This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34352e39362e302f31392d3139203d3e203633363132.roa
File:                     3130332e34352e39362e302f31392d3139203d3e203633363132.roa (raw, json)
Hash identifier:          ytuVaxbuKfHx/6663XtL86FRnQyNvO6Ke4c7ojFnJ8I=
Subject key identifier:   F5:A7:09:90:CA:DE:C1:E6:B4:85:C5:44:B0:5F:6F:21:45:86:F2:89
Certificate issuer:       /CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
Certificate serial:       017D25186F5EB8B64AE2CE74B57BD733A5605105
Authority key identifier: 79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34352e39362e302f31392d3139203d3e203633363132.roa
Signing time:             Tue 20 Jan 2026 02:07:14 +0000
ROA not before:           Tue 20 Jan 2026 02:02:14 +0000
ROA not after:            Tue 19 Jan 2027 02:07:14 +0000
asID:                     63612
IP address blocks:        103.45.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 18:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7d:25:18:6f:5e:b8:b6:4a:e2:ce:74:b5:7b:d7:33:a5:60:51:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79F151169ED7E5F1B90D10DDC5993FEE1B621929
        Validity
            Not Before: Jan 20 02:02:14 2026 GMT
            Not After : Jan 19 02:07:14 2027 GMT
        Subject: CN=F5A70990CADEC1E6B485C544B05F6F214586F289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:f0:4f:fa:3c:81:a8:a4:98:75:06:d6:b5:
                    b4:46:69:df:00:aa:5b:9d:1f:22:58:9f:ce:71:79:
                    21:8a:8d:cd:9e:bb:d5:ca:89:29:c1:c3:0b:41:ce:
                    a1:0d:04:6a:81:5e:b4:ea:0a:29:00:c2:4c:4b:47:
                    05:27:ad:3a:bc:59:5b:60:d0:ec:49:a9:02:3a:d6:
                    bd:0f:49:c1:7a:98:4c:ee:b5:f0:f0:ca:ed:b1:75:
                    77:fb:6e:91:ca:42:0f:ae:08:74:2f:c4:21:91:90:
                    b6:84:00:de:d4:6a:e9:22:79:ac:24:09:6f:26:73:
                    1c:c2:35:b1:c7:ab:1a:c0:a2:5e:30:c0:3e:b3:88:
                    53:5b:1a:b8:f6:21:e1:3e:72:78:31:df:36:52:36:
                    40:3c:05:c2:ae:ee:63:39:b0:04:ab:74:e7:14:bc:
                    ae:55:8b:c8:eb:dc:4e:90:5c:26:05:3e:a4:5e:5c:
                    d5:b5:fd:f0:ff:1a:59:cf:19:cc:af:84:46:2f:93:
                    47:d6:75:1f:10:9b:aa:22:e6:6f:c2:e6:e0:95:a8:
                    00:6d:dc:2b:92:74:a0:32:b3:36:a5:4a:6f:cc:94:
                    0a:b8:54:a4:a4:74:24:45:8c:fb:75:05:32:82:f4:
                    79:9a:ea:43:13:15:99:73:40:b2:aa:61:f9:dd:11:
                    8f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A7:09:90:CA:DE:C1:E6:B4:85:C5:44:B0:5F:6F:21:45:86:F2:89
            X509v3 Authority Key Identifier:
                keyid:79:F1:51:16:9E:D7:E5:F1:B9:0D:10:DD:C5:99:3F:EE:1B:62:19:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/79F151169ED7E5F1B90D10DDC5993FEE1B621929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79F151169ED7E5F1B90D10DDC5993FEE1B621929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129787395/0/3130332e34352e39362e302f31392d3139203d3e203633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:9c:25:7d:66:26:8d:fa:f3:a4:35:1f:41:82:49:14:78:83:
         a3:6e:a1:89:6b:60:ba:1c:e4:86:b1:44:19:f9:5c:86:3a:3c:
         ab:a2:e7:23:c3:20:63:19:eb:01:2e:b2:37:7e:8c:08:f1:2a:
         85:bf:e3:11:72:f7:70:d8:f3:ce:a2:d6:51:13:89:ef:4b:9b:
         69:a3:66:3d:ab:8e:e6:c1:2a:70:15:bf:2f:af:88:91:fc:9b:
         31:a0:ba:a2:91:69:5a:d0:3e:89:85:93:27:29:c8:c2:87:5b:
         47:2a:6b:76:13:d1:40:3f:85:ab:1e:5a:27:56:93:4c:c4:a1:
         4f:4e:18:28:f3:9a:f0:38:f6:7d:3c:5f:83:a4:a9:17:75:84:
         1e:18:28:bd:aa:f8:7c:57:8c:fb:1d:48:e4:88:d0:a3:56:d0:
         89:4f:de:96:1a:d3:b2:eb:2c:31:74:d5:56:be:51:8e:b5:94:
         63:3e:06:67:48:b3:3f:f7:19:f6:e0:8c:ed:63:49:d6:90:36:
         b1:61:3c:fd:67:cf:1c:34:03:04:ca:78:b0:ef:a2:f9:61:ac:
         fe:70:23:74:b0:61:f2:71:f8:ed:84:8d:b1:e9:0b:af:ef:93:
         db:7e:e9:97:f9:08:65:09:37:e5:24:f3:f6:cf:35:67:4f:6b:
         38:6a:ee:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:41 2026 by rpki-client