This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35392e302f32342d3234203d3e20313532303932.roa
File:                     3130332e39372e35392e302f32342d3234203d3e20313532303932.roa (raw, json)
Hash identifier:          3/58orjmzpKdtmKP2bXfseV66R6BzBQVq1m+AsGRi0M=
Subject key identifier:   F2:52:FC:81:29:25:2C:42:F6:11:08:92:56:02:56:7F:03:80:1C:E1
Certificate issuer:       /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial:       04FF7AD5047E54B885574DB3E8CF047226DAD0F8
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35392e302f32342d3234203d3e20313532303932.roa
Signing time:             Tue 20 Jan 2026 02:08:28 +0000
ROA not before:           Tue 20 Jan 2026 02:03:28 +0000
ROA not after:            Tue 19 Jan 2027 02:08:28 +0000
asID:                     152092
IP address blocks:        103.97.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ff:7a:d5:04:7e:54:b8:85:57:4d:b3:e8:cf:04:72:26:da:d0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
        Validity
            Not Before: Jan 20 02:03:28 2026 GMT
            Not After : Jan 19 02:08:28 2027 GMT
        Subject: CN=F252FC8129252C42F61108925602567F03801CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a4:d6:46:f5:a6:54:99:ab:8b:61:fc:b4:e1:
                    60:f1:53:06:23:db:89:6f:23:53:e0:c4:55:03:35:
                    be:de:78:bb:e7:65:c9:66:09:94:79:41:16:eb:63:
                    c7:a5:b3:46:f0:41:61:62:40:04:53:09:95:4c:0f:
                    9b:c1:bc:c0:2d:cf:ce:91:43:0d:57:60:fc:12:62:
                    8e:ce:0d:c4:c0:e9:01:f2:d1:5d:5e:2b:36:a4:f2:
                    39:bd:23:6f:fe:36:e7:42:8f:25:a7:83:17:50:ec:
                    24:b0:92:8e:35:72:bc:dc:64:26:fa:ec:49:a1:26:
                    ec:c8:8e:19:76:15:c0:1a:aa:49:02:dd:66:44:f3:
                    67:09:b5:b0:4b:92:f7:aa:9f:61:fd:00:34:d2:29:
                    73:98:50:8f:74:b9:9a:14:20:d6:d1:1b:19:34:a7:
                    b0:27:bc:95:15:cd:5b:05:cf:a1:02:9c:b8:65:2e:
                    a9:46:d4:08:92:93:58:f3:51:d6:a9:61:9a:2f:30:
                    92:f3:92:52:06:40:9f:b1:75:4c:04:49:56:9c:b1:
                    4f:99:e2:84:fc:a5:25:69:c9:ef:b3:aa:a9:40:16:
                    5e:d4:0d:27:e3:39:64:4e:5d:ec:14:ce:a6:bc:42:
                    d0:8f:33:a2:87:97:13:f9:f5:fb:ff:e4:47:80:8c:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:52:FC:81:29:25:2C:42:F6:11:08:92:56:02:56:7F:03:80:1C:E1
            X509v3 Authority Key Identifier:
                keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/3130332e39372e35392e302f32342d3234203d3e20313532303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:4c:58:e0:ca:3f:e3:a9:32:ae:66:5f:8d:2d:c1:17:69:df:
         6e:a9:bb:7a:81:56:fe:a1:6d:9e:43:f8:6e:58:d4:7e:29:eb:
         0c:0b:f0:1e:e0:8c:d7:c0:e7:1b:77:56:e6:91:39:8b:35:3e:
         30:3d:4f:8e:3a:06:a5:56:0b:33:d5:d4:eb:ec:da:19:55:49:
         88:89:01:60:32:f4:d3:25:d3:b3:a1:56:61:46:7f:75:ad:07:
         18:6d:df:c1:0b:2a:19:42:9e:be:df:06:83:d3:a4:83:9e:fa:
         eb:20:f5:eb:61:66:86:cf:06:23:7c:eb:d2:fd:94:79:68:e8:
         5f:06:78:3f:11:4e:13:b3:99:b2:c1:5b:b7:80:31:07:55:ae:
         86:32:9b:fb:df:e5:cd:d7:08:7e:80:fa:7f:48:a6:86:03:01:
         ff:39:b6:eb:52:e1:cd:4f:d4:9c:19:95:a9:94:54:6a:14:51:
         25:0c:60:d1:0c:0d:a2:31:b5:86:70:61:f8:0a:b7:53:83:3c:
         ba:4c:c4:c1:23:74:37:b8:71:9b:d2:16:d0:12:b4:62:9a:dd:
         cb:9c:69:76:b2:68:24:1b:3b:78:45:51:74:8d:5e:58:e0:62:
         b0:af:aa:38:c3:0a:ff:11:fa:9c:78:48:ee:ea:03:f2:e9:20:
         ea:ea:61:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:06 2026 by rpki-client