This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34352e3137322e302f32322d3232203d3e20313334373632.roa
File:                     3130332e34352e3137322e302f32322d3232203d3e20313334373632.roa (raw, json)
Hash identifier:          LXe9UoLF5HxrqCopFTH/2+CIE/OM0kuacxM2MNLyohc=
Subject key identifier:   E4:1D:7B:3C:EB:8D:8C:2D:A2:D6:E4:2F:D2:3B:64:6D:8D:14:19:0A
Certificate issuer:       /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Certificate serial:       297A80AEF76E0C4B612E27658C2866B463067B7E
Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34352e3137322e302f32322d3232203d3e20313334373632.roa
Signing time:             Tue 20 Jan 2026 02:07:14 +0000
ROA not before:           Tue 20 Jan 2026 02:02:14 +0000
ROA not after:            Tue 19 Jan 2027 02:07:14 +0000
asID:                     134762
IP address blocks:        103.45.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 18:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7a:80:ae:f7:6e:0c:4b:61:2e:27:65:8c:28:66:b4:63:06:7b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
        Validity
            Not Before: Jan 20 02:02:14 2026 GMT
            Not After : Jan 19 02:07:14 2027 GMT
        Subject: CN=E41D7B3CEB8D8C2DA2D6E42FD23B646D8D14190A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:6f:ff:c2:0f:76:1d:d9:52:22:8a:88:56:
                    cb:42:7c:9d:dd:9c:ec:86:e5:b8:35:1f:7a:6f:46:
                    0d:df:7a:e2:b1:76:ab:7a:f4:35:65:8e:9c:09:c1:
                    3f:7e:45:2b:25:d4:c0:04:7e:13:be:e7:92:fe:0c:
                    d1:0c:77:c3:4e:b3:e0:85:0e:f1:67:33:9b:d5:41:
                    42:63:70:76:bf:1e:6a:19:ad:e7:0a:18:65:dd:f3:
                    5d:3f:dc:77:ea:79:08:1f:6e:49:91:c0:ad:1f:c4:
                    68:8a:24:b4:8d:fe:e3:c7:c1:4f:0c:3e:4b:91:13:
                    1a:5e:43:96:00:31:9e:3a:b1:c7:31:62:bf:58:68:
                    f7:44:bf:c1:4a:d5:aa:1e:7e:a5:3b:b1:e4:e9:e9:
                    2c:e0:09:5f:64:1b:64:03:32:7e:66:72:3f:0f:01:
                    be:21:18:d5:5b:52:dd:ad:e0:5c:d8:bc:31:60:c3:
                    7b:4e:17:ac:72:98:27:bd:f3:d1:22:cb:5b:5c:ed:
                    64:66:0f:e8:de:fa:38:5b:5a:04:19:33:8b:5a:9c:
                    83:b0:22:f7:f3:a2:c8:68:bb:72:35:30:44:80:7b:
                    7e:2b:8f:81:d4:47:9c:3d:59:0e:90:38:83:f9:46:
                    73:5b:e1:05:ec:9f:36:a5:35:cc:33:2c:d0:1c:be:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1D:7B:3C:EB:8D:8C:2D:A2:D6:E4:2F:D2:3B:64:6D:8D:14:19:0A
            X509v3 Authority Key Identifier:
                keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34352e3137322e302f32322d3232203d3e20313334373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:16:15:f0:b3:1f:27:9b:f7:f3:87:49:55:6f:43:d2:db:04:
         1b:ec:11:1d:cd:29:ea:03:e1:de:8a:7b:ed:8a:8e:42:35:27:
         2f:20:c4:78:9b:73:a4:24:d8:a7:f5:f6:f6:7b:c5:e6:dc:e9:
         4f:2d:48:77:c6:03:32:a7:d3:2e:cc:d0:c2:ab:32:5e:7d:c6:
         83:28:1f:99:03:b9:fd:eb:d1:41:fa:c9:c2:d4:e9:26:5e:c4:
         e6:75:c0:74:6d:a9:a7:e7:4d:6c:35:e2:50:bc:72:fe:77:94:
         e1:80:64:70:50:6c:50:49:79:c5:62:3a:57:73:0a:52:00:12:
         b5:b1:78:27:5d:12:62:ca:f9:0c:16:92:e7:04:e2:d6:12:6f:
         71:ee:d9:1c:26:0c:53:bc:a8:99:90:61:96:cf:fe:51:d6:b0:
         7b:f6:cf:8f:e4:05:b8:e6:e2:04:44:60:5d:c4:69:b9:74:a3:
         28:ce:ce:b1:fc:e6:b4:4a:43:fa:17:df:92:ce:96:04:86:ea:
         a0:21:93:c8:3d:dd:a6:9f:59:c6:ab:24:48:8c:51:a6:8a:e3:
         47:28:00:ce:57:36:0d:0e:e3:a9:0d:2b:d5:b9:49:6f:68:9a:
         e8:b7:57:f4:57:0b:c6:cd:ab:6b:24:b2:8c:28:be:60:7d:fc:
         37:fe:b8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:14:00 2026 by rpki-client