This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa
File:                     3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (raw, json)
Hash identifier:          5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=
Subject key identifier:   98:79:00:3E:73:EE:C2:18:83:F4:7F:10:B3:39:7E:61:0D:75:15:90
Certificate issuer:       /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial:       669E517C9CF2E25B9A6E94484425CADC57B19F2F
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa
Signing time:             Tue 20 Jan 2026 02:07:16 +0000
ROA not before:           Tue 20 Jan 2026 02:02:16 +0000
ROA not after:            Tue 19 Jan 2027 02:07:16 +0000
asID:                     21859
IP address blocks:        103.116.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9e:51:7c:9c:f2:e2:5b:9a:6e:94:48:44:25:ca:dc:57:b1:9f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
        Validity
            Not Before: Jan 20 02:02:16 2026 GMT
            Not After : Jan 19 02:07:16 2027 GMT
        Subject: CN=9879003E73EEC21883F47F10B3397E610D751590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c7:53:48:fd:9b:72:57:50:74:84:57:0d:36:
                    5f:11:f3:fd:f5:f1:fd:74:b8:f3:57:d4:47:05:62:
                    37:4f:42:f2:de:2e:5a:b3:3b:44:6a:5a:0c:91:9b:
                    ce:54:98:a8:8b:dd:93:20:cc:63:b1:b6:97:c7:09:
                    cc:c3:48:a6:fc:33:91:45:99:0e:71:71:85:52:a0:
                    77:3c:bd:35:59:cc:00:0c:59:07:48:77:8e:80:96:
                    e6:22:57:da:57:ac:05:a3:a1:0a:2e:07:c9:8a:c1:
                    a9:a2:9a:a8:a0:ae:78:f3:e9:91:02:e2:3f:e9:81:
                    38:5c:48:5c:09:1b:6a:ee:07:82:1f:67:28:58:ef:
                    bc:98:e2:c2:af:a2:c3:13:f3:a0:88:b5:08:d2:e8:
                    91:18:e0:59:6a:c6:74:87:44:71:31:95:79:38:1d:
                    14:91:a8:31:f4:66:ca:64:ad:15:97:0a:51:fc:2c:
                    ec:b6:95:57:7f:a5:52:21:c8:78:12:20:99:26:0e:
                    d0:52:87:70:d6:5d:f3:21:60:ec:80:ef:d1:f1:f8:
                    d7:26:56:20:48:aa:ab:ad:62:ea:b7:0c:9b:d3:69:
                    4c:a5:1f:d9:24:19:b2:76:40:03:12:ac:dd:5e:72:
                    f1:20:d3:67:33:53:e6:ae:4e:42:be:f0:03:d0:23:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:79:00:3E:73:EE:C2:18:83:F4:7F:10:B3:39:7E:61:0D:75:15:90
            X509v3 Authority Key Identifier:
                keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:54:15:c9:06:a6:48:87:7f:26:b6:84:d4:59:01:1c:49:1e:
         8f:f7:9e:c2:21:48:c1:82:52:40:40:6e:bd:1d:90:67:ff:a1:
         69:7c:b3:ea:ea:9a:9d:a8:be:cd:93:97:d0:53:8b:1d:14:27:
         d5:5e:be:7d:a1:d1:40:71:39:0b:00:24:6e:7c:c2:e4:9f:93:
         62:fb:f4:24:d3:5a:9d:6c:72:8b:4b:39:d2:d3:3a:50:21:6f:
         39:b6:5f:44:b4:d3:a1:c6:36:cd:66:6d:f4:45:14:36:e9:c3:
         8d:13:c6:e0:10:4d:63:73:7a:5b:6c:2d:9f:0d:99:df:3a:8e:
         ff:e6:af:e0:6f:8c:10:f6:4a:72:6b:7d:22:25:aa:48:b4:79:
         d2:63:0e:8f:56:d3:20:fb:39:ef:1d:b9:ed:e8:92:07:84:e9:
         f8:4f:3c:74:25:2c:b5:94:e5:f4:af:67:28:20:9f:93:75:7a:
         5b:e7:5f:fe:6c:89:5b:09:c3:30:f0:84:2d:bf:f9:8a:96:21:
         e3:22:ea:2d:2e:fd:4f:d4:d2:71:dd:82:21:92:f6:a7:42:4e:
         5f:22:c0:c4:bd:cd:c6:46:c6:cb:1c:31:7f:c9:54:00:95:6f:
         94:e7:de:f5:08:7c:7b:4c:0f:62:0c:ea:1e:ec:98:ce:c6:44:
         b7:b4:c0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:22:23 2026 by rpki-client