This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232352e302f32342d3234203d3e2034383132.roa
File:                     3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier:          bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=
Subject key identifier:   99:7D:C3:02:06:9A:CF:AC:A7:15:C3:27:32:A7:37:28:69:00:8A:CE
Certificate issuer:       /CN=5E665DEA0365C38B2587CA38473DB30B00B37247
Certificate serial:       4AD0AECBD79E6461017F5B1C805984AE3F2CC751
Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232352e302f32342d3234203d3e2034383132.roa
Signing time:             Tue 20 Jan 2026 02:13:10 +0000
ROA not before:           Tue 20 Jan 2026 02:08:10 +0000
ROA not after:            Tue 19 Jan 2027 02:13:10 +0000
asID:                     4812
IP address blocks:        103.96.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d0:ae:cb:d7:9e:64:61:01:7f:5b:1c:80:59:84:ae:3f:2c:c7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247
        Validity
            Not Before: Jan 20 02:08:10 2026 GMT
            Not After : Jan 19 02:13:10 2027 GMT
        Subject: CN=997DC302069ACFACA715C32732A7372869008ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:b3:14:d2:d3:76:08:a0:2e:b1:42:3a:82:
                    8d:0d:ed:c9:18:75:70:4a:71:e8:65:66:ee:1b:54:
                    b7:9d:a5:55:95:3c:7f:ab:57:21:49:06:3d:fd:b0:
                    02:f6:f5:6e:a0:8a:20:56:51:93:6d:ab:7f:f5:1a:
                    19:f5:52:1f:cb:a2:10:d9:27:68:e1:a6:13:10:ca:
                    46:67:20:79:8e:c0:32:b6:40:b7:1d:7f:c3:3e:c5:
                    b8:69:1f:e3:ec:9a:7d:f7:f9:b2:14:34:75:8d:95:
                    d6:df:75:d6:56:9b:e7:e5:c4:58:f6:de:c5:5a:4d:
                    7b:5d:12:c1:a9:11:f4:78:8e:6c:d8:ee:9b:8b:79:
                    ef:1a:86:11:76:94:35:47:52:ca:06:dc:21:4e:cd:
                    b0:19:47:37:64:6a:da:fd:15:82:1d:4f:6b:7e:24:
                    62:9e:32:ec:d3:3f:eb:3f:d3:4d:4b:11:0a:54:57:
                    22:c8:a5:61:b9:0c:ec:ff:7e:c0:5f:2e:67:e3:0f:
                    7b:aa:77:5f:4e:1b:4d:60:85:16:13:64:04:58:25:
                    d8:13:87:48:f0:24:4a:07:7b:fd:89:be:b3:43:a2:
                    ef:31:c7:f0:32:78:be:14:59:5e:5d:89:86:b1:32:
                    6f:02:09:7e:eb:a7:26:e5:20:45:c6:07:df:0d:5c:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7D:C3:02:06:9A:CF:AC:A7:15:C3:27:32:A7:37:28:69:00:8A:CE
            X509v3 Authority Key Identifier:
                keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/3130332e39362e3232352e302f32342d3234203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:c7:0a:a1:9b:8d:e6:5c:ec:f1:ad:18:1d:65:6d:15:5b:bc:
         53:10:90:14:f0:d2:81:05:70:76:8b:b5:d7:9f:94:10:df:ff:
         29:81:1b:c6:9e:38:e9:e3:c5:d0:74:39:0b:e1:1e:3a:0c:d4:
         df:5b:0c:c3:a7:f2:de:b3:d8:54:06:c7:17:67:60:98:61:6e:
         b6:3b:37:7a:72:22:e1:28:50:d8:d2:c3:c4:ff:6c:a8:a7:80:
         89:eb:40:7b:68:42:f6:2e:87:75:6b:d7:fa:9e:5a:42:f8:96:
         2f:d3:df:fa:d6:f6:10:c0:c4:11:48:0c:9b:c9:39:25:27:0e:
         75:ed:6c:0d:0f:bb:10:c1:c4:13:bb:54:58:02:f1:64:0b:2c:
         bb:71:1e:a3:bc:2d:08:00:2a:af:b1:2b:93:ea:48:87:0e:1f:
         4f:5d:09:8d:04:95:cc:9e:d1:0b:0e:65:db:82:cc:f5:8d:9f:
         42:f6:36:1b:43:9b:46:3d:27:b8:6d:d1:5c:58:e5:83:eb:f3:
         dc:ae:32:58:2a:7e:ce:30:ab:a9:d1:e0:6a:1c:b3:a0:db:c4:
         f0:4d:8f:b1:88:ad:77:f3:dc:70:d4:4d:fc:ef:be:f6:ef:fb:
         af:b3:7b:1d:b7:50:37:ce:d7:e4:1e:ad:a6:c7:4a:8b:4c:88:
         ff:08:ed:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:15:54 2026 by rpki-client