This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa
File:                     3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa (raw, json)
Hash identifier:          gNbCXYLZTSZSDGKA8vf0miL9zRhPVc7YJOnU420lxlM=
Subject key identifier:   30:A7:21:66:B7:77:E2:3F:D3:6A:B8:4C:78:27:71:3A:58:4F:44:E8
Certificate issuer:       /CN=6F899B29F801AD1C8A8515E6EF9709910311F668
Certificate serial:       57A3F3337D23B5E5256917B27A1DB7F008B10FF6
Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa
Signing time:             Tue 20 Jan 2026 02:24:51 +0000
ROA not before:           Tue 20 Jan 2026 02:19:51 +0000
ROA not after:            Tue 19 Jan 2027 02:24:51 +0000
asID:                     149513
IP address blocks:        103.142.82.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a3:f3:33:7d:23:b5:e5:25:69:17:b2:7a:1d:b7:f0:08:b1:0f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668
        Validity
            Not Before: Jan 20 02:19:51 2026 GMT
            Not After : Jan 19 02:24:51 2027 GMT
        Subject: CN=30A72166B777E23FD36AB84C7827713A584F44E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:08:cd:83:75:74:35:af:a6:2b:dd:48:49:
                    9f:86:ed:da:1e:ee:55:b9:80:de:7a:c1:37:2e:c4:
                    30:e1:13:57:17:59:76:eb:26:df:23:67:d9:7e:cd:
                    06:af:d4:79:51:fe:de:71:84:7a:f9:82:ab:26:0a:
                    e0:c9:b5:88:8a:ff:e9:b2:93:e5:13:a9:fc:15:d4:
                    b2:16:0d:fd:9d:78:a9:f7:9a:7e:e9:9e:e9:8c:19:
                    1c:48:08:8d:b1:5d:21:01:77:05:7d:bd:04:9f:da:
                    fc:14:7f:bc:25:41:1f:df:b6:32:bc:35:00:79:07:
                    72:b1:9a:35:ca:45:bf:cb:f8:4c:98:1c:e3:e0:2b:
                    91:89:18:a2:d6:3f:f1:e2:dc:db:99:4a:cf:56:ed:
                    f8:c3:4a:a1:23:2d:2d:d3:91:9f:19:44:c7:2d:98:
                    72:70:da:20:30:f8:a4:fb:07:be:83:2c:c0:74:40:
                    55:ac:b6:2e:17:70:3b:cd:d5:b1:2d:6d:7b:f0:01:
                    4c:44:6e:4b:1b:2b:56:9f:74:19:2c:52:db:43:f1:
                    12:0d:99:71:57:ee:1b:11:8f:53:37:8e:7f:27:4a:
                    9b:f0:6c:aa:c1:3c:73:f1:89:45:e8:ed:3d:f0:64:
                    cd:fd:0b:67:ca:a9:e8:9f:90:b7:a2:0e:cd:be:e5:
                    aa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A7:21:66:B7:77:E2:3F:D3:6A:B8:4C:78:27:71:3A:58:4F:44:E8
            X509v3 Authority Key Identifier:
                keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:2d:66:69:f4:57:15:47:36:17:09:54:2f:43:60:91:4a:5b:
         3a:b8:cd:68:3d:10:8f:ef:ac:81:d6:25:07:ea:02:47:e1:33:
         99:72:6d:15:1d:b1:5b:9b:ab:f5:af:d6:e1:da:a9:14:24:6d:
         88:8e:54:2f:3c:95:cc:c2:aa:10:5d:89:9b:43:7f:c8:e4:bc:
         2d:8d:12:a3:e5:45:a8:23:8f:51:dd:9a:82:43:27:d4:1e:f0:
         93:c5:da:7f:bf:b7:aa:a6:f1:66:5b:01:50:b1:ea:2b:1e:2a:
         99:fb:cc:78:a5:0c:26:74:46:8e:5a:b6:d6:9d:ee:f4:9d:01:
         56:f9:9a:4d:d0:4e:19:da:d7:04:cd:8d:88:7b:dd:05:5a:35:
         74:36:92:15:80:e7:9d:9f:52:de:a6:ea:a0:1f:08:6f:8d:53:
         79:d8:b0:29:79:9b:26:1d:b0:1d:96:58:16:a4:fd:86:85:69:
         55:6d:a2:10:b5:e6:d5:ca:14:fa:cb:a7:54:a1:a0:34:83:48:
         06:4c:d8:7d:0d:be:18:a1:f2:24:75:5d:e4:fc:b5:16:fb:5c:
         7a:6d:d0:9e:5a:a8:00:1d:b2:3a:8b:92:8f:c5:54:41:75:f9:
         cd:46:23:0a:3e:e2:59:dd:eb:e3:dd:8a:16:58:a6:76:f2:6a:
         74:5f:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:11:32 2026 by rpki-client