This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa
File:                     3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (raw, json)
Hash identifier:          MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=
Subject key identifier:   9D:69:C1:9D:E2:36:51:50:78:83:22:CB:10:A6:9B:89:63:27:05:56
Certificate issuer:       /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5
Certificate serial:       40155BA1580D8890F458AA40CA641FB17590E51F
Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa
Signing time:             Tue 20 Jan 2026 02:18:06 +0000
ROA not before:           Tue 20 Jan 2026 02:13:06 +0000
ROA not after:            Tue 19 Jan 2027 02:18:06 +0000
asID:                     131482
IP address blocks:        103.150.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 06:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:15:5b:a1:58:0d:88:90:f4:58:aa:40:ca:64:1f:b1:75:90:e5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5
        Validity
            Not Before: Jan 20 02:13:06 2026 GMT
            Not After : Jan 19 02:18:06 2027 GMT
        Subject: CN=9D69C19DE2365150788322CB10A69B8963270556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:d8:a9:38:a7:67:64:f7:a8:26:00:c0:e4:
                    5d:c6:c4:f0:cb:a2:8e:0e:2b:78:8a:df:b5:a2:d7:
                    83:ca:e1:bc:e8:c3:e3:64:9e:2c:7a:ad:c7:b8:8c:
                    e0:1d:db:39:5a:8d:b7:86:5e:8e:99:45:00:48:b7:
                    97:fb:76:f7:2b:2d:29:eb:84:ec:c4:69:be:09:74:
                    a0:e0:f6:79:37:5b:f9:ea:8b:0e:d6:ae:0e:ab:16:
                    e4:ac:a1:99:63:76:11:01:f6:0c:cb:17:2e:e0:b1:
                    71:e2:89:15:0b:85:48:3e:1d:18:f2:8a:32:65:87:
                    d8:64:9c:d6:93:56:92:1e:83:43:9c:c7:04:7c:07:
                    f7:11:35:aa:ad:49:d7:c5:a3:64:e5:81:f5:20:bc:
                    76:d3:5a:57:0f:81:5c:f2:79:2b:db:d6:0d:ca:e2:
                    10:0d:bc:c9:48:19:6c:8a:02:a7:ca:b1:75:e5:91:
                    ab:c5:2d:83:ca:b8:03:60:5c:fc:db:ca:25:c9:0a:
                    54:a8:f0:1a:1e:85:a5:89:a1:b5:d3:24:9f:85:19:
                    35:a8:21:c6:42:1d:69:56:43:39:ac:0d:31:e9:66:
                    f5:6a:e1:af:90:8e:f3:3d:02:dd:e9:18:5d:bd:e3:
                    27:b4:7d:fc:88:bc:67:34:56:79:4a:b8:44:3b:77:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:69:C1:9D:E2:36:51:50:78:83:22:CB:10:A6:9B:89:63:27:05:56
            X509v3 Authority Key Identifier:
                keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:b9:4f:bf:63:45:97:ab:90:fa:c2:d8:0c:d3:6e:52:d3:a6:
         b9:7a:e8:5f:5a:37:f8:60:b5:41:cc:50:6a:3c:eb:24:8a:8b:
         da:d7:13:11:6c:97:18:31:8a:2a:1a:8a:86:8a:cb:75:32:22:
         28:a7:10:6b:27:5c:b2:da:6f:6b:48:83:06:9d:ee:49:ab:ac:
         e0:a6:0b:d9:b3:ed:47:41:ce:f7:b7:e4:f3:9a:ba:1c:05:e8:
         df:d7:5c:2a:af:a9:63:0f:74:22:4a:e8:9f:d6:5a:3f:de:1f:
         df:a8:fb:79:37:11:a3:24:32:7a:69:0d:3a:d8:ca:91:02:a3:
         f2:ae:55:4f:8e:2c:33:d2:18:cd:f6:e7:df:9e:39:63:20:24:
         b5:ca:40:bd:fe:8f:8a:35:6c:38:8f:09:53:a9:e0:71:f5:9d:
         c6:cb:16:5e:14:fa:eb:06:4f:f4:e6:34:21:18:8e:9f:e3:9c:
         be:58:3c:7f:49:26:7f:93:a6:8a:a0:5b:72:a8:99:7e:4b:85:
         6f:ca:55:1e:2b:b5:15:f1:91:44:12:e6:2c:64:05:13:81:01:
         10:41:e0:24:98:f0:24:4b:89:18:4c:df:f3:b9:8b:72:2d:31:
         de:82:8b:80:9e:63:25:6d:a6:be:8d:2b:25:55:3f:8c:fd:bb:
         24:eb:8f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:29:37 2026 by rpki-client