This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/3130332e3230382e34382e302f32322d3234203d3e203633363737.roa
File:                     3130332e3230382e34382e302f32322d3234203d3e203633363737.roa (raw, json)
Hash identifier:          fpE/EiwUplHjkiflwKUh3EuFdN+KdT2wGpInbK2XCGw=
Subject key identifier:   0A:C2:08:B5:D4:57:A0:B7:2A:05:8A:07:7B:C4:8D:27:B8:61:DB:87
Certificate issuer:       /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial:       7D4FC7AB30BB5945CB586B1C710B0C9E14F27430
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/3130332e3230382e34382e302f32322d3234203d3e203633363737.roa
Signing time:             Tue 20 Jan 2026 01:19:08 +0000
ROA not before:           Tue 20 Jan 2026 01:14:08 +0000
ROA not after:            Tue 19 Jan 2027 01:19:08 +0000
asID:                     63677
IP address blocks:        103.208.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 05:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4f:c7:ab:30:bb:59:45:cb:58:6b:1c:71:0b:0c:9e:14:f2:74:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
        Validity
            Not Before: Jan 20 01:14:08 2026 GMT
            Not After : Jan 19 01:19:08 2027 GMT
        Subject: CN=0AC208B5D457A0B72A058A077BC48D27B861DB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:99:28:82:d0:88:6b:ff:1b:97:43:13:38:08:
                    1d:11:a3:d8:ca:7b:89:fc:af:2f:e3:65:38:b2:5a:
                    f7:d3:81:4c:f5:02:eb:a7:32:64:1a:35:49:dd:f8:
                    38:87:11:67:95:19:82:c1:fb:4f:23:53:4a:ce:9f:
                    e9:b8:51:c7:5b:30:1a:f1:71:89:23:87:0b:87:55:
                    b6:18:06:38:1f:93:d3:ed:28:3c:20:31:d1:9e:14:
                    f0:c5:c7:0a:f6:ef:17:fa:76:7f:e8:5d:3a:90:2b:
                    4e:92:ed:0c:19:69:df:6a:65:5e:db:d2:15:07:fd:
                    4f:39:0f:6a:7e:1e:96:7e:b9:f3:0b:22:38:1c:8a:
                    1d:b4:a9:33:33:81:fb:9c:2b:14:14:a1:4b:97:a7:
                    63:f0:7c:6a:ef:0d:0d:b6:91:90:4b:5f:ea:89:3d:
                    3f:78:06:13:12:35:d9:ef:59:00:74:47:18:ab:09:
                    22:b2:8c:d5:81:d3:93:d5:13:a9:06:1c:4b:14:65:
                    cd:0c:e4:dc:6e:c1:d9:a6:55:7b:7a:30:00:9e:37:
                    3f:7d:bf:8b:d1:f4:18:ef:bc:1e:b2:e5:ff:b1:b1:
                    3f:26:01:17:21:9a:76:e6:32:23:97:82:cb:28:e4:
                    a4:e1:b6:d9:28:6d:dc:42:ce:2e:9c:19:aa:7a:53:
                    04:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C2:08:B5:D4:57:A0:B7:2A:05:8A:07:7B:C4:8D:27:B8:61:DB:87
            X509v3 Authority Key Identifier:
                keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/3130332e3230382e34382e302f32322d3234203d3e203633363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:94:96:f4:a0:67:85:64:66:d6:76:1a:2d:da:a2:d8:59:4d:
         e4:2c:01:2f:c8:ac:56:98:76:2f:64:76:4e:54:0e:97:29:cd:
         2d:d7:4b:b9:31:2e:51:69:65:ac:99:e4:31:d0:b7:02:04:76:
         94:84:9c:d0:ae:ae:a3:ea:49:d2:15:09:63:a1:78:ac:b7:5d:
         40:4e:e2:46:b7:07:fd:86:36:fc:9f:5f:89:c0:94:5b:55:26:
         13:57:1a:dc:f9:f5:f1:b1:99:c3:a9:84:15:21:18:ad:66:83:
         d7:5b:45:03:54:30:57:2c:26:c1:ee:db:94:bd:a8:9c:fd:36:
         af:7a:9d:32:eb:ab:04:1c:e8:ca:71:df:b0:61:c6:cb:e7:4a:
         4a:0b:66:c0:ed:27:78:07:d3:91:2a:7c:f0:12:a6:e9:59:a2:
         86:4e:ff:6e:ad:8c:7b:e6:20:7a:bf:bc:25:1e:86:5b:be:74:
         0b:39:06:17:33:03:47:ed:9a:c5:c2:b4:ba:eb:25:65:06:cb:
         8b:d4:64:76:f7:22:82:92:04:74:ca:ba:6c:28:83:42:04:c8:
         96:f1:0b:ad:a7:b5:23:c3:67:2d:b9:e6:a0:3e:a5:24:ad:11:
         79:2c:65:32:84:85:0c:ea:0e:d1:1c:e7:96:80:05:0b:69:16:
         2f:f3:44:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:55 2026 by rpki-client