This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/3130332e32332e382e302f32322d3232203d3e20313334373635.roa
File:                     3130332e32332e382e302f32322d3232203d3e20313334373635.roa (raw, json)
Hash identifier:          ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=
Subject key identifier:   9F:1E:06:2D:11:00:F4:53:E8:4E:C1:57:2C:BB:5D:DA:E1:58:84:DE
Certificate issuer:       /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5
Certificate serial:       7C9E4F4DF333B53DF6CC9DDA157A65908E45A1A9
Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/3130332e32332e382e302f32322d3232203d3e20313334373635.roa
Signing time:             Tue 20 Jan 2026 02:25:04 +0000
ROA not before:           Tue 20 Jan 2026 02:20:04 +0000
ROA not after:            Tue 19 Jan 2027 02:25:04 +0000
asID:                     134765
IP address blocks:        103.23.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9e:4f:4d:f3:33:b5:3d:f6:cc:9d:da:15:7a:65:90:8e:45:a1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5
        Validity
            Not Before: Jan 20 02:20:04 2026 GMT
            Not After : Jan 19 02:25:04 2027 GMT
        Subject: CN=9F1E062D1100F453E84EC1572CBB5DDAE15884DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:74:71:f7:24:15:3b:be:5f:04:28:54:b5:
                    5a:e2:8f:5d:7e:6f:e5:f8:88:d1:45:e9:69:3a:58:
                    ea:27:a3:0a:06:4d:58:c7:72:65:78:14:d2:d4:14:
                    34:ea:33:52:b6:5b:90:da:72:2c:df:7a:c2:a1:41:
                    30:c9:22:f0:7a:fe:a0:b7:38:3f:05:b5:e4:49:03:
                    b0:a0:27:58:b1:28:74:b6:4e:1a:55:8b:a0:c9:74:
                    80:53:4a:61:bd:23:b7:45:ce:32:bc:8d:28:ce:02:
                    25:c5:1c:75:75:14:7a:f1:93:e6:80:06:f0:f7:51:
                    55:f3:30:53:0a:d6:f8:f6:90:64:45:b0:7b:84:5d:
                    b1:02:1f:f0:05:7a:50:48:9e:e5:04:23:f8:c9:9d:
                    e3:7a:64:53:5a:37:a9:23:2a:39:5d:23:b5:65:28:
                    69:c1:0c:8b:08:98:c5:6c:ae:a8:ef:5b:6d:b2:aa:
                    30:20:9f:e7:f9:8b:78:8c:66:f9:42:2e:e4:8c:6e:
                    06:9a:3c:9c:69:4a:94:e3:0a:31:02:90:84:72:c0:
                    0c:16:2c:08:ec:17:29:6b:5b:72:dd:29:67:a2:bb:
                    6a:3a:78:56:17:0d:3d:3f:4d:84:32:cf:54:cb:6f:
                    3c:37:d0:9d:35:cb:3d:fd:f7:4e:c8:e7:86:d9:60:
                    bf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1E:06:2D:11:00:F4:53:E8:4E:C1:57:2C:BB:5D:DA:E1:58:84:DE
            X509v3 Authority Key Identifier:
                keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/3130332e32332e382e302f32322d3232203d3e20313334373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:c4:69:85:fa:f0:8f:35:00:67:d3:8f:df:f7:e2:08:bf:c1:
         d6:f8:6f:b3:23:5f:72:a3:c7:28:60:62:4f:f6:7e:b0:e6:90:
         b7:a9:c1:cf:18:0b:0b:76:d4:5b:6c:a5:7b:61:fc:f5:1a:41:
         97:66:88:9c:ee:01:84:1e:56:68:74:97:a7:b8:cd:a1:2b:c3:
         b8:81:15:02:41:3f:ba:90:af:a9:58:59:f1:65:b3:6e:9a:ea:
         a8:97:fa:56:54:08:d5:d6:f1:66:77:25:95:9b:c4:23:62:ee:
         a3:fc:3d:fe:c4:51:5a:84:ff:e2:0c:91:fc:d4:57:b2:75:f1:
         e2:34:e3:f3:12:6f:1c:ac:e3:35:4a:8f:d0:91:c7:b5:6f:6f:
         ca:c4:2b:7a:1c:b3:48:2f:a3:07:5d:3f:dc:bb:2d:af:4f:51:
         3a:da:42:61:75:46:3f:82:88:42:13:ee:a2:53:95:bf:2d:6e:
         1b:81:a5:bd:b4:31:03:ab:8f:fa:3c:7f:1b:f5:63:31:2a:b8:
         8e:b5:ac:3f:78:6b:cd:0b:e1:2f:ac:84:2d:0d:10:ba:3c:ca:
         c2:13:9b:ad:49:17:6d:12:c3:e7:be:9e:06:3c:3b:dd:28:a1:
         a3:a3:d9:24:6f:9a:c8:2b:86:ec:cf:ab:57:1c:ea:53:6d:a2:
         7b:26:07:87
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUfJ5PTfMztT32zJ3aFXplkI5FoakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJD
MTExMkVENTAeFw0yNjAxMjAwMjIwMDRaFw0yNzAxMTkwMjI1MDRaMDMxMTAvBgNV
BAMTKDlGMUUwNjJEMTEwMEY0NTNFODRFQzE1NzJDQkI1RERBRTE1ODg0REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6RnRx9yQVO75fBChUtVrij11+
b+X4iNFF6Wk6WOonowoGTVjHcmV4FNLUFDTqM1K2W5DacizfesKhQTDJIvB6/qC3
OD8FteRJA7CgJ1ixKHS2ThpVi6DJdIBTSmG9I7dFzjK8jSjOAiXFHHV1FHrxk+aA
BvD3UVXzMFMK1vj2kGRFsHuEXbECH/AFelBInuUEI/jJneN6ZFNaN6kjKjldI7Vl
KGnBDIsImMVsrqjvW22yqjAgn+f5i3iMZvlCLuSMbgaaPJxpSpTjCjECkIRywAwW
LAjsFylrW3LdKWeiu2o6eFYXDT0/TYQyz1TLbzw30J01yz39907I54bZYL9xAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUnx4GLREA9FPoTsFXLLtd2uFYhN4wHwYDVR0j
BBgwFoAUGl2TwrIcOQ0FSHK1R+9nG8ERLtUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODM1MzUzOC8wLzFBNUQ5M0MyQjIxQzM5MEQwNTQ4NzJCNTQ3RUY2
NzFCQzExMTJFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4MzUzNTM4LzAvMzEzMDMzMmUzMjMz
MmUzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNDM3MzYzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcXCDANBgkqhkiG9w0BAQsFAAOCAQEAecRphfrwjzUAZ9OP3/fiCL/B1vhv
syNfcqPHKGBiT/Z+sOaQt6nBzxgLC3bUW2yle2H89RpBl2aInO4BhB5WaHSXp7jN
oSvDuIEVAkE/upCvqVhZ8WWzbprqqJf6VlQI1dbxZncllZvEI2Luo/w9/sRRWoT/
4gyR/NRXsnXx4jTj8xJvHKzjNUqP0JHHtW9vysQrehyzSC+jB10/3Lstr09ROtpC
YXVGP4KIQhPuolOVvy1uG4GlvbQxA6uP+jx/G/VjMSq4jrWsP3hrzQvhL6yELQ0Q
ujzKwhObrUkXbRLD576eBjw73Siho6PZJG+ayCuG7M+rVxzqU22ieyYHhw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:51 2026 by rpki-client