This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e20313430323234.roa
File:                     3130332e39392e37362e302f32342d3234203d3e20313430323234.roa (raw, json)
Hash identifier:          avpij/pS5mE9f/XwTicGimYUM1iHh67c23vbQ/abVIo=
Subject key identifier:   DD:54:AE:D1:26:D8:C7:88:4F:2D:8C:8E:EE:7B:34:FD:06:57:A6:C0
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       6AA927352BD1A984A7D3C74650BBEAC29FF963E3
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e20313430323234.roa
Signing time:             Tue 20 Jan 2026 01:19:10 +0000
ROA not before:           Tue 20 Jan 2026 01:14:10 +0000
ROA not after:            Tue 19 Jan 2027 01:19:10 +0000
asID:                     140224
IP address blocks:        103.99.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a9:27:35:2b:d1:a9:84:a7:d3:c7:46:50:bb:ea:c2:9f:f9:63:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: Jan 20 01:14:10 2026 GMT
            Not After : Jan 19 01:19:10 2027 GMT
        Subject: CN=DD54AED126D8C7884F2D8C8EEE7B34FD0657A6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:43:9b:77:63:25:7b:dc:9e:e5:e6:a4:b0:
                    c6:3b:fc:aa:c5:db:2e:e8:ef:27:3f:75:c7:3c:be:
                    93:53:81:1b:8e:1f:82:0b:a0:f3:07:c3:43:fe:cb:
                    7a:08:28:a6:ae:c1:dc:fe:5c:2e:94:fb:28:d1:48:
                    f2:3a:91:b7:26:1c:a3:be:a0:5e:76:5e:fd:09:38:
                    e1:91:46:f7:98:e2:90:11:50:6c:37:30:f7:68:bf:
                    2a:1c:8f:8a:ca:89:39:92:29:a0:0a:70:2c:64:0d:
                    6e:5c:1d:28:27:a4:51:e0:e4:2a:f1:3d:58:19:e6:
                    9b:87:47:7f:2f:9e:8c:83:45:8a:c1:f5:10:04:af:
                    06:c9:b3:8c:1d:2b:08:6e:a0:c1:4c:ba:d5:52:37:
                    40:89:46:fc:38:fc:04:5b:cc:83:54:7a:39:9f:c3:
                    7b:df:ce:8b:60:62:05:a9:b7:65:fb:d2:4f:02:41:
                    27:34:7e:0c:5c:27:9f:d9:2a:aa:16:6b:b5:78:b7:
                    43:b8:a9:d7:9b:94:75:af:32:76:d3:f5:ac:3a:ea:
                    0c:f9:9d:59:b0:ad:6c:aa:17:29:f9:c1:7a:af:d0:
                    cb:4c:06:a2:cd:b5:2e:08:23:57:d4:07:ba:cc:89:
                    f5:8f:5f:4b:34:1f:4c:ae:bc:56:2d:f8:58:b4:a9:
                    cd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:54:AE:D1:26:D8:C7:88:4F:2D:8C:8E:EE:7B:34:FD:06:57:A6:C0
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e20313430323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:6d:5e:9a:d1:9d:85:60:b6:47:e5:fa:fd:89:16:f9:a6:14:
         15:44:e9:2c:cc:d5:c4:01:b7:d7:6d:9f:d9:8d:e9:fa:1b:1c:
         68:86:8b:ee:85:e7:dd:0b:c2:d6:f1:e1:cd:47:f3:fb:9e:b5:
         53:39:66:fc:1a:ea:30:14:62:f6:70:ee:2b:22:c4:d8:14:b1:
         27:c4:31:e1:b5:91:89:08:62:38:7c:a8:64:71:91:d5:bd:b8:
         ee:49:74:88:04:05:21:53:55:2f:e3:ef:c5:1b:ea:6e:ea:4d:
         70:10:74:b4:54:17:0e:e1:5b:6f:f5:b4:ac:95:26:33:e9:5e:
         c7:3b:0d:16:9e:8a:13:25:e6:46:4e:cb:87:15:9a:96:8d:94:
         d2:13:2a:ca:37:81:28:24:b8:d9:ec:a7:b8:7f:a5:2c:72:d2:
         8a:d7:39:a4:8e:b6:7b:bd:6e:6f:f0:10:4e:08:0c:99:2e:64:
         a0:d4:b3:0c:c4:c3:5e:6a:48:ae:48:6c:ea:b2:28:86:08:15:
         e0:76:d7:3b:e9:a5:4e:92:68:0a:51:13:08:2a:ef:b8:cf:7b:
         cd:66:79:fb:bb:9f:59:31:3d:37:6c:8e:4d:6f:92:b6:a9:78:
         4e:20:06:f9:2e:0f:0b:6e:6b:6d:8f:87:16:41:9a:07:dd:ff:
         8d:e8:f4:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:33:57 2026 by rpki-client