This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e35322e37322e302f32322d3234203d3e203337393633.roa
File:                     3130332e35322e37322e302f32322d3234203d3e203337393633.roa (raw, json)
Hash identifier:          +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=
Subject key identifier:   94:55:5B:A6:02:90:FE:9B:9B:59:34:27:05:C6:01:65:8A:BF:CC:5D
Certificate issuer:       /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Certificate serial:       608D19F283D6949DA279C938BE0F43568829CEC0
Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e35322e37322e302f32322d3234203d3e203337393633.roa
Signing time:             Tue 20 Jan 2026 02:19:11 +0000
ROA not before:           Tue 20 Jan 2026 02:14:11 +0000
ROA not after:            Tue 19 Jan 2027 02:19:11 +0000
asID:                     37963
IP address blocks:        103.52.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 14:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8d:19:f2:83:d6:94:9d:a2:79:c9:38:be:0f:43:56:88:29:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
        Validity
            Not Before: Jan 20 02:14:11 2026 GMT
            Not After : Jan 19 02:19:11 2027 GMT
        Subject: CN=94555BA60290FE9B9B59342705C601658ABFCC5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:91:e6:99:fc:0f:2f:2d:98:8f:0c:72:4b:
                    11:2d:00:15:9c:07:0e:af:ab:05:93:91:91:9e:f3:
                    f1:85:51:5d:65:82:ad:01:d8:a8:d5:47:e0:5d:ee:
                    ec:34:f3:09:d5:7f:d2:b4:99:a1:f7:f5:41:61:80:
                    93:56:76:90:48:06:11:d1:7d:13:ca:57:7d:f4:73:
                    10:31:2f:0f:59:0c:5e:e6:d9:c8:5b:78:0d:f9:be:
                    a2:be:1a:6f:bc:fc:21:b6:0f:63:eb:d3:93:5b:a9:
                    68:14:3f:de:9e:65:ae:8e:90:d1:95:b7:14:b3:a1:
                    ae:3b:1d:8a:27:92:b8:67:6b:d6:a6:dd:90:11:d8:
                    ea:57:54:91:e0:25:f3:40:e3:35:a8:4c:a8:e0:e5:
                    af:1e:69:20:bd:14:90:63:92:d5:55:57:d2:e7:e8:
                    af:06:01:cf:7f:a9:09:a7:03:f2:cd:4c:4b:23:4a:
                    1a:e7:7c:58:08:ca:5b:e0:00:fb:0f:6f:52:d2:c3:
                    a7:7e:99:ab:98:f7:15:a1:87:43:61:24:32:50:7f:
                    95:f8:cc:28:08:e1:25:70:8f:17:fd:08:63:97:eb:
                    21:7b:d6:7c:04:a2:d6:68:36:b5:3c:99:ad:92:1e:
                    b7:96:90:cc:bf:9a:21:fc:c2:76:9c:d3:f0:38:a3:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:55:5B:A6:02:90:FE:9B:9B:59:34:27:05:C6:01:65:8A:BF:CC:5D
            X509v3 Authority Key Identifier:
                keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e35322e37322e302f32322d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:12:cc:3e:1f:54:37:1e:8f:b9:9d:90:32:3c:6c:b8:a2:fa:
         00:c2:25:b6:2a:4b:e1:cb:8f:ca:4e:42:a1:f6:a6:62:2c:0c:
         52:c7:4c:19:3c:d8:8b:63:e1:67:db:72:cc:c3:67:ab:72:95:
         c6:e3:10:36:57:10:bb:58:67:1a:3c:17:4f:d3:61:bf:91:a1:
         9b:79:d5:36:27:c5:f2:a2:f7:48:ae:a3:28:76:c6:d8:34:6c:
         85:86:c5:56:a1:40:78:1f:c2:53:1d:23:93:45:bb:82:e4:33:
         78:4f:9d:b3:59:59:be:25:76:ff:d2:43:a9:41:0d:02:15:15:
         48:8d:d5:b3:c1:ab:0f:b7:4a:41:1b:d5:27:c4:b7:dd:5a:d9:
         61:61:a8:7d:3a:21:18:10:9e:a7:f5:f3:19:32:ac:b4:2d:ea:
         92:06:7d:a1:ed:09:72:d2:7c:73:51:65:7f:5a:7b:c9:96:69:
         40:09:42:db:5d:42:b0:fa:c9:09:9a:d9:3c:a7:bf:fc:8c:25:
         66:30:39:76:45:fc:15:01:36:02:f3:63:e0:e0:f9:1e:c2:52:
         ec:6b:ba:58:1b:e9:be:f8:6e:10:50:bb:9b:af:62:59:ee:f2:
         19:cd:42:e5:ca:14:64:31:84:d8:06:aa:e9:11:1d:7c:9d:77:
         16:a1:79:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:55 2026 by rpki-client