This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32342d3234203d3e203137363231.roa
File:                     3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier:          KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=
Subject key identifier:   24:DE:90:AF:8B:D2:F6:6A:E4:DA:AE:98:A7:72:5C:C4:AC:1D:2C:46
Certificate issuer:       /CN=5E665DEA0365C38B2587CA38473DB30B00B37247
Certificate serial:       220AE3D728E80221D10BAB8907CBC94A12F004A6
Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32342d3234203d3e203137363231.roa
Signing time:             Tue 20 Jan 2026 02:13:10 +0000
ROA not before:           Tue 20 Jan 2026 02:08:10 +0000
ROA not after:            Tue 19 Jan 2027 02:13:10 +0000
asID:                     17621
IP address blocks:        103.96.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0a:e3:d7:28:e8:02:21:d1:0b:ab:89:07:cb:c9:4a:12:f0:04:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247
        Validity
            Not Before: Jan 20 02:08:10 2026 GMT
            Not After : Jan 19 02:13:10 2027 GMT
        Subject: CN=24DE90AF8BD2F66AE4DAAE98A7725CC4AC1D2C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e7:26:a2:67:f9:1f:a6:98:55:1d:52:0a:74:
                    ea:f1:49:39:06:86:2f:46:7a:e5:5f:10:fa:e9:9f:
                    ae:3c:9e:57:db:9e:d0:3d:1e:59:62:d3:90:96:1d:
                    c6:60:10:52:7c:62:5e:5e:0c:83:92:d1:80:c0:1c:
                    1d:20:60:1a:45:43:51:01:93:2d:70:fc:7a:56:56:
                    98:44:71:52:c9:b6:83:6c:ae:c0:ed:e3:00:ee:b7:
                    65:4f:66:e8:75:6a:51:df:74:be:db:af:63:0f:28:
                    ea:51:7d:48:4b:93:45:95:18:b3:72:0f:b7:57:53:
                    96:bf:ac:ad:2f:0f:fb:93:c5:60:28:0e:7c:3e:65:
                    30:de:3c:9d:92:13:63:14:cf:73:0a:51:68:39:72:
                    f6:af:f1:b7:57:d9:12:a4:c9:fe:8f:dd:66:bf:60:
                    a9:66:88:2a:bc:6f:d9:30:08:a5:0a:9a:5e:3d:3f:
                    46:15:dc:cf:3e:47:d6:1b:d2:95:6d:12:be:6d:62:
                    75:d2:f5:44:92:69:21:81:13:f3:6b:e9:cc:dc:5f:
                    62:bb:09:58:c5:53:1b:66:f7:ce:9c:3e:1e:97:7e:
                    30:87:ba:3b:f9:06:1c:aa:be:18:38:3e:84:ff:d1:
                    a6:04:2e:4c:37:33:d1:55:e2:2a:a6:48:e0:dd:23:
                    d9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DE:90:AF:8B:D2:F6:6A:E4:DA:AE:98:A7:72:5C:C4:AC:1D:2C:46
            X509v3 Authority Key Identifier:
                keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232342e302f32342d3234203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:75:cc:75:be:2a:7c:a3:53:ef:cf:a4:94:b2:ea:27:65:2c:
         f3:75:d1:af:a3:22:ee:c7:c7:a1:79:2d:bb:7c:b3:42:6d:2f:
         df:12:c9:17:55:a8:c6:08:e4:db:75:ea:f3:a4:79:2f:95:33:
         eb:40:de:84:59:40:27:01:4b:54:66:6f:65:3d:11:d9:f7:85:
         43:92:4b:e9:96:e5:f7:48:eb:06:1d:03:14:8f:3a:cc:2b:4f:
         44:fb:dd:75:a6:6e:80:02:40:b7:5c:78:0f:a1:f6:07:0c:3d:
         b0:05:b2:59:2b:23:38:cb:2a:fa:bd:d6:3b:18:7a:a0:ff:63:
         fd:eb:c2:69:94:d0:07:58:fb:d4:4b:c9:6d:4b:f0:ed:90:52:
         be:fc:ed:1b:8b:19:18:44:52:96:f2:ac:16:e2:a4:ae:00:ea:
         28:26:eb:73:9e:e2:bd:d0:c1:0f:e5:0e:41:b1:a3:68:18:51:
         39:18:75:97:c0:c1:de:db:e1:41:df:e4:e6:ad:51:49:ad:de:
         29:9d:eb:e3:2b:c0:bd:f5:06:53:c9:ab:63:93:0c:31:4d:ae:
         d5:04:47:16:e3:55:30:9d:f6:fb:be:93:be:93:c1:55:09:4f:
         05:df:84:42:98:24:eb:1d:d5:11:a6:da:fa:c1:61:64:76:6a:
         26:e4:81:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:06 2026 by rpki-client