This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34352e3234382e302f32322d3232203d3e20313334373632.roa
File:                     3130332e34352e3234382e302f32322d3232203d3e20313334373632.roa (raw, json)
Hash identifier:          fXaH00zxc0tR+ue1P6NV/E866EoCmrbfjRJu8uyaoE8=
Subject key identifier:   53:C5:A8:AA:D5:E3:B7:CB:64:44:54:0B:5C:A6:36:D7:11:57:74:FC
Certificate issuer:       /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Certificate serial:       0250E3DBA3F17CDA6DF7B79559947FB95B70F97D
Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34352e3234382e302f32322d3232203d3e20313334373632.roa
Signing time:             Tue 20 Jan 2026 02:07:15 +0000
ROA not before:           Tue 20 Jan 2026 02:02:15 +0000
ROA not after:            Tue 19 Jan 2027 02:07:15 +0000
asID:                     134762
IP address blocks:        103.45.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 18:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:50:e3:db:a3:f1:7c:da:6d:f7:b7:95:59:94:7f:b9:5b:70:f9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
        Validity
            Not Before: Jan 20 02:02:15 2026 GMT
            Not After : Jan 19 02:07:15 2027 GMT
        Subject: CN=53C5A8AAD5E3B7CB6444540B5CA636D7115774FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:1f:7e:b6:ab:ec:9e:55:6b:63:91:9a:9c:
                    4e:1e:54:cc:de:d3:5f:96:47:98:b3:83:69:df:b9:
                    c8:eb:73:f6:86:16:f7:a5:04:f3:57:60:da:5d:fe:
                    01:d2:51:87:34:cb:e2:23:69:7d:65:ba:f2:90:35:
                    75:3e:06:04:63:c3:58:b5:65:e9:21:94:a1:48:84:
                    67:6b:2e:cb:51:1b:76:a5:ba:02:1e:b1:1a:51:e8:
                    83:0b:5e:ac:38:d6:62:01:1e:0e:3d:12:ed:b7:87:
                    78:97:cb:f8:f5:38:8b:c5:f4:cf:50:bf:d3:cc:e5:
                    57:f3:97:ed:a5:73:1a:05:b8:19:55:53:05:80:9d:
                    58:f9:25:29:da:6b:6e:79:bb:54:fc:60:78:5c:7b:
                    6c:86:e4:43:9b:41:6f:b0:d6:4b:14:af:f7:fe:85:
                    b1:ef:7c:2f:e7:1e:f6:aa:68:de:85:4f:c4:42:e1:
                    77:d1:69:89:a5:b0:b9:18:61:17:61:0f:26:67:95:
                    47:4f:01:69:8c:21:97:76:84:39:e5:b2:a4:d4:5b:
                    ea:24:60:87:16:b7:49:ed:e0:e0:19:2b:94:15:72:
                    db:6e:62:f4:a0:70:47:c0:60:64:9c:5d:65:a2:ce:
                    2e:5b:2b:46:f5:1c:83:7b:11:bb:af:8b:c1:c5:d6:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C5:A8:AA:D5:E3:B7:CB:64:44:54:0B:5C:A6:36:D7:11:57:74:FC
            X509v3 Authority Key Identifier:
                keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34352e3234382e302f32322d3232203d3e20313334373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:92:c1:11:7c:52:49:80:55:f3:de:20:d8:50:c0:21:d5:c4:
         aa:83:31:ce:47:18:a8:83:07:20:26:8e:04:aa:f4:95:34:22:
         ab:13:f8:c3:a6:d8:ae:6d:4d:39:58:90:2c:26:d5:80:66:39:
         a0:f1:60:85:2e:87:3b:fe:77:4e:fd:22:49:85:5a:74:ec:a9:
         c4:e5:81:fe:6c:b6:5e:22:65:ff:ec:a6:13:aa:55:c4:8c:24:
         3b:cf:e0:0e:ee:03:e8:89:dd:3c:8d:84:53:0d:5b:31:88:37:
         bd:9f:1c:09:8f:e8:20:d1:3b:2d:37:c2:1d:ef:31:2f:59:6a:
         20:62:86:9b:92:2c:8e:fc:42:9a:1f:bd:b7:11:29:26:5e:32:
         6e:e7:dd:27:49:d7:06:dc:e8:e5:9f:76:5f:dd:b0:f3:e5:ab:
         76:75:34:65:c2:e1:87:ea:57:84:75:cc:a8:87:72:a3:80:48:
         ea:39:27:d8:11:ce:b8:62:e1:23:2b:c8:c9:12:93:e6:2c:e6:
         29:d9:88:89:8f:67:28:53:9a:1c:a6:c0:42:d0:90:08:d2:9b:
         a5:77:d6:e0:c5:0f:f1:8a:de:e3:ed:8a:57:d7:f3:9f:6f:55:
         f0:ff:8b:ca:a1:8c:0b:f2:45:56:b3:49:a6:fc:32:bd:71:b4:
         73:f5:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:18 2026 by rpki-client