This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130302e302f32342d3234203d3e20333937333733.roa
File:                     3130332e3132362e3130302e302f32342d3234203d3e20333937333733.roa (raw, json)
Hash identifier:          r5GgtdcaA2gQJtrauSrZuvN2xcklG2rxP8mHaI3JDZA=
Subject key identifier:   27:8E:9A:AC:22:A8:5D:04:A5:84:F4:41:22:81:D8:15:3F:F1:D4:4C
Certificate issuer:       /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A
Certificate serial:       163EBD643BB7E961FED40E9FFE2A2BC6817B28DC
Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130302e302f32342d3234203d3e20333937333733.roa
Signing time:             Fri 23 Jan 2026 07:46:42 +0000
ROA not before:           Fri 23 Jan 2026 07:41:42 +0000
ROA not after:            Fri 22 Jan 2027 07:46:42 +0000
asID:                     397373
IP address blocks:        103.126.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3e:bd:64:3b:b7:e9:61:fe:d4:0e:9f:fe:2a:2b:c6:81:7b:28:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A
        Validity
            Not Before: Jan 23 07:41:42 2026 GMT
            Not After : Jan 22 07:46:42 2027 GMT
        Subject: CN=278E9AAC22A85D04A584F4412281D8153FF1D44C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:89:75:cd:46:f6:80:45:4e:5e:7b:29:d3:
                    3a:cb:a7:26:60:3e:e4:59:1b:a5:1c:71:d0:b5:cb:
                    5c:50:cb:d6:cb:42:6b:db:e8:19:37:26:39:07:e1:
                    bf:2c:5e:11:f3:ad:ad:6d:29:f3:11:0e:86:d2:f6:
                    c9:65:94:68:9d:21:be:d3:cb:c8:6d:83:bd:06:9a:
                    75:f8:94:75:e5:60:ed:56:b2:fa:be:d6:bc:06:72:
                    7d:5b:dc:06:70:ef:f6:b2:d1:76:ba:a5:0a:94:51:
                    5f:a9:cb:4b:46:c1:52:0e:80:61:18:ad:43:d4:90:
                    cf:db:58:7b:ae:30:15:d3:dc:44:65:0b:47:34:ba:
                    59:33:df:9d:8e:79:f1:d7:5a:8d:67:87:c2:b4:57:
                    04:3d:18:47:7f:7c:ad:df:d1:cb:b4:ef:df:a0:10:
                    9c:fd:13:ca:4c:27:f3:01:0a:ec:ef:d4:0d:a6:19:
                    bf:71:4f:31:fb:05:63:8e:2f:4b:f8:6e:f3:3c:7e:
                    b3:88:b8:00:4d:85:96:f5:aa:82:f3:20:87:8b:16:
                    a7:eb:37:97:db:f0:88:6e:78:85:2d:36:32:78:10:
                    ed:af:96:10:a5:ee:21:fa:44:42:61:12:b7:d2:4a:
                    18:b8:4f:c8:d4:0b:96:12:a0:99:b9:4c:5f:b9:2a:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8E:9A:AC:22:A8:5D:04:A5:84:F4:41:22:81:D8:15:3F:F1:D4:4C
            X509v3 Authority Key Identifier:
                keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130302e302f32342d3234203d3e20333937333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:ed:a8:83:e6:a8:64:4a:5d:cf:55:66:62:4b:d4:9a:69:bc:
         68:b3:c4:73:60:eb:0e:fe:a0:e2:33:60:d9:1b:fa:70:84:4c:
         6d:27:04:17:c7:a3:01:ea:4f:43:af:2d:87:ce:3f:be:d6:49:
         ac:8a:92:63:63:f4:77:58:8b:30:42:b9:39:9e:ee:88:2f:e9:
         12:6a:96:2a:1f:c8:71:01:9f:19:5d:cd:e2:ce:0f:15:b0:e4:
         db:45:ea:e4:23:2b:a1:2b:ff:3e:c0:a7:be:70:90:84:7d:4d:
         2c:d7:a9:4f:78:62:e2:60:80:6c:fb:88:4a:b8:31:fa:a0:88:
         dc:0b:5d:03:9e:dd:05:96:e6:cd:c2:34:5a:d4:20:8b:25:c1:
         49:a8:14:e5:62:17:04:81:d4:f4:17:d3:24:2d:1e:41:a0:de:
         e4:d6:0f:e7:1a:69:85:03:f1:de:61:5f:fb:c8:c8:2d:6d:1c:
         85:5b:c8:f1:17:06:24:28:6f:93:33:eb:ef:88:87:13:32:3b:
         94:d4:90:28:c3:e0:7c:6b:1a:2a:53:eb:6d:2c:14:45:70:21:
         d0:08:84:2e:f7:07:22:2d:d3:c9:06:6a:c5:bc:a0:59:20:f6:
         42:43:af:57:08:3a:94:c2:c3:5a:59:23:02:2d:d6:6d:4a:a3:
         ed:85:2a:de
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUFj69ZDu36WH+1A6f/iorxoF7KNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0
Q0UwN0QyQTAeFw0yNjAxMjMwNzQxNDJaFw0yNzAxMjIwNzQ2NDJaMDMxMTAvBgNV
BAMTKDI3OEU5QUFDMjJBODVEMDRBNTg0RjQ0MTIyODFEODE1M0ZGMUQ0NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfo4l1zUb2gEVOXnsp0zrLpyZg
PuRZG6UccdC1y1xQy9bLQmvb6Bk3JjkH4b8sXhHzra1tKfMRDobS9slllGidIb7T
y8htg70GmnX4lHXlYO1Wsvq+1rwGcn1b3AZw7/ay0Xa6pQqUUV+py0tGwVIOgGEY
rUPUkM/bWHuuMBXT3ERlC0c0ulkz352OefHXWo1nh8K0VwQ9GEd/fK3f0cu079+g
EJz9E8pMJ/MBCuzv1A2mGb9xTzH7BWOOL0v4bvM8frOIuABNhZb1qoLzIIeLFqfr
N5fb8IhueIUtNjJ4EO2vlhCl7iH6REJhErfSShi4T8jUC5YSoJm5TF+5KnGPAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUJ46arCKoXQSlhPRBIoHYFT/x1EwwHwYDVR0j
BBgwFoAUUvvsYyMaqt8VOryY5IsqY0zgfSowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTMzNDc4NS8wLzUyRkJFQzYzMjMxQUFBREYxNTNBQkM5OEU0OEIy
QTYzNENFMDdEMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxMzM0Nzg1LzAvMzEzMDMzMmUz
MTMyMzYyZTMxMzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNzMzMzcz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGd+ZDANBgkqhkiG9w0BAQsFAAOCAQEAbO2og+aoZEpdz1Vm
YkvUmmm8aLPEc2DrDv6g4jNg2Rv6cIRMbScEF8ejAepPQ68th84/vtZJrIqSY2P0
d1iLMEK5OZ7uiC/pEmqWKh/IcQGfGV3N4s4PFbDk20Xq5CMroSv/PsCnvnCQhH1N
LNepT3hi4mCAbPuISrgx+qCI3AtdA57dBZbmzcI0WtQgiyXBSagU5WIXBIHU9BfT
JC0eQaDe5NYP5xpphQPx3mFf+8jILW0chVvI8RcGJChvkzPr74iHEzI7lNSQKMPg
fGsaKlPrbSwURXAh0AiELvcHIi3TyQZqxbygWSD2QkOvVwg6lMLDWlkjAi3WbUqj
7YUq3g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:17 2026 by rpki-client