This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3235342e302f32342d3234203d3e20313335333737.roa
File:                     3130312e3233372e3235342e302f32342d3234203d3e20313335333737.roa (raw, json)
Hash identifier:          0kLvktAksNmUHGOvsr4673p+ivQ1IdlkIu8oGaC9je8=
Subject key identifier:   0E:6A:7F:83:49:3E:D2:7D:96:B2:25:1E:21:AA:F4:5E:5F:A2:FC:5D
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       74146EAF6FE9D5E0288D57BEC96869330416E548
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3235342e302f32342d3234203d3e20313335333737.roa
Signing time:             Tue 20 Jan 2026 02:10:49 +0000
ROA not before:           Tue 20 Jan 2026 02:05:49 +0000
ROA not after:            Tue 19 Jan 2027 02:10:49 +0000
asID:                     135377
IP address blocks:        101.237.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:14:6e:af:6f:e9:d5:e0:28:8d:57:be:c9:68:69:33:04:16:e5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:49 2026 GMT
            Not After : Jan 19 02:10:49 2027 GMT
        Subject: CN=0E6A7F83493ED27D96B2251E21AAF45E5FA2FC5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:fc:58:d6:5b:af:05:b7:81:ea:3f:5d:b9:
                    3f:63:02:9c:8b:b7:ff:96:74:75:56:86:0a:15:0b:
                    a4:64:67:0f:32:62:b5:68:ec:f0:fb:fc:cf:26:c2:
                    78:b1:bf:31:27:4c:71:1c:57:d2:67:29:5f:02:dd:
                    11:09:c0:3a:77:bf:16:89:d6:ea:97:fe:78:fb:be:
                    ab:74:1a:f6:46:ed:ae:7a:ca:a1:06:e1:2a:ab:d0:
                    8e:0f:b8:92:9e:72:9c:82:79:43:fd:52:03:c4:5d:
                    a1:78:6b:c1:d5:53:62:89:3c:ec:14:45:01:de:96:
                    1e:57:8b:fd:d6:c8:9a:8c:d2:70:d6:14:cb:a5:95:
                    c0:02:e4:b4:fc:e0:80:33:a1:fe:6a:d7:c8:48:76:
                    a5:f6:0e:f4:0b:af:b3:39:14:86:95:7f:42:b5:56:
                    b1:85:da:51:9a:db:5c:eb:88:50:c7:ae:57:5b:af:
                    cf:92:fa:41:c4:0a:5b:34:b3:7a:1f:9c:3d:21:c7:
                    72:08:97:87:c4:de:b9:f8:04:5d:bc:0a:4a:17:c2:
                    c4:cd:a3:49:49:43:9c:f5:48:1d:9f:65:c1:ef:c9:
                    45:a1:91:68:ef:f6:b5:9d:f6:b2:7e:91:d7:9a:58:
                    51:e8:c1:b5:b2:62:28:56:a1:8b:e7:2c:60:c0:29:
                    96:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6A:7F:83:49:3E:D2:7D:96:B2:25:1E:21:AA:F4:5E:5F:A2:FC:5D
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3235342e302f32342d3234203d3e20313335333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.237.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:4a:9a:96:4e:cf:23:4d:92:33:31:96:d9:d9:1c:a6:58:9a:
         e4:3a:a9:da:1b:87:5b:53:c4:56:14:6c:ae:14:fb:54:b5:31:
         a5:e0:dd:3e:18:cd:8d:2c:09:cd:d5:f4:9b:5e:49:42:9b:7c:
         00:54:57:33:9c:91:de:fd:be:33:68:15:7c:76:76:74:05:d6:
         cb:9e:86:4b:2a:1e:ca:6e:10:63:b4:f0:97:24:86:ca:de:3d:
         c3:44:74:6e:fd:12:b4:21:61:88:3f:b9:65:3d:ce:99:af:a6:
         be:32:92:c3:ab:ba:e9:3d:24:95:fe:98:9b:47:82:5a:4a:e2:
         e6:74:0a:d4:ba:98:3c:99:30:b1:dc:9d:e6:c6:f9:93:e4:d1:
         67:bb:8d:1b:e0:b1:b2:ef:f4:e8:77:0e:64:fc:8c:62:2e:f2:
         ec:9b:a9:e7:9a:76:e9:83:97:25:ad:c9:63:1e:de:0d:a8:9d:
         ae:66:5c:e1:fd:49:b5:b8:e4:80:af:eb:3e:ed:39:6a:55:5d:
         16:4e:66:a8:31:c4:42:24:61:fa:14:e9:f7:cc:ab:67:b0:40:
         5f:d3:77:d3:31:34:f0:a5:8f:f7:e8:96:7d:5b:be:55:02:7c:
         f1:85:b7:e4:b3:bf:c8:26:bf:3e:84:af:4b:e3:26:f4:39:84:
         42:6b:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:32:50 2026 by rpki-client