This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138302e302f32342d3234203d3e20313337343433.roa
File:                     3130332e3139372e3138302e302f32342d3234203d3e20313337343433.roa (raw, json)
Hash identifier:          CbTkb73of9yMkwZm2DCy7G40BwRZAGHBqpKVypR2kSo=
Subject key identifier:   61:61:50:27:2B:99:27:70:DD:08:A0:E9:B9:F0:A3:54:9C:0A:60:10
Certificate issuer:       /CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Certificate serial:       1D748B9F2DFDF5B5ABBC9C467DBEFEEEC9FB5625
Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138302e302f32342d3234203d3e20313337343433.roa
Signing time:             Tue 20 Jan 2026 02:18:05 +0000
ROA not before:           Tue 20 Jan 2026 02:13:05 +0000
ROA not after:            Tue 19 Jan 2027 02:18:05 +0000
asID:                     137443
IP address blocks:        103.197.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 17:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:74:8b:9f:2d:fd:f5:b5:ab:bc:9c:46:7d:be:fe:ee:c9:fb:56:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB
        Validity
            Not Before: Jan 20 02:13:05 2026 GMT
            Not After : Jan 19 02:18:05 2027 GMT
        Subject: CN=616150272B992770DD08A0E9B9F0A3549C0A6010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:94:dc:cc:3c:12:d4:ea:fc:d7:18:65:d2:
                    a1:da:c7:35:09:8a:b1:85:7d:84:1d:b9:15:a6:e4:
                    c0:4c:32:88:fe:2f:53:ad:4a:ec:4a:b8:b1:87:e1:
                    10:5d:28:77:51:08:eb:f4:77:d2:24:e1:ae:be:b7:
                    85:40:1c:2e:a3:cd:ff:e8:36:56:26:ab:b8:2d:54:
                    09:48:9d:30:7a:33:e3:30:27:2f:99:94:c4:2f:46:
                    09:75:1e:51:9d:12:0e:eb:66:a3:8a:38:e0:25:3e:
                    99:e4:da:8f:1f:86:ac:af:a7:e3:6d:ec:88:7c:e3:
                    bc:5d:cf:c2:50:f4:d8:46:38:ec:73:16:2a:d3:4a:
                    46:88:43:f2:b9:1c:12:27:8c:82:76:c8:f5:8f:9c:
                    8e:be:8c:2b:07:48:87:a4:46:ad:de:79:d9:e6:82:
                    c7:23:9f:de:9a:eb:d1:85:49:fe:14:05:47:d2:7a:
                    14:8f:23:ec:00:71:7c:9d:67:33:2b:b0:7c:4a:e0:
                    4e:c6:49:82:ad:04:17:4b:9c:04:f4:54:de:02:11:
                    5c:54:e1:83:38:aa:c2:a4:73:29:46:5c:c9:93:ab:
                    01:19:46:c3:0e:b3:e4:a0:a1:16:58:90:05:5e:8b:
                    67:15:5f:81:6d:5d:d3:4f:86:ec:4a:1d:44:2d:c0:
                    80:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:61:50:27:2B:99:27:70:DD:08:A0:E9:B9:F0:A3:54:9C:0A:60:10
            X509v3 Authority Key Identifier:
                keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138302e302f32342d3234203d3e20313337343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:73:f7:90:74:ef:e4:63:9c:33:f6:33:37:81:dd:1e:d1:8d:
         30:e0:46:28:f6:29:d0:32:cc:0b:74:40:c2:bf:c0:17:22:b1:
         39:4d:57:32:43:70:f8:b4:17:a1:68:cf:58:81:34:7b:cd:95:
         78:6f:09:bf:18:21:ee:7e:fd:59:43:27:d8:e4:7d:d4:85:c5:
         7b:e4:47:99:58:1b:de:3e:08:2e:b2:12:50:d9:24:aa:19:43:
         8e:09:eb:c4:84:d1:02:f9:fb:62:49:00:50:8c:04:04:81:a9:
         d4:c9:11:8c:30:7b:36:59:9e:f6:83:65:a2:34:b6:a2:ed:19:
         1a:cb:e6:7f:31:fa:34:08:e4:f2:63:25:c7:21:f1:b6:25:4d:
         e2:18:ea:ee:b8:68:00:cf:ec:e8:f4:49:a2:41:d6:47:ee:72:
         00:71:d3:6d:07:b9:e2:95:6b:52:ec:00:62:69:37:d7:67:36:
         53:1b:07:3c:04:dd:28:54:c6:e3:63:2b:73:52:27:0f:68:38:
         46:4f:a4:db:32:50:c5:ce:77:d4:41:c3:cc:02:92:ac:c5:1d:
         6e:3a:04:99:e4:15:80:b4:33:eb:51:31:61:8c:2b:52:96:af:
         6e:35:34:cc:da:d0:d1:2f:83:e9:7a:fd:97:81:b2:17:9a:62:
         3e:1f:46:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:00 2026 by rpki-client