This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e35322e38342e302f32322d3234203d3e203337393633.roa
File:                     3130332e35322e38342e302f32322d3234203d3e203337393633.roa (raw, json)
Hash identifier:          648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=
Subject key identifier:   30:4F:3A:18:0E:B9:36:B9:3A:D5:57:88:16:4A:2D:0F:5A:5F:30:BF
Certificate issuer:       /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Certificate serial:       5E81BF13745E1206FD8BAC6BAB050EC78122640A
Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e35322e38342e302f32322d3234203d3e203337393633.roa
Signing time:             Tue 20 Jan 2026 02:19:11 +0000
ROA not before:           Tue 20 Jan 2026 02:14:11 +0000
ROA not after:            Tue 19 Jan 2027 02:19:11 +0000
asID:                     37963
IP address blocks:        103.52.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:81:bf:13:74:5e:12:06:fd:8b:ac:6b:ab:05:0e:c7:81:22:64:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
        Validity
            Not Before: Jan 20 02:14:11 2026 GMT
            Not After : Jan 19 02:19:11 2027 GMT
        Subject: CN=304F3A180EB936B93AD55788164A2D0F5A5F30BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5c:56:ae:3a:05:ad:37:0c:d0:d3:9a:2b:4a:
                    7f:18:28:10:eb:74:af:b2:5a:c5:9b:35:5e:df:d5:
                    95:98:0a:4f:ef:d9:b2:0f:28:24:d9:d2:5e:9a:b8:
                    28:27:36:de:b0:36:a2:75:62:4a:da:b3:be:ac:2d:
                    0b:e2:49:09:56:6c:94:c2:bb:3e:2d:e6:a1:14:0b:
                    ce:82:8e:9a:9d:0e:05:03:7f:82:a9:dd:5f:20:52:
                    5f:c3:eb:c5:46:44:3e:13:c8:ac:04:47:35:97:a1:
                    b8:f9:ab:e0:b2:7c:37:b7:c1:e7:0b:3d:67:db:96:
                    45:25:ab:2c:e3:85:6d:a6:d7:49:1d:c0:4c:35:c9:
                    1f:44:9e:48:ac:e1:bc:d6:4c:a5:56:51:24:9d:ea:
                    c6:c1:67:ef:fc:77:ad:ba:4c:ca:61:0d:c2:98:fd:
                    6b:c1:b8:a5:5c:f2:3b:99:51:4e:6a:f6:00:c6:87:
                    b5:ca:36:21:a3:25:5f:d7:0f:b9:36:9f:c7:84:5e:
                    6c:ac:d6:99:dc:a1:56:2f:45:95:82:5c:77:72:aa:
                    8b:77:54:48:8e:5b:2a:27:02:bf:8a:ed:2e:64:ef:
                    b0:a5:8f:6c:dc:b6:02:66:0c:f2:7c:d2:ff:24:f9:
                    d4:6a:74:f5:ee:f5:78:f0:b1:5a:c7:4a:10:a2:1c:
                    2b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4F:3A:18:0E:B9:36:B9:3A:D5:57:88:16:4A:2D:0F:5A:5F:30:BF
            X509v3 Authority Key Identifier:
                keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/3130332e35322e38342e302f32322d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:53:42:f6:c4:d2:97:f6:84:60:9b:d4:63:d1:e5:d6:92:84:
         d0:ea:66:c7:0a:ce:2a:d5:25:d3:ee:b0:a5:5a:a0:51:5a:a8:
         b7:5e:db:d1:1b:6b:c3:30:27:c2:b8:94:b2:79:cd:ff:97:1e:
         c2:8c:cc:c3:c4:ae:8a:3c:9d:bc:dc:9d:0b:d9:6f:58:9b:4c:
         61:8a:bc:af:04:0a:98:1b:1c:8b:99:c5:71:fa:2b:fc:40:79:
         97:27:30:f8:38:42:bb:a6:2a:32:0f:73:9e:bd:61:ff:c2:bb:
         6f:95:34:87:16:1b:7a:ce:6e:c9:84:ea:3e:44:8e:7f:dd:c8:
         22:1c:2f:72:1f:b4:74:96:9e:65:84:ba:c5:b4:32:9e:60:69:
         2f:f4:b9:f8:82:67:92:6d:e3:18:53:71:5c:45:62:57:5c:f1:
         eb:ff:f3:96:55:72:02:42:dc:e9:a0:ce:0f:47:6e:af:86:44:
         6c:6f:7b:12:e9:72:8f:69:d9:e5:7f:eb:47:09:26:d4:09:a0:
         c2:fa:03:97:7a:c7:a7:53:b2:04:03:02:d6:e3:48:6b:b6:8d:
         7a:98:05:51:7f:ce:c4:9e:30:76:4e:25:db:d3:9e:5a:84:47:
         05:30:e6:e2:e2:b9:ec:b2:10:99:50:04:20:62:ea:38:09:a8:
         c1:14:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:27 2026 by rpki-client