This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39352e302f32342d3234203d3e20313337343433.roa
File:                     3130332e3231382e39352e302f32342d3234203d3e20313337343433.roa (raw, json)
Hash identifier:          GVjEDdCubBLhiNm+dRXsd+fi4yoUTEQ/aIw8iLMLxg0=
Subject key identifier:   A6:D3:09:9E:81:CD:5E:AF:C1:94:8B:70:6F:12:EF:21:09:BB:F2:44
Certificate issuer:       /CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Certificate serial:       7CC2C6FE21C12AE921B8568F3DCEC7F46C119CE8
Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39352e302f32342d3234203d3e20313337343433.roa
Signing time:             Tue 20 Jan 2026 02:18:04 +0000
ROA not before:           Tue 20 Jan 2026 02:13:04 +0000
ROA not after:            Tue 19 Jan 2027 02:18:04 +0000
asID:                     137443
IP address blocks:        103.218.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 17:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c2:c6:fe:21:c1:2a:e9:21:b8:56:8f:3d:ce:c7:f4:6c:11:9c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB
        Validity
            Not Before: Jan 20 02:13:04 2026 GMT
            Not After : Jan 19 02:18:04 2027 GMT
        Subject: CN=A6D3099E81CD5EAFC1948B706F12EF2109BBF244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:50:d2:d2:f4:a6:16:95:2d:20:d9:82:a7:
                    9e:46:1e:4e:55:97:d5:39:a3:a1:64:ae:db:7d:7c:
                    89:5e:ab:6d:93:83:dc:c6:a6:c0:85:74:66:2a:75:
                    86:1d:b1:a3:c9:17:25:05:b4:6c:75:cc:8c:78:42:
                    4f:ab:1a:5a:8e:75:07:c8:3c:c1:8a:ce:26:38:ae:
                    25:e7:f5:ec:93:b7:d4:6b:fb:d8:88:88:cb:65:23:
                    a7:9f:1b:5a:57:a1:72:cb:30:74:3e:00:76:6a:5f:
                    6a:75:2d:65:87:79:d6:e8:b1:f9:e1:df:e0:09:f2:
                    6f:62:df:f5:fa:92:7d:7f:b1:d7:b0:21:42:2e:6c:
                    0a:2c:c5:ea:e2:6f:2b:21:ff:d8:85:35:7d:d2:fc:
                    66:b3:18:4d:a4:61:2a:bf:24:be:cc:36:38:f8:d0:
                    bd:b2:e6:34:47:17:4e:7c:b5:25:01:6b:51:ac:9c:
                    ce:ca:ad:57:d1:ec:01:75:01:be:63:1c:21:33:ab:
                    8e:9f:48:c9:66:4e:90:fb:87:9f:e2:38:a8:7b:65:
                    b9:51:a1:1b:74:49:5e:8b:7d:05:31:1d:c6:04:24:
                    90:36:80:45:52:52:20:c8:06:35:5d:33:2e:03:e7:
                    2b:8b:7d:1a:c0:70:55:6a:3f:26:92:84:2b:7c:fb:
                    51:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D3:09:9E:81:CD:5E:AF:C1:94:8B:70:6F:12:EF:21:09:BB:F2:44
            X509v3 Authority Key Identifier:
                keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39352e302f32342d3234203d3e20313337343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:98:be:a5:26:d7:96:6d:6f:4c:0e:42:59:84:7f:46:f8:17:
         34:0a:90:9b:6d:48:ec:30:93:38:54:be:e0:fe:4c:ea:94:8b:
         45:b3:ee:82:24:05:2e:09:65:78:c8:53:60:d5:b6:fb:9a:ad:
         29:b8:4a:b7:e3:e7:0b:94:ce:9f:b2:a8:97:54:af:b0:17:53:
         5e:19:6e:3a:a4:c3:2a:92:4d:c7:30:ee:a9:3e:c2:6f:91:ac:
         d6:38:1e:35:f1:b3:92:b0:5f:0e:37:f8:e3:f7:c9:fc:fa:aa:
         71:e9:a2:35:2a:b8:33:78:34:e7:91:21:07:42:dc:6c:f4:43:
         94:2f:db:88:41:e5:cc:d9:e8:6f:b0:ab:be:7a:4a:0a:84:5e:
         4e:65:b8:27:8b:23:ec:15:b8:97:88:00:56:ce:d3:fa:ab:7d:
         68:a9:a5:b6:fb:fe:dc:57:e6:6a:46:da:cd:24:0d:0a:e7:a2:
         48:2f:e4:6b:4a:34:9c:3c:2e:ad:b3:09:d8:c0:24:b0:8e:45:
         ff:b8:a5:78:4b:cf:ca:ad:9d:bd:b4:e2:39:3d:0e:1e:03:8d:
         9a:a5:ec:ad:b6:4a:d0:ee:79:3d:cf:89:7f:47:21:d4:be:ca:
         cf:8f:56:71:35:ea:27:cb:ce:b5:fb:a7:82:ea:fb:d0:e6:4c:
         b5:57:31:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:37:09 2026 by rpki-client