This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e33342e302f32342d3234203d3e203233373234.roa
File:                     3130312e3233372e33342e302f32342d3234203d3e203233373234.roa (raw, json)
Hash identifier:          FXVQ4exe9jy0nlqb/Ld0wfAT9ICwJXRyIbKKLh8lIdQ=
Subject key identifier:   1C:3A:88:71:9D:77:7E:80:1F:D1:74:FC:B0:82:DB:B7:EB:2B:60:8F
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       7A78D71F90041845F42D3222C5D6FA3675C88F7D
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e33342e302f32342d3234203d3e203233373234.roa
Signing time:             Tue 20 Jan 2026 02:10:52 +0000
ROA not before:           Tue 20 Jan 2026 02:05:52 +0000
ROA not after:            Tue 19 Jan 2027 02:10:52 +0000
asID:                     23724
IP address blocks:        101.237.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:78:d7:1f:90:04:18:45:f4:2d:32:22:c5:d6:fa:36:75:c8:8f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:52 2026 GMT
            Not After : Jan 19 02:10:52 2027 GMT
        Subject: CN=1C3A88719D777E801FD174FCB082DBB7EB2B608F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:3c:77:50:67:d2:84:39:f1:09:88:3c:cd:
                    b9:99:8f:40:65:d6:d6:7f:39:74:00:33:d0:a4:76:
                    97:b5:b5:71:38:9a:d8:09:ec:e0:c1:96:08:58:9e:
                    ba:99:11:73:3f:dc:24:aa:df:d3:42:2d:58:f0:b4:
                    d6:6d:db:4e:28:f5:33:0d:c8:ab:63:66:7a:ae:b2:
                    4a:91:0c:c7:7f:13:fd:fa:de:60:b9:b5:c1:e4:c3:
                    f4:71:49:63:1d:e3:24:0e:da:6b:b1:cd:f9:d9:7c:
                    2b:5d:e7:1f:e2:71:ae:91:c1:70:77:23:7f:25:82:
                    a9:cf:45:5c:e0:7c:20:8b:f3:0b:d0:b9:13:e8:4f:
                    95:62:c0:1a:14:4a:1a:8f:00:b6:4c:91:ce:d6:73:
                    0c:d0:bc:5d:f1:8d:52:f0:50:f1:d4:09:55:ff:f9:
                    3d:97:0e:a9:60:ff:5d:80:68:9b:0c:b1:a7:82:48:
                    81:e4:53:87:5d:ee:bd:00:c4:78:c4:4c:c7:8f:ad:
                    cd:60:83:f8:56:af:e0:33:91:0c:a4:2a:55:c7:0d:
                    84:34:08:18:3d:3e:cb:bc:ab:e0:b0:af:74:37:eb:
                    f7:f7:85:cc:d1:45:72:34:fa:20:14:89:16:fd:3e:
                    b5:0b:eb:32:7d:6b:11:25:3d:48:f4:b6:b5:0b:2d:
                    fa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3A:88:71:9D:77:7E:80:1F:D1:74:FC:B0:82:DB:B7:EB:2B:60:8F
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e33342e302f32342d3234203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.237.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e2:c0:5f:49:dd:fa:ab:11:0e:4c:e4:0e:d7:6e:53:60:87:48:
         1d:dc:87:33:10:90:f0:22:ee:b3:c2:c8:5b:69:df:81:27:3f:
         c6:e5:5d:73:de:a8:6a:f7:66:dd:66:b8:7a:37:35:02:8b:7f:
         a7:40:8d:bb:9f:8f:44:05:00:c7:47:57:c7:8b:29:0a:27:a9:
         77:d5:70:ca:cb:1a:c3:8f:8a:2c:70:14:be:58:d0:d5:f8:dc:
         86:96:b9:91:6e:32:0d:e3:6e:18:15:3c:41:99:68:71:07:bc:
         93:ac:46:24:4f:e6:e7:6f:09:97:54:ec:7a:80:c7:35:fe:24:
         7d:83:e9:81:23:61:14:f6:40:0e:2f:11:c1:5e:f9:df:44:73:
         9d:70:b4:81:f8:79:8c:a1:bc:8f:48:89:c9:20:c6:9f:f1:09:
         e0:fb:9b:88:44:69:34:c4:f1:80:c1:2b:5f:a3:9e:86:da:bf:
         03:cc:94:cd:b9:93:51:a7:2e:bf:6c:9f:dd:d8:fb:9a:80:69:
         07:c6:17:1c:b8:36:ed:f7:be:8d:56:84:72:b1:e6:c7:7a:d8:
         b6:55:75:36:0c:d1:b0:42:08:13:43:b4:d5:f6:74:6e:b1:f9:
         61:e1:bb:7f:62:68:9f:be:0f:30:22:02:4c:12:57:df:28:3e:
         51:0a:3b:5d
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUenjXH5AEGEX0LTIixdb6NnXIj30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB
OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTJaFw0yNzAxMTkwMjEwNTJaMDMxMTAvBgNV
BAMTKDFDM0E4ODcxOUQ3NzdFODAxRkQxNzRGQ0IwODJEQkI3RUIyQjYwOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpNzx3UGfShDnxCYg8zbmZj0Bl
1tZ/OXQAM9Ckdpe1tXE4mtgJ7ODBlghYnrqZEXM/3CSq39NCLVjwtNZt204o9TMN
yKtjZnquskqRDMd/E/363mC5tcHkw/RxSWMd4yQO2muxzfnZfCtd5x/ica6RwXB3
I38lgqnPRVzgfCCL8wvQuRPoT5ViwBoUShqPALZMkc7WcwzQvF3xjVLwUPHUCVX/
+T2XDqlg/12AaJsMsaeCSIHkU4dd7r0AxHjETMePrc1gg/hWr+AzkQykKlXHDYQ0
CBg9Psu8q+Cwr3Q36/f3hczRRXI0+iAUiRb9PrUL6zJ9axElPUj0trULLfp1AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUHDqIcZ13foAf0XT8sILbt+srYI8wHwYDVR0j
BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4
MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDU4OTE4Ny8wLzMxMzAzMTJlMzIz
MzM3MmUzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGXtIjANBgkqhkiG9w0BAQsFAAOCAQEA4sBfSd36qxEOTOQO125TYIdI
HdyHMxCQ8CLus8LIW2nfgSc/xuVdc96oavdm3Wa4ejc1Aot/p0CNu5+PRAUAx0dX
x4spCiepd9Vwyssaw4+KLHAUvljQ1fjchpa5kW4yDeNuGBU8QZlocQe8k6xGJE/m
528Jl1TseoDHNf4kfYPpgSNhFPZADi8RwV7530RznXC0gfh5jKG8j0iJySDGn/EJ
4PubiERpNMTxgMErX6Oehtq/A8yUzbmTUacuv2yf3dj7moBpB8YXHLg27fe+jVaE
crHmx3rYtlV1NgzRsEIIE0O01fZ0brH5YeG7f2Jon74PMCICTBJX3yg+UQo7XQ==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:24:06 2026 by rpki-client