This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e34392e37362e302f32322d3234203d3e203337393633.roa
File:                     3130332e34392e37362e302f32322d3234203d3e203337393633.roa (raw, json)
Hash identifier:          2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=
Subject key identifier:   44:EF:D6:FC:33:DC:C5:7D:2B:D8:3F:90:AD:90:C5:A6:22:82:80:11
Certificate issuer:       /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Certificate serial:       563F6FC475D9CD0292C1AB5E04095338AA43E179
Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e34392e37362e302f32322d3234203d3e203337393633.roa
Signing time:             Tue 20 Jan 2026 02:19:11 +0000
ROA not before:           Tue 20 Jan 2026 02:14:11 +0000
ROA not after:            Tue 19 Jan 2027 02:19:11 +0000
asID:                     37963
IP address blocks:        103.49.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3f:6f:c4:75:d9:cd:02:92:c1:ab:5e:04:09:53:38:aa:43:e1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
        Validity
            Not Before: Jan 20 02:14:11 2026 GMT
            Not After : Jan 19 02:19:11 2027 GMT
        Subject: CN=44EFD6FC33DCC57D2BD83F90AD90C5A622828011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d8:c6:14:b1:97:8f:7b:b3:fc:b9:8b:8f:94:
                    a8:03:ce:74:7a:12:42:c6:77:13:2e:6a:20:48:23:
                    b3:6c:48:a2:53:67:1a:ba:b6:59:02:97:49:dd:6b:
                    5d:13:61:29:16:52:46:67:4a:78:e5:b0:ee:ce:8c:
                    f0:73:0d:ec:95:04:cf:fd:73:e5:b2:a1:54:c5:76:
                    72:c8:ec:2e:61:d3:c9:97:60:93:1f:55:ee:5f:66:
                    97:8c:14:14:ed:51:e0:5c:67:ad:64:dc:0e:4f:c0:
                    a6:82:86:ee:30:b5:f5:ef:96:b5:02:f7:84:30:fe:
                    75:b3:3b:23:e6:bc:f1:a8:01:59:d8:10:97:5a:6a:
                    84:85:da:25:fa:17:34:10:c7:56:77:13:00:a2:2a:
                    8c:8a:7e:fe:72:b8:8a:b6:6b:c4:b4:2c:f3:8d:d7:
                    79:6f:3e:5a:bb:4a:f4:a9:c6:a2:b8:1b:7e:d4:db:
                    57:fd:df:d9:1e:26:ac:08:71:62:7b:58:29:44:9e:
                    0f:dc:76:f5:50:b9:28:70:43:7c:6b:44:d2:13:0a:
                    87:7b:06:cf:4b:f2:a3:ce:ef:ce:44:0f:cb:20:ea:
                    59:15:1a:fd:6b:b1:97:a8:e8:cf:44:db:5a:f1:26:
                    fe:00:25:a6:4e:38:6e:87:20:bc:36:7e:b4:e6:e9:
                    dd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EF:D6:FC:33:DC:C5:7D:2B:D8:3F:90:AD:90:C5:A6:22:82:80:11
            X509v3 Authority Key Identifier:
                keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e34392e37362e302f32322d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:33:f0:ab:23:03:77:b1:98:42:d8:e7:74:5b:df:80:6d:87:
         0a:f1:cf:af:0a:19:c0:d7:60:1d:ae:55:fe:ce:cd:0d:4e:a0:
         9a:92:1c:b9:1b:37:fb:5a:3c:98:d9:07:c5:ef:ea:78:88:73:
         92:36:8c:9b:3e:dc:fe:49:c2:96:55:bc:43:8f:d8:48:3a:50:
         2c:17:8b:9a:57:08:9c:8d:5f:41:24:91:c1:96:0a:30:c6:30:
         f6:b6:da:0a:94:e0:b6:11:54:5c:38:4e:2d:44:98:67:33:50:
         af:79:e5:5e:48:dc:08:26:80:d1:63:7c:4d:1c:51:bd:f9:f2:
         3c:79:50:52:a4:53:3d:40:67:0f:5e:17:29:a5:4b:c8:9b:ff:
         be:bf:b9:b1:14:a7:0f:37:a4:33:29:82:72:5c:9a:82:fa:64:
         6f:ce:16:30:b0:93:ff:80:a0:65:ae:73:93:e5:db:23:19:c5:
         a2:2a:58:6c:1c:3e:9b:1d:d0:eb:f5:65:bc:00:b1:33:83:42:
         d9:38:a4:83:c2:ad:3d:96:5a:ec:16:0b:3a:e5:d6:62:b4:f1:
         85:15:fc:8e:95:b1:ec:92:78:28:7c:ca:aa:60:c4:03:b0:ba:
         88:a9:0b:5b:e4:e3:a4:71:dc:af:1b:c9:25:fe:ac:69:6c:1b:
         a7:d2:10:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:32 2026 by rpki-client