This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138322e302f32342d3234203d3e20313337343433.roa
File:                     3130332e3139372e3138322e302f32342d3234203d3e20313337343433.roa (raw, json)
Hash identifier:          ml/dotA8tYURkCi9gGLb/6fH4D6/8JJeVSMbsmWUy9o=
Subject key identifier:   CD:6A:73:A1:94:2A:69:F1:FA:4D:E6:72:85:27:BB:94:C6:1D:46:98
Certificate issuer:       /CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Certificate serial:       614C2038EC55FDBBC5D31C21DBC76A97D424173B
Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138322e302f32342d3234203d3e20313337343433.roa
Signing time:             Tue 20 Jan 2026 02:18:04 +0000
ROA not before:           Tue 20 Jan 2026 02:13:04 +0000
ROA not after:            Tue 19 Jan 2027 02:18:04 +0000
asID:                     137443
IP address blocks:        103.197.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 17:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4c:20:38:ec:55:fd:bb:c5:d3:1c:21:db:c7:6a:97:d4:24:17:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB
        Validity
            Not Before: Jan 20 02:13:04 2026 GMT
            Not After : Jan 19 02:18:04 2027 GMT
        Subject: CN=CD6A73A1942A69F1FA4DE6728527BB94C61D4698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:56:b7:68:e6:01:69:6e:ef:ba:c9:ea:37:6a:
                    b4:80:80:88:52:22:96:83:81:f9:49:04:f5:0c:9c:
                    d3:49:ae:2e:40:d1:d2:1d:51:07:be:76:c0:b3:96:
                    d5:90:7c:45:a2:82:bd:b6:5e:db:8c:58:5a:6b:3d:
                    4b:55:c5:5c:d6:c1:87:d3:ad:9e:19:c4:65:35:21:
                    d7:aa:01:a7:24:8e:f9:4a:2a:6a:ed:42:68:2a:07:
                    da:cc:e4:e1:23:58:c7:d2:32:98:da:68:f0:eb:cd:
                    88:92:6c:77:30:93:1d:b4:bc:6f:e6:4d:02:10:ba:
                    6c:ce:d2:36:84:48:f1:f2:bb:e9:c1:c3:51:9d:de:
                    e6:02:93:04:72:aa:ac:7f:c3:ea:fc:9d:c9:ed:16:
                    f1:b0:77:17:cc:ed:b0:16:31:3a:03:84:6f:d7:75:
                    84:20:c4:8f:fa:a5:db:14:a2:63:66:86:f6:54:36:
                    ac:24:e7:b8:bc:99:68:4e:6e:1c:dc:61:0d:d3:59:
                    b7:b9:b5:43:d9:82:92:4f:56:d8:79:87:87:b0:5e:
                    e4:e9:49:29:5f:72:b3:f5:fa:33:98:75:61:c0:40:
                    eb:fd:fe:cf:01:fe:e3:e6:b2:36:6e:f7:e5:bd:9c:
                    ee:90:e3:a6:c5:42:93:08:39:cd:65:f0:25:ae:73:
                    7e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6A:73:A1:94:2A:69:F1:FA:4D:E6:72:85:27:BB:94:C6:1D:46:98
            X509v3 Authority Key Identifier:
                keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138322e302f32342d3234203d3e20313337343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:db:72:4c:a1:54:bb:4f:1a:5b:4e:c5:52:92:eb:36:76:50:
         dc:0d:1b:2f:72:88:26:66:3d:ff:60:3e:0b:e2:d3:93:da:61:
         4c:f1:c8:2c:34:9a:9e:d2:f8:b1:f0:79:f0:55:b7:2e:44:64:
         d1:3b:1b:71:b0:a0:fc:f1:45:d2:dc:98:ff:a2:dc:54:c8:14:
         da:e6:85:3e:e0:db:07:32:c3:85:ca:da:95:45:3b:cd:ad:eb:
         8b:18:68:e4:ed:3a:fa:73:4a:91:8e:b6:43:0b:e6:8a:b4:20:
         61:c3:ee:d9:61:78:58:dc:d5:43:d6:e9:46:f2:1f:7f:00:e3:
         f0:f0:cc:3c:41:e0:47:b5:5e:a7:fd:b7:fd:06:1d:cb:f8:e8:
         18:5d:08:ac:4d:50:69:bb:c6:02:49:ff:d2:00:0a:1c:fc:78:
         7e:f3:00:89:7a:39:de:d1:90:25:a1:8f:d5:e6:46:6b:e6:1f:
         b9:0d:f3:3d:66:8f:40:cc:e0:d2:8f:d2:0b:ad:42:74:33:ba:
         a8:6f:7f:91:df:92:24:52:ee:3b:c6:05:bd:1c:f9:5d:16:e1:
         23:80:a9:47:e3:f4:8c:24:20:8d:bc:c7:e1:9e:72:ff:e8:40:
         a4:dd:b8:16:2c:12:2e:73:59:8b:a3:3d:8e:6c:73:3b:f1:ed:
         a7:ec:53:5f
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUYUwgOOxV/bvF0xwh28dql9QkFzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2
MTA5NjNBQjAeFw0yNjAxMjAwMjEzMDRaFw0yNzAxMTkwMjE4MDRaMDMxMTAvBgNV
BAMTKENENkE3M0ExOTQyQTY5RjFGQTRERTY3Mjg1MjdCQjk0QzYxRDQ2OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhVrdo5gFpbu+6yeo3arSAgIhS
IpaDgflJBPUMnNNJri5A0dIdUQe+dsCzltWQfEWigr22XtuMWFprPUtVxVzWwYfT
rZ4ZxGU1IdeqAackjvlKKmrtQmgqB9rM5OEjWMfSMpjaaPDrzYiSbHcwkx20vG/m
TQIQumzO0jaESPHyu+nBw1Gd3uYCkwRyqqx/w+r8ncntFvGwdxfM7bAWMToDhG/X
dYQgxI/6pdsUomNmhvZUNqwk57i8mWhObhzcYQ3TWbe5tUPZgpJPVth5h4ewXuTp
SSlfcrP1+jOYdWHAQOv9/s8B/uPmsjZu9+W9nO6Q46bFQpMIOc1l8CWuc36PAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUzWpzoZQqafH6TeZyhSe7lMYdRpgwHwYDVR0j
BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND
NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxNjgzMDYxNzc2Mzg2LzAvMzEzMDMzMmUz
MTM5MzcyZTMxMzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM0MzQz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGfFtjANBgkqhkiG9w0BAQsFAAOCAQEAUNtyTKFUu08aW07F
UpLrNnZQ3A0bL3KIJmY9/2A+C+LTk9phTPHILDSantL4sfB58FW3LkRk0TsbcbCg
/PFF0tyY/6LcVMgU2uaFPuDbBzLDhcralUU7za3rixho5O06+nNKkY62QwvmirQg
YcPu2WF4WNzVQ9bpRvIffwDj8PDMPEHgR7Vep/23/QYdy/joGF0IrE1QabvGAkn/
0gAKHPx4fvMAiXo53tGQJaGP1eZGa+YfuQ3zPWaPQMzg0o/SC61CdDO6qG9/kd+S
JFLuO8YFvRz5XRbhI4CpR+P0jCQgjbzH4Z5y/+hApN24FiwSLnNZi6M9jmxzO/Ht
p+xTXw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:00 2026 by rpki-client