This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34342e3234302e302f32302d3230203d3e2034383136.roa
File:                     3130332e34342e3234302e302f32302d3230203d3e2034383136.roa (raw, json)
Hash identifier:          mSMVOrBaP8GPS6PtTISeOiU1fvdwIqn8HOz0Htz/pAA=
Subject key identifier:   52:15:86:CF:E7:38:3D:9D:33:07:40:48:2D:38:1C:E3:96:BD:25:59
Certificate issuer:       /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Certificate serial:       77479F0207ADE0CE50A612E9C0020D4B64AE397E
Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34342e3234302e302f32302d3230203d3e2034383136.roa
Signing time:             Tue 20 Jan 2026 02:07:14 +0000
ROA not before:           Tue 20 Jan 2026 02:02:14 +0000
ROA not after:            Tue 19 Jan 2027 02:07:14 +0000
asID:                     4816
IP address blocks:        103.44.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 18:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:47:9f:02:07:ad:e0:ce:50:a6:12:e9:c0:02:0d:4b:64:ae:39:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
        Validity
            Not Before: Jan 20 02:02:14 2026 GMT
            Not After : Jan 19 02:07:14 2027 GMT
        Subject: CN=521586CFE7383D9D330740482D381CE396BD2559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:9e:46:29:43:f0:55:c6:a7:99:2d:0a:a0:
                    19:32:73:81:9f:33:3f:1b:0b:a3:10:88:d9:3d:22:
                    bc:c9:ff:c9:b5:f6:51:0b:91:71:3b:6a:fe:b4:b6:
                    03:6e:da:72:c8:6d:c9:a1:26:a2:34:46:cc:ee:bd:
                    7d:99:fa:27:60:83:69:a5:72:4c:d7:7c:be:56:ad:
                    12:d0:73:5c:89:4a:e7:61:5e:89:2a:64:38:15:a3:
                    c8:90:8f:11:92:3f:84:17:06:95:d1:65:ca:47:0d:
                    4c:ad:56:43:9a:64:ab:ee:01:9e:f8:a7:a5:c2:5b:
                    00:06:b7:3b:06:d4:8c:29:37:48:b2:b6:21:33:f1:
                    e1:c8:3c:84:1a:1a:c2:94:97:13:b0:33:6f:ad:52:
                    04:dc:92:1a:45:d4:24:cd:c4:27:58:d4:92:08:79:
                    65:99:20:35:20:11:51:8c:ff:de:a1:04:19:6a:55:
                    9e:80:6f:92:a5:f6:43:67:5d:b6:b0:7b:75:81:95:
                    8f:ea:68:46:82:40:74:e9:9d:c7:de:90:99:9a:d7:
                    ca:4b:2d:d1:0a:ef:ae:f7:07:2a:8f:ac:09:a6:f3:
                    31:c2:08:44:fb:28:15:7a:be:22:ee:e3:28:f1:cd:
                    f0:1b:7c:97:50:0e:71:a5:b4:1d:30:20:fc:1d:bf:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:86:CF:E7:38:3D:9D:33:07:40:48:2D:38:1C:E3:96:BD:25:59
            X509v3 Authority Key Identifier:
                keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34342e3234302e302f32302d3230203d3e2034383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:4f:26:2c:6d:60:38:04:7f:1a:13:31:0f:09:c0:0d:0d:f7:
         34:95:4e:d3:b0:cb:f3:8e:83:4b:e2:2a:89:25:63:03:bc:c1:
         3c:19:2d:4e:9e:49:7e:c9:34:75:ab:c3:d4:d6:31:a0:be:fe:
         6a:f5:65:05:93:83:8e:2e:62:49:8a:fd:52:28:c5:49:d6:22:
         15:30:04:36:ee:49:99:a3:62:91:b7:4e:e7:dd:97:d2:9c:09:
         6d:4d:16:60:fc:14:e4:94:fe:cc:88:7e:3b:16:9d:48:bc:a6:
         4f:65:ca:06:35:bd:5a:50:a0:d2:cb:76:62:71:82:22:cd:43:
         25:e8:2d:65:aa:d0:c3:bf:21:0a:25:7d:cc:25:6e:78:76:9c:
         cd:15:e0:c1:82:1c:a2:f6:c9:f9:da:e8:c4:8e:84:62:ba:18:
         15:96:54:68:2d:9a:9a:bb:da:8f:a1:92:1c:c1:77:b4:05:9b:
         ed:4f:86:32:c9:81:52:0a:c4:5f:08:fd:e7:4a:e1:d4:9b:1a:
         18:1e:7c:b3:bc:4f:55:8d:a3:c2:c5:83:1f:5b:bf:05:90:51:
         4f:47:d8:d0:4c:18:39:7c:c3:7b:9e:62:f8:b9:f8:48:46:66:
         c9:93:52:6d:7a:d6:33:52:81:d8:78:b7:01:e8:55:1f:9a:53:
         f9:e5:48:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:43 2026 by rpki-client