This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129918467/0/3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa
File:                     3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa (raw, json)
Hash identifier:          LsfX/Qz7oiSmvhoASN2bYrrYlqmPqtrZrf42D4a7EoY=
Subject key identifier:   FF:CB:83:23:33:23:6F:0F:DA:8D:E9:A1:48:A7:79:82:B1:8E:B1:88
Certificate issuer:       /CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD
Certificate serial:       52BEC2B8BFDAC793E6A1FDCAA4C6E3789BF6153B
Authority key identifier: 11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa
Signing time:             Tue 20 Jan 2026 02:23:47 +0000
ROA not before:           Tue 20 Jan 2026 02:18:47 +0000
ROA not after:            Tue 19 Jan 2027 02:23:47 +0000
asID:                     133199
IP address blocks:        103.67.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 12:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:be:c2:b8:bf:da:c7:93:e6:a1:fd:ca:a4:c6:e3:78:9b:f6:15:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114CB492139A5F5C484D3E0FB0F235EFA34C5EBD
        Validity
            Not Before: Jan 20 02:18:47 2026 GMT
            Not After : Jan 19 02:23:47 2027 GMT
        Subject: CN=FFCB832333236F0FDA8DE9A148A77982B18EB188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f5:1e:0c:4e:77:dd:f3:59:6a:78:e2:ef:c3:
                    36:96:4d:dc:99:3a:0c:a9:a4:01:ec:f2:65:56:a4:
                    b2:31:ff:a1:ff:8a:7b:b0:11:1c:50:10:3b:4f:4f:
                    a1:ed:31:7c:aa:1d:2b:18:90:4e:2f:5a:a3:7c:65:
                    4f:96:e9:f3:d6:8c:8a:10:ee:e5:c7:22:be:57:31:
                    02:a7:cd:1d:41:52:9e:eb:e8:23:51:e4:73:89:a3:
                    99:b8:cb:78:fa:fa:80:48:b2:08:dc:ad:cb:f3:42:
                    1c:a5:36:f8:f2:9d:a7:17:a1:10:53:26:50:c3:17:
                    6f:45:13:e4:d2:44:44:c7:1e:3b:b9:d3:88:cf:3f:
                    f0:e7:4d:57:64:38:90:c5:f5:76:e3:0e:20:97:77:
                    3b:b3:72:89:ce:b8:a7:f6:3a:be:ef:a1:6a:11:00:
                    c3:de:b2:9b:f2:91:94:d9:a7:02:26:e9:8c:5f:ce:
                    f8:52:4c:a8:d8:db:c0:54:9b:07:a7:d0:b1:e3:48:
                    40:1e:96:13:99:a1:0f:1a:2d:2a:1d:b2:d8:54:bb:
                    07:d9:51:21:7a:6c:0c:ce:28:06:13:69:87:84:4b:
                    01:79:f1:67:c1:79:5f:6a:aa:98:eb:af:99:fb:4b:
                    61:fd:ee:f8:3e:2b:e2:50:25:32:0c:93:d4:1e:9a:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CB:83:23:33:23:6F:0F:DA:8D:E9:A1:48:A7:79:82:B1:8E:B1:88
            X509v3 Authority Key Identifier:
                keyid:11:4C:B4:92:13:9A:5F:5C:48:4D:3E:0F:B0:F2:35:EF:A3:4C:5E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/114CB492139A5F5C484D3E0FB0F235EFA34C5EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129918467/0/3130332e36372e3137332e302f32342d3234203d3e20313333313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:2a:6d:02:90:41:0a:f8:0d:ee:79:d0:54:34:19:1d:82:82:
         41:c7:18:a8:61:87:f2:53:b8:99:52:61:e7:a0:ab:1f:39:fd:
         2a:21:9b:d6:f5:68:4d:6d:ab:ef:5d:a2:31:18:69:30:8a:37:
         b9:3a:d9:ec:62:44:60:06:29:47:c7:98:c2:2f:85:c3:77:a6:
         b3:a9:f0:f4:45:06:c3:a9:a2:b4:f4:24:b2:97:18:99:02:30:
         88:87:dd:25:09:a9:2b:8f:a9:a4:0e:82:ab:ca:ab:fb:bc:a5:
         71:ee:c1:b0:2f:8f:06:c8:49:87:29:ae:39:39:73:5f:06:92:
         8d:64:64:32:0b:0b:6f:4f:e2:7a:cf:bb:dc:5e:a9:02:f6:aa:
         e2:f3:aa:10:f7:ff:24:42:25:78:46:43:0a:60:68:82:69:4e:
         40:2e:ac:fb:61:50:ff:b8:46:a6:46:d5:3d:11:98:c0:ec:59:
         f6:c8:35:6f:3f:dd:12:7a:5d:bb:c6:74:70:23:af:dc:9c:6b:
         f6:ce:23:c4:9b:50:94:4d:f9:2f:3a:1d:f9:29:78:43:01:d9:
         c4:a9:76:ee:95:05:91:27:04:50:d1:75:80:15:02:76:92:7c:
         cf:d9:fc:f2:b5:d4:52:54:8c:cc:e0:82:2d:9c:ae:c3:d2:84:
         ce:4b:e3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:52:27 2026 by rpki-client