This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37372e302f32342d3234203d3e20313430323234.roa
File:                     3130332e39392e37372e302f32342d3234203d3e20313430323234.roa (raw, json)
Hash identifier:          bVb3KiMqsznd+G3SqnVOmFkclLvpl6SNYgdpTEfv5lI=
Subject key identifier:   D4:00:5B:52:14:A9:4C:5F:09:7F:E8:D8:F0:AD:52:1B:8C:76:7E:40
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       021140C16F8B8DAEBFB5A1CFCC7C47F2D51A8B85
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37372e302f32342d3234203d3e20313430323234.roa
Signing time:             Tue 20 Jan 2026 01:19:09 +0000
ROA not before:           Tue 20 Jan 2026 01:14:09 +0000
ROA not after:            Tue 19 Jan 2027 01:19:09 +0000
asID:                     140224
IP address blocks:        103.99.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:11:40:c1:6f:8b:8d:ae:bf:b5:a1:cf:cc:7c:47:f2:d5:1a:8b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: Jan 20 01:14:09 2026 GMT
            Not After : Jan 19 01:19:09 2027 GMT
        Subject: CN=D4005B5214A94C5F097FE8D8F0AD521B8C767E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f6:2e:00:1a:a6:ca:1a:56:bc:43:af:10:20:
                    72:a2:fc:e9:90:b8:ec:66:52:8a:30:0c:63:4f:25:
                    d3:15:cd:ed:56:53:50:d0:85:e5:94:16:9c:2b:de:
                    2e:98:47:ec:7d:25:3b:09:45:dc:79:2a:22:7c:c9:
                    55:29:b5:bd:3d:46:32:bb:94:f3:53:a3:3e:25:48:
                    98:32:37:08:4d:1a:20:38:13:56:61:8a:20:c3:af:
                    7d:83:f0:26:ed:36:bf:93:e7:57:eb:e5:6a:c3:c3:
                    3a:92:66:5c:d8:aa:1a:d6:2c:7f:b8:64:51:af:c6:
                    a6:2b:b4:28:a5:43:ea:1d:60:82:d2:d0:3f:1b:3b:
                    ca:26:b6:a3:b8:b9:02:97:f8:b5:47:94:fd:f9:77:
                    fb:2f:14:40:3c:07:4c:d2:1c:fc:e5:8c:b9:94:07:
                    09:ff:36:bc:2e:59:28:70:e9:52:36:3e:71:37:6f:
                    fc:eb:1f:31:e6:d0:89:df:ed:a8:a8:0d:d7:06:26:
                    38:a4:20:d1:e2:4d:4a:25:ad:13:93:1a:3e:6a:59:
                    0d:60:d4:42:4c:68:fb:da:f7:05:1f:e0:db:bf:59:
                    95:ab:62:33:1b:41:9c:93:8d:4c:13:cf:01:0d:3a:
                    7a:19:4d:8b:52:b5:62:f9:79:2c:82:f7:7b:59:32:
                    3f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:00:5B:52:14:A9:4C:5F:09:7F:E8:D8:F0:AD:52:1B:8C:76:7E:40
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37372e302f32342d3234203d3e20313430323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:5b:06:6a:5f:12:64:97:b2:72:88:42:04:9b:2a:65:ad:33:
         d9:d0:ae:aa:a9:ef:e2:a9:6c:43:10:d3:0b:e7:b7:75:d7:44:
         1d:4a:8c:8d:99:f4:5d:58:ec:bf:d4:1d:2d:3c:35:07:36:4a:
         ef:1b:09:9c:25:d7:8e:4b:72:b1:6f:c0:b2:15:bd:7b:81:16:
         36:8d:a2:da:66:6b:36:9f:ff:b7:9b:00:5e:72:eb:d2:dc:f5:
         da:c2:ee:f0:c7:e4:41:77:72:bf:c4:12:45:8e:cb:5a:31:68:
         14:f7:49:ea:ed:b0:54:58:c5:74:c6:e0:25:8d:87:7e:45:37:
         7d:65:76:f8:a6:fb:5d:70:22:c3:d5:d4:8b:28:19:ea:d0:a2:
         94:2e:68:1e:1c:4c:25:40:c1:de:0c:64:c8:10:19:af:1b:9e:
         3f:fa:f8:65:8c:43:87:04:28:05:7d:27:12:b2:54:3f:f4:0e:
         41:a6:32:b1:eb:0f:da:a3:e0:22:b3:9d:8c:86:dd:9d:71:bd:
         fd:0e:09:65:ae:b5:d5:dd:dd:c6:1a:20:2f:cd:20:f4:e4:80:
         d4:1f:82:33:04:66:cb:b2:e1:9f:d4:e5:0f:ff:36:6d:98:58:
         fc:4e:1f:b1:b4:df:30:38:bf:7a:d5:31:6c:51:32:75:d7:80:
         ee:22:3b:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:34:01 2026 by rpki-client