This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa
File:                     3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (raw, json)
Hash identifier:          d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=
Subject key identifier:   6D:55:DF:8C:53:1F:76:40:55:50:A5:59:E0:38:AE:33:4A:E4:96:03
Certificate issuer:       /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial:       6C03C315F3797BA68F591C423640E63B011B8780
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa
Signing time:             Tue 20 Jan 2026 02:07:16 +0000
ROA not before:           Tue 20 Jan 2026 02:02:16 +0000
ROA not after:            Tue 19 Jan 2027 02:07:16 +0000
asID:                     140224
IP address blocks:        103.116.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:03:c3:15:f3:79:7b:a6:8f:59:1c:42:36:40:e6:3b:01:1b:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
        Validity
            Not Before: Jan 20 02:02:16 2026 GMT
            Not After : Jan 19 02:07:16 2027 GMT
        Subject: CN=6D55DF8C531F76405550A559E038AE334AE49603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:8d:9b:d1:66:f7:8d:60:2a:e5:6d:67:b1:
                    6c:8e:9a:03:21:34:15:6d:28:31:6f:7d:71:a3:f5:
                    06:93:ee:b7:22:2d:73:de:01:d1:2e:03:2b:3d:10:
                    c2:f7:79:ff:2b:6e:1d:5e:f3:63:16:30:c3:2e:32:
                    e1:34:43:4e:15:47:30:c9:5b:c4:fb:88:e2:6e:dc:
                    df:b6:75:ae:4f:ce:41:8c:7d:6f:cb:a5:6f:cd:ab:
                    a7:b3:1f:1f:74:ed:24:6f:6e:62:a7:b2:9b:3d:71:
                    bd:f7:8b:1d:8e:50:0c:70:0c:64:5a:b8:ed:c6:91:
                    38:26:1d:4b:71:c4:3d:05:a4:1a:c6:70:15:2c:66:
                    42:eb:4d:0c:08:a4:32:a7:d2:60:2d:58:37:de:41:
                    85:03:7b:61:b7:0f:a7:86:59:02:0f:16:2f:6f:47:
                    93:e8:a1:b1:2b:35:3b:a7:9e:a8:da:a3:7b:90:c3:
                    53:aa:c7:69:fa:52:21:55:ab:94:74:23:25:bb:02:
                    0e:60:02:6b:dd:02:69:77:0e:5a:fe:ef:89:c2:78:
                    ec:bb:69:d0:6f:07:45:81:b3:e5:2c:fc:66:96:8d:
                    97:6f:e9:7f:dc:2e:67:15:95:62:3c:64:da:d0:14:
                    39:ee:e3:31:13:dc:d2:19:65:8e:77:89:d3:6d:ec:
                    1b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:55:DF:8C:53:1F:76:40:55:50:A5:59:E0:38:AE:33:4A:E4:96:03
            X509v3 Authority Key Identifier:
                keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:be:89:bb:6d:0a:cb:c5:e6:46:06:69:66:52:4a:70:21:54:
         da:d3:29:b9:35:86:8b:fe:bf:e0:85:d6:b7:f5:96:33:66:e0:
         53:f5:ba:c3:98:c6:fb:2d:ad:11:e8:b9:9c:b1:1b:97:8a:3c:
         b6:e0:99:75:61:70:f0:22:96:c5:b9:3e:30:00:aa:55:8f:a2:
         33:25:15:5e:ec:6a:1e:ae:b9:61:86:31:27:af:42:dd:7e:f1:
         62:1d:ea:13:71:25:e0:dc:e8:c6:a6:dc:aa:a0:2a:9b:e2:04:
         b7:0d:9d:be:f1:4d:b5:83:24:e2:df:88:dc:45:5c:25:99:1d:
         f2:a6:04:49:85:88:0b:88:06:77:34:08:50:14:d9:13:05:06:
         c9:6b:3e:b5:01:2c:1f:e1:6d:d1:39:9e:99:0d:f4:46:84:b0:
         df:9f:75:c9:13:9b:8a:f5:5a:b2:d3:42:cc:41:a0:a5:9d:d9:
         7c:55:6d:3b:26:3d:3e:4e:db:0a:3c:29:02:b5:71:7e:b9:bf:
         2f:8b:73:ab:89:56:1a:36:61:55:ae:e7:7a:5b:81:e6:7f:9d:
         f6:65:c4:59:6a:53:37:cb:8a:bd:c5:1d:66:57:e6:d0:84:c1:
         b8:3e:4b:55:fa:c6:a5:8a:97:48:8a:c9:6b:bd:6a:81:54:bb:
         59:a5:58:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:33:49 2026 by rpki-client