This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa
File:                     3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (raw, json)
Hash identifier:          GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=
Subject key identifier:   D0:49:DE:04:C7:8F:31:BE:01:A2:8C:38:F2:2D:79:28:DD:66:17:48
Certificate issuer:       /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial:       585406806A2DF5B66BDF5D05B12B51DF1581B901
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa
Signing time:             Tue 20 Jan 2026 02:07:15 +0000
ROA not before:           Tue 20 Jan 2026 02:02:15 +0000
ROA not after:            Tue 19 Jan 2027 02:07:15 +0000
asID:                     41717
IP address blocks:        103.116.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:54:06:80:6a:2d:f5:b6:6b:df:5d:05:b1:2b:51:df:15:81:b9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
        Validity
            Not Before: Jan 20 02:02:15 2026 GMT
            Not After : Jan 19 02:07:15 2027 GMT
        Subject: CN=D049DE04C78F31BE01A28C38F22D7928DD661748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:2a:3b:4d:78:be:27:2e:cb:9d:53:4c:83:
                    e4:4c:14:56:e0:77:16:48:82:5b:0c:3c:51:ef:69:
                    46:f1:c8:cd:2c:ed:29:4a:be:5d:64:54:bc:1a:c9:
                    40:bc:a6:1f:c6:35:1a:e2:fd:2e:86:91:dc:fc:f9:
                    3d:99:05:49:8f:2a:7b:67:8e:04:31:e6:e2:eb:42:
                    05:f3:a7:2a:2f:ba:fc:99:95:b5:fe:ca:32:a8:ed:
                    00:84:2e:a0:32:fc:aa:0e:a3:49:1f:29:7f:70:a5:
                    22:51:0e:48:91:30:60:97:39:ca:2a:d0:f7:aa:68:
                    5c:ee:ae:b9:b3:b5:8a:53:e0:aa:45:db:e6:8a:8e:
                    6c:57:7e:93:ce:36:9d:dd:f9:49:76:a9:cc:04:20:
                    ce:b1:95:36:8f:5b:9f:a0:18:84:49:53:25:c0:7c:
                    61:5c:9e:ff:43:7e:fb:37:2f:21:f8:78:60:ac:81:
                    db:2c:4f:9d:47:79:3d:a0:19:92:47:cd:d0:fe:46:
                    39:74:1c:9e:28:3f:3e:46:19:c1:15:ec:90:c3:b8:
                    1c:22:88:4d:96:fa:68:a9:c0:7f:2e:cc:a0:1a:6c:
                    e7:df:15:de:95:17:2d:0e:dd:7f:18:df:54:1b:fd:
                    2e:e8:33:48:f7:db:cf:8c:ce:d6:d1:b1:3f:a4:84:
                    ae:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:49:DE:04:C7:8F:31:BE:01:A2:8C:38:F2:2D:79:28:DD:66:17:48
            X509v3 Authority Key Identifier:
                keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:15:b8:da:6e:7d:98:ca:42:c4:9d:b0:57:60:88:d5:ba:e1:
         88:73:ed:ba:06:e8:e0:8e:d4:f4:72:a3:75:a8:d6:e3:ce:3a:
         d1:e2:aa:ff:88:5b:73:fa:d4:93:04:5d:5e:e4:46:cd:ff:5f:
         83:25:15:54:66:2f:8e:c6:66:5c:50:aa:b3:09:48:5b:c0:69:
         da:c1:c3:d9:88:24:4f:d7:7f:bc:83:11:75:77:b0:ee:3b:c4:
         15:25:af:de:62:c8:4a:32:a4:4b:dd:52:91:05:37:54:d5:ae:
         ff:3f:37:de:10:51:d7:5e:c2:5c:06:c8:e3:af:d3:94:b0:aa:
         64:17:37:ad:e8:bc:7f:d9:e2:77:ec:c8:ea:04:9c:fe:f4:83:
         b0:30:5f:89:52:cb:a0:99:25:e4:c9:a0:62:8c:6c:0d:e3:cd:
         b8:73:c5:ea:f7:92:6b:22:1c:22:f1:88:50:89:a0:fb:17:64:
         76:7d:42:db:b3:7e:5c:23:f0:c3:19:ec:74:a4:3d:ce:3a:0e:
         0c:bf:11:76:3d:72:0a:bc:76:31:40:5f:51:dc:a9:6f:57:d1:
         a7:c3:7b:8b:4c:af:b6:96:fd:a7:ec:7b:6d:32:10:71:e3:4f:
         2b:eb:97:82:34:43:1a:39:8c:49:07:56:b1:c0:55:c1:2c:a3:
         bd:54:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:27:45 2026 by rpki-client