This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34342e3233362e302f32322d3232203d3e2034383136.roa
File:                     3130332e34342e3233362e302f32322d3232203d3e2034383136.roa (raw, json)
Hash identifier:          jDHp7YWBRkrqrYoMmJryoIxBWIW4KnNbKM3I1XgqM80=
Subject key identifier:   F3:1F:DB:F8:7E:D1:6B:89:90:EE:2A:22:77:97:C1:B3:5C:25:27:E8
Certificate issuer:       /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Certificate serial:       6C49C403D2AA2893D99CF3CCACAD0E241886CA1D
Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34342e3233362e302f32322d3232203d3e2034383136.roa
Signing time:             Tue 20 Jan 2026 02:07:14 +0000
ROA not before:           Tue 20 Jan 2026 02:02:14 +0000
ROA not after:            Tue 19 Jan 2027 02:07:14 +0000
asID:                     4816
IP address blocks:        103.44.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 18:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:49:c4:03:d2:aa:28:93:d9:9c:f3:cc:ac:ad:0e:24:18:86:ca:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
        Validity
            Not Before: Jan 20 02:02:14 2026 GMT
            Not After : Jan 19 02:07:14 2027 GMT
        Subject: CN=F31FDBF87ED16B8990EE2A227797C1B35C2527E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d0:2c:fe:c5:54:6c:cf:27:77:0b:ce:b5:79:
                    e5:a4:51:f5:88:5f:4a:ca:44:35:58:a5:42:1b:50:
                    41:e8:3f:8c:66:96:5a:8a:7b:a7:b6:b5:f3:b3:ad:
                    67:cb:ad:b7:99:67:9a:ca:0d:59:b2:58:78:98:b5:
                    48:6a:66:be:28:d6:c4:9a:95:1c:9a:6f:11:3b:2f:
                    22:c6:91:1b:03:f5:88:28:41:a8:1d:e0:be:5f:72:
                    50:9a:9c:0d:21:40:dd:b7:31:3c:4e:8b:1a:3e:3e:
                    1b:b5:93:32:a2:1a:a2:3e:b2:87:5c:c3:ed:72:bc:
                    d0:21:cc:09:38:dd:7b:f4:2b:97:11:4e:78:d4:4e:
                    92:7a:bc:90:f8:ae:ee:e8:27:ce:cf:88:19:b9:cb:
                    8d:24:e9:09:d4:ac:bd:e7:29:1a:c3:f1:0f:a9:2b:
                    c9:89:0e:ca:9f:ba:78:ac:4c:5e:c8:25:3b:00:23:
                    02:01:76:e9:cd:43:16:73:bd:72:68:93:11:69:47:
                    99:87:b7:c7:36:99:52:87:17:51:58:a2:f7:ce:4d:
                    1b:14:1a:3f:0b:5d:f6:a9:67:39:f7:50:2e:0c:39:
                    71:1a:5f:54:ab:0a:57:a4:be:e0:ac:be:54:fa:42:
                    da:5b:b8:c7:ae:07:34:99:44:dc:5c:95:a2:e5:1b:
                    57:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1F:DB:F8:7E:D1:6B:89:90:EE:2A:22:77:97:C1:B3:5C:25:27:E8
            X509v3 Authority Key Identifier:
                keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34342e3233362e302f32322d3232203d3e2034383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:e4:a6:15:4b:d8:bb:0c:d0:e0:82:3a:47:0c:62:82:10:0f:
         4a:8d:42:30:33:17:19:b3:50:10:7a:22:45:d0:09:a4:06:62:
         d4:f5:56:79:b3:0d:39:8a:cc:6a:4f:08:65:08:0c:c7:47:37:
         62:3f:33:32:62:26:4d:88:6d:40:3f:85:f3:62:e1:dc:f1:ff:
         fb:db:61:89:70:13:03:3e:b9:16:8e:ef:8e:ef:09:8d:db:f2:
         d6:4b:94:ff:f3:90:ef:e7:c6:41:b7:e6:d2:96:fd:f6:0c:e0:
         7f:5c:e7:98:50:35:37:00:a6:eb:be:01:00:fe:28:fd:f2:d1:
         6f:3f:ff:24:9e:e5:bc:2d:c3:98:ad:47:a9:2b:9b:ad:79:b0:
         39:a3:3b:2a:84:16:b0:83:85:6e:a6:a0:55:73:47:d0:e9:28:
         a7:f2:3b:e7:e7:84:8f:36:b8:ec:12:6a:e4:ec:c1:70:65:bc:
         78:6f:6b:8f:03:5c:51:64:b8:52:4b:e8:eb:63:27:77:8e:a8:
         2d:27:a9:92:87:95:1b:24:87:9b:27:5b:3d:c6:69:43:cb:cf:
         d3:00:5f:ac:cc:47:c7:eb:32:c1:89:5e:48:ca:69:25:c5:1a:
         5b:43:d3:77:50:50:ca:57:6f:fc:2e:b7:e1:66:e4:26:16:10:
         80:38:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:14:19 2026 by rpki-client