This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e20343031393232.roa
File:                     3130332e39392e37362e302f32342d3234203d3e20343031393232.roa (raw, json)
Hash identifier:          CGfD08+TmI17n0MyXF3V8T9GaHZ26XvTL68LzNKieJM=
Subject key identifier:   84:E3:D4:FC:5B:32:6E:40:A0:2F:F6:72:4D:67:4C:7A:8F:87:4E:B7
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       7FFDE14249A8B6594DF99152E18BF80ED8AF7126
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e20343031393232.roa
Signing time:             Tue 20 Jan 2026 01:19:10 +0000
ROA not before:           Tue 20 Jan 2026 01:14:10 +0000
ROA not after:            Tue 19 Jan 2027 01:19:10 +0000
asID:                     401922
IP address blocks:        103.99.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fd:e1:42:49:a8:b6:59:4d:f9:91:52:e1:8b:f8:0e:d8:af:71:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: Jan 20 01:14:10 2026 GMT
            Not After : Jan 19 01:19:10 2027 GMT
        Subject: CN=84E3D4FC5B326E40A02FF6724D674C7A8F874EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:96:04:71:8c:05:66:61:84:31:6b:7b:c8:7e:
                    1b:9e:f9:9d:79:58:fd:e8:d5:fd:b0:91:43:84:66:
                    13:04:5d:d6:93:52:9b:62:fa:ee:0d:2a:b0:c2:96:
                    82:b7:29:e1:41:b7:8f:e3:57:54:25:8a:77:65:a8:
                    8a:b4:eb:84:7f:cf:8e:33:18:a1:43:cc:da:03:48:
                    f2:8c:f1:e6:82:e2:87:db:d4:80:cb:56:e3:19:19:
                    6c:c7:fb:0c:df:f4:7a:1c:3f:1b:bf:1e:65:13:ba:
                    bc:30:2c:0d:bf:c2:43:47:aa:b0:47:3e:6a:18:35:
                    7c:63:a2:76:a3:bc:81:b7:5e:62:0e:52:a3:d1:40:
                    91:f9:78:70:13:f6:4c:62:3e:36:55:3d:04:f6:1c:
                    66:cc:92:62:d4:94:cd:6c:2b:bc:4a:ac:ae:cb:2a:
                    08:0f:c4:ed:6c:03:07:fc:31:19:51:3b:8f:50:de:
                    c0:19:26:e8:d8:93:4e:c3:74:07:7a:f2:45:9f:a7:
                    b0:d8:78:ce:33:c1:7f:23:29:6f:b2:3b:15:2d:aa:
                    00:61:df:c5:b6:2c:10:18:cf:91:76:52:7a:ec:05:
                    42:01:db:4f:4e:46:0d:5e:cc:5d:4e:2e:52:be:23:
                    3b:f1:bb:dc:07:a3:81:02:98:18:9c:5f:4f:c0:a1:
                    78:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E3:D4:FC:5B:32:6E:40:A0:2F:F6:72:4D:67:4C:7A:8F:87:4E:B7
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37362e302f32342d3234203d3e20343031393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:e1:24:b0:d3:62:5d:8b:f7:95:c5:49:7c:db:3d:7d:14:2a:
         37:df:fa:91:83:8a:5c:52:fc:31:21:99:df:a0:40:f3:13:e7:
         24:24:d1:f2:16:42:b1:b8:d6:29:c7:a9:d5:6a:a9:d2:90:bd:
         fa:f5:1e:6d:8c:a3:fe:bf:c9:50:2c:41:42:5b:f8:e4:0f:a7:
         d4:57:52:5c:92:fc:3e:d2:83:c4:02:38:44:9a:da:ce:c7:9f:
         64:be:ce:53:c3:cd:6d:6f:f4:98:d5:a7:51:7b:f6:49:14:4a:
         29:5e:85:0c:f3:54:d4:1c:aa:b2:bb:0a:73:44:db:69:6d:50:
         37:40:04:1f:be:e6:ac:6c:b2:c4:25:a9:22:aa:0e:6b:09:cf:
         24:21:2c:b6:04:de:1b:53:e9:91:ed:f4:90:ff:07:1e:5b:e8:
         ac:59:95:e5:99:22:f2:3d:66:58:3f:e9:77:99:41:56:6e:20:
         96:57:99:95:38:8b:26:a3:81:8c:8f:46:72:2c:55:c4:e8:ae:
         f0:d7:e9:d4:5c:a1:5e:e7:60:40:90:77:2e:cb:0e:f4:e6:11:
         36:20:84:4f:18:34:fe:92:6c:2c:82:67:dd:7b:f2:c9:04:fe:
         3d:4a:b6:6d:de:46:80:93:56:92:05:14:68:55:28:a6:10:e2:
         52:31:5d:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:37:45 2026 by rpki-client