:13:d0:8f:cb:47:74:79:06:29:d1:60:3f:47:4c:2e:fb:49:
         60:b9:a3:bf:96:5c:4f:cc:ec:94:64:0a:46:83:88:6e:eb:d8:
         a2:e4:cc:22:5e:3b:f3:bb:8d:d1:01:72:ca:d4:39:06:a1:05:
         e2:3b:04:26:71:c2:f0:f5:7a:f0:d9:8b:23:8b:f6:66:ac:87:
         72:a3:d6:08:f0:f4:28:bf:06:c2:18:e6:e2:49:d0:c0:d4:fb:
         f5:22:7b:dd:14:cb:23:de:d4:96:25:24:f5:94:9c:a7:2d:ad:
         e4:a6:de:9f:d2:bc:a5:d2:99:68:67:a7:d1:0f:d2:a9:95:5a:
         39:50:5b:95:4f:2a:ee:05:4b:bf:2d:51:fb:3e:39:9e:6b:2e:
         b5:54:c6:94:6e:91:7e:2f:33:b4:56:ea:1a:ed:df:cf:cd:73:
         8d:d0:d8:2f:0d:fa:67:38:49:bd:cc:6b:cf:59:fe:a5:4f:6b:
         86:19:4d:28:81:73:b1:99:d8:11:5b:b8:51:38:15:a7:8a:c1:
         12:de:36:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:11:46 2026 by rpki-client