This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37382e302f32342d3234203d3e20313430323234.roa
File:                     3130332e39392e37382e302f32342d3234203d3e20313430323234.roa (raw, json)
Hash identifier:          qjnV38DKUxCDOv1ngp1bgr3h6x3YSxbbfA2LfRTQ2t8=
Subject key identifier:   60:E2:68:1B:8B:A0:BF:6A:4C:20:21:CE:0F:E2:76:19:CC:6B:1B:AF
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       16E926E77D5443E8641A6ED406D76E5AD5ACE2D1
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37382e302f32342d3234203d3e20313430323234.roa
Signing time:             Tue 20 Jan 2026 01:19:09 +0000
ROA not before:           Tue 20 Jan 2026 01:14:09 +0000
ROA not after:            Tue 19 Jan 2027 01:19:09 +0000
asID:                     140224
IP address blocks:        103.99.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e9:26:e7:7d:54:43:e8:64:1a:6e:d4:06:d7:6e:5a:d5:ac:e2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: Jan 20 01:14:09 2026 GMT
            Not After : Jan 19 01:19:09 2027 GMT
        Subject: CN=60E2681B8BA0BF6A4C2021CE0FE27619CC6B1BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:ae:22:69:6a:0f:81:01:bf:d9:59:6d:07:
                    eb:9d:dd:a2:55:19:5a:54:c3:db:68:e4:22:e4:c8:
                    73:3b:e9:36:43:09:4a:27:eb:3c:74:d1:ab:b6:2a:
                    66:63:e7:b5:4f:7d:12:67:f8:a6:a6:0b:08:a0:5c:
                    37:c5:a6:5b:08:e8:13:ad:b1:b6:c3:4b:27:e3:d6:
                    14:8f:8f:70:b9:14:ab:10:36:7d:17:da:c4:77:f1:
                    ee:d3:eb:07:7a:4a:b6:a9:8d:0d:49:39:f6:4e:2f:
                    00:b9:75:23:32:aa:b9:dd:df:98:09:a6:15:87:fd:
                    96:5d:ae:aa:c8:62:32:34:d8:1a:6f:3e:3f:55:7e:
                    4a:e3:df:3a:0d:b9:f2:cd:57:8f:4c:a2:d5:2c:33:
                    b9:19:8c:88:f1:bc:f7:29:d4:a8:56:f9:9d:53:86:
                    b8:56:a6:f4:5a:e1:26:c8:97:b3:90:f5:9f:c6:1f:
                    bc:c0:72:a4:82:f6:b1:b0:fa:84:d9:eb:f3:98:f5:
                    6e:0a:a7:42:53:ca:af:d5:97:66:b5:e9:d2:04:c7:
                    5f:09:ad:4f:73:32:95:2f:d8:8b:88:6d:a9:eb:b7:
                    8d:09:f7:7a:d2:7c:96:4e:63:90:93:c9:9c:c2:c4:
                    d0:85:ca:4f:43:30:08:16:54:25:db:8d:07:7d:2c:
                    62:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E2:68:1B:8B:A0:BF:6A:4C:20:21:CE:0F:E2:76:19:CC:6B:1B:AF
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37382e302f32342d3234203d3e20313430323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ca:eb:f3:5e:4c:46:c9:9a:93:69:8f:71:1f:2a:8a:4c:c1:
         63:00:24:aa:00:e7:5b:1c:1a:e7:c2:45:8a:2c:03:1b:57:4a:
         aa:4b:15:60:b2:8c:a2:9d:95:a1:76:03:72:08:3f:28:11:27:
         83:cd:6b:ad:2a:48:ba:f3:92:cf:2a:92:e0:c0:0a:3e:42:94:
         6c:cd:80:a9:ca:8d:0c:92:5c:ca:88:9e:58:3a:ef:06:9e:27:
         0b:f4:30:53:aa:1e:e1:fd:16:39:fd:2c:7e:7c:47:40:71:38:
         3b:69:20:ec:c3:f9:8f:99:20:04:e8:c5:9c:1a:8e:3c:56:2e:
         7f:d2:ee:2e:a7:a3:ad:81:36:f8:87:d2:4c:b3:05:94:0c:3e:
         2c:f8:11:d1:00:92:3b:15:39:f5:12:4e:18:22:d5:21:b4:34:
         be:9a:a9:a8:be:31:5a:47:70:31:bb:27:d1:46:09:44:2c:28:
         de:5f:86:12:43:0a:44:4c:f7:52:79:bc:97:ff:af:5e:30:4d:
         bb:c4:94:ca:b7:af:3a:84:fa:7c:38:65:88:3c:99:d7:d2:ec:
         14:cd:10:4e:0e:79:06:05:e3:45:0d:58:1c:16:f6:a9:61:44:
         7c:d3:04:a6:24:8b:f6:31:d0:8a:3c:52:8b:e1:74:93:8a:fa:
         35:23:d2:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:33:56 2026 by rpki-client