This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32322d3234203d3e203231383539.roa
File:                     3130332e39392e37362e302f32322d3234203d3e203231383539.roa (raw, json)
Hash identifier:          5zg34dumFUNcisZgSXdG450ByL+s68I7tPcsYSA0NWQ=
Subject key identifier:   DC:7B:D5:45:BC:FC:D7:A1:31:E1:13:89:C8:A7:C2:C3:F4:3B:49:4E
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       731DE18703558531C3F909B4A21E19DB287CA9E2
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32322d3234203d3e203231383539.roa
Signing time:             Tue 20 Jan 2026 01:19:10 +0000
ROA not before:           Tue 20 Jan 2026 01:14:10 +0000
ROA not after:            Tue 19 Jan 2027 01:19:10 +0000
asID:                     21859
IP address blocks:        103.99.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1d:e1:87:03:55:85:31:c3:f9:09:b4:a2:1e:19:db:28:7c:a9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: Jan 20 01:14:10 2026 GMT
            Not After : Jan 19 01:19:10 2027 GMT
        Subject: CN=DC7BD545BCFCD7A131E11389C8A7C2C3F43B494E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:22:12:58:dc:7e:19:74:20:85:59:d6:22:4e:
                    4c:76:78:57:66:45:75:2a:7d:29:f4:be:9d:79:76:
                    af:e9:d4:c3:cb:be:0f:35:cf:5b:9d:f6:65:4a:84:
                    53:ea:2e:46:c2:b2:14:b8:bf:d7:ae:ce:f2:cb:42:
                    03:74:79:c4:11:41:dc:31:55:54:5b:42:ef:ed:c4:
                    cd:df:4a:57:2b:f6:85:cf:41:cb:3b:40:ab:c0:c9:
                    af:80:bc:43:e9:50:6b:b5:44:64:7e:80:74:c8:41:
                    86:ba:f0:ba:ac:5f:df:84:35:17:16:4d:9c:82:14:
                    44:b4:8f:ee:0c:ae:45:2d:0b:a5:84:ca:fe:b4:53:
                    76:f1:da:e1:f6:a1:6e:57:58:58:7a:f7:b0:42:5a:
                    ef:b1:f3:64:d1:f0:49:8f:b4:4f:ed:be:a7:09:fc:
                    e3:a6:f2:4c:df:0c:30:69:7d:54:7e:e2:6c:aa:7e:
                    7b:92:75:8e:c2:50:10:81:fa:1c:b7:a9:3f:e3:11:
                    8f:b4:a0:4b:b7:70:bb:fe:95:f2:63:21:ad:2f:f9:
                    d1:7b:9c:bd:4c:63:a3:9e:9c:16:1d:6f:d4:d1:e8:
                    a6:f8:5a:95:a6:1a:a6:f1:fb:f2:a4:51:7d:a3:ef:
                    10:57:c8:00:d4:b6:32:a8:e9:67:1a:20:4b:4c:85:
                    27:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7B:D5:45:BC:FC:D7:A1:31:E1:13:89:C8:A7:C2:C3:F4:3B:49:4E
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32322d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:30:71:c0:11:6f:3a:51:51:75:0a:ef:21:99:04:0f:9c:78:
         ca:3b:6e:64:c6:2b:c1:53:d9:5d:8a:39:c2:b3:2f:c5:0c:e0:
         96:32:2f:33:59:b6:e8:92:6e:7f:ef:88:34:f8:7d:ef:f0:79:
         89:be:ce:cc:f7:55:43:32:0c:bf:01:db:84:61:89:6b:ba:a2:
         6d:0b:3e:30:d3:2e:9a:38:bf:fd:7a:95:55:de:fe:50:74:e5:
         e1:f4:f3:4e:f7:b7:c0:de:18:77:1c:06:5e:4b:8e:d9:ee:c5:
         61:fb:5d:24:76:d7:fe:69:0b:df:ea:48:1e:49:fc:05:de:63:
         4c:6b:8b:65:fe:42:64:a5:3d:9c:d0:5b:a7:d4:73:95:df:34:
         e7:35:3b:93:63:1e:6e:fc:61:1e:c7:75:5c:a2:3f:6c:e8:ce:
         41:48:87:16:e2:c0:f8:a9:06:4f:c2:d5:60:a6:bb:4d:96:a4:
         ba:47:78:0e:3b:36:f8:9f:6a:69:2d:9a:fa:da:08:ae:04:9a:
         ba:d6:52:4a:a9:a1:5b:70:ca:a8:26:2d:6e:ea:d8:29:f9:13:
         73:3c:44:1b:97:45:28:79:a3:da:a0:b6:fb:fb:8b:8a:16:b8:
         36:0c:ac:d1:70:86:97:0f:3f:54:2f:1f:8b:9e:cf:0b:39:ea:
         76:bb:7a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:23:00 2026 by rpki-client