This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34302e3234302e302f32302d3230203d3e2034383136.roa
File:                     3130332e34302e3234302e302f32302d3230203d3e2034383136.roa (raw, json)
Hash identifier:          QLiibejGZY+s0lzjseXtBPtD7YiiDNXaqGMCZ9IkqtI=
Subject key identifier:   4C:32:CF:80:9B:55:B9:84:12:6C:09:07:19:DB:DB:56:C3:DC:EE:C0
Certificate issuer:       /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Certificate serial:       3D7BF6BA9A5F9AC1D91899189DC17A7FAD7FB3E6
Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34302e3234302e302f32302d3230203d3e2034383136.roa
Signing time:             Tue 20 Jan 2026 02:07:14 +0000
ROA not before:           Tue 20 Jan 2026 02:02:14 +0000
ROA not after:            Tue 19 Jan 2027 02:07:14 +0000
asID:                     4816
IP address blocks:        103.40.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 18:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7b:f6:ba:9a:5f:9a:c1:d9:18:99:18:9d:c1:7a:7f:ad:7f:b3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
        Validity
            Not Before: Jan 20 02:02:14 2026 GMT
            Not After : Jan 19 02:07:14 2027 GMT
        Subject: CN=4C32CF809B55B984126C090719DBDB56C3DCEEC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:d1:15:05:56:45:43:14:69:ab:ff:76:81:
                    36:71:3c:b4:3e:b8:7d:88:7b:ea:bd:bd:f8:77:7e:
                    4f:23:6e:33:b8:ea:f8:bd:87:68:41:b2:b5:23:47:
                    d5:fe:81:fc:a2:c1:6d:fe:9c:c7:3c:83:36:ec:08:
                    a9:25:43:82:f2:36:bd:d4:da:9b:68:2e:2a:46:c8:
                    75:50:1d:7d:f0:96:32:f2:83:5b:35:64:50:9f:ec:
                    52:fd:68:46:ad:0e:89:14:5f:4a:55:05:f2:3c:89:
                    92:5b:ba:f1:d6:3d:2b:58:c5:e1:51:9f:76:19:4d:
                    7a:98:be:e3:77:94:04:fc:bb:8c:29:7f:ad:89:81:
                    c7:44:41:32:21:e1:2d:83:1c:e6:0a:b4:63:1a:f0:
                    de:08:09:68:b2:10:bd:39:e6:83:e2:13:02:ea:63:
                    a6:53:3f:27:cb:9b:17:8c:e3:83:b2:4e:ae:79:a6:
                    b9:66:14:38:7d:b4:db:6e:23:b6:d2:ff:40:5e:04:
                    94:06:dd:b9:39:fd:56:ca:38:0a:45:0e:cf:cd:e9:
                    c9:8f:3d:65:c6:8c:bc:70:a3:b3:9a:d1:d0:0a:5a:
                    66:25:3e:07:27:7d:79:7e:e9:a7:df:46:7c:c4:dc:
                    b7:14:09:dd:51:fa:f2:53:a8:22:97:60:07:84:39:
                    b7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:32:CF:80:9B:55:B9:84:12:6C:09:07:19:DB:DB:56:C3:DC:EE:C0
            X509v3 Authority Key Identifier:
                keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34302e3234302e302f32302d3230203d3e2034383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:f3:f4:91:2b:a8:40:2a:85:19:ef:3d:a3:8f:a2:89:73:89:
         00:61:ae:d0:34:70:a4:1b:32:25:98:5f:f2:3b:79:36:b2:bb:
         3f:13:e5:71:3c:08:90:94:03:ef:c9:03:cc:e8:68:da:de:c5:
         33:cb:09:44:55:fc:f3:d7:8b:6d:c4:e1:73:6d:f6:61:e4:02:
         b1:32:72:6f:2c:fb:fd:cb:13:32:1e:f8:7d:6c:c8:7a:f4:2a:
         d7:62:b2:d5:59:84:54:cc:22:a5:75:30:4a:ee:b5:4e:70:6c:
         0d:81:61:a4:cb:aa:db:66:0c:83:cb:44:92:20:c1:1d:9f:0f:
         2b:1a:2f:f6:ec:f0:f5:2c:0b:72:f8:1a:b0:e2:9b:6f:7b:04:
         22:dc:bb:e0:45:bf:66:cd:35:03:77:d6:61:b0:37:63:7c:d0:
         10:e0:34:9e:c5:25:1b:f6:82:8e:11:a2:40:1b:b9:02:77:9d:
         32:7d:2a:41:70:64:90:7f:86:86:d3:36:69:51:12:70:73:18:
         58:76:e0:f9:39:e5:9d:55:b2:6d:4a:de:ef:df:e2:48:93:a6:
         b9:fc:c0:1d:c2:e9:c2:7a:e0:6c:50:7d:48:b3:e7:61:9e:fe:
         d3:97:56:59:0c:4d:61:b4:05:c4:3c:19:85:4d:30:89:7a:88:
         ea:0d:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:46 2026 by rpki-client