This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3134342e302f32302d3230203d3e203539303737.roa
File:                     3130362e37352e3134342e302f32302d3230203d3e203539303737.roa (raw, json)
Hash identifier:          SAeZu6vcL3NcV3Sf4SgQ3MdHPoqQ8Lsat34CCobt/Xo=
Subject key identifier:   B2:E4:D1:80:85:CF:40:9D:B0:F2:C8:05:03:98:F2:70:E4:D9:FF:B1
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       3A6994859AFA983DD0941FD437053F6C28145AF1
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3134342e302f32302d3230203d3e203539303737.roa
Signing time:             Tue 20 Jan 2026 02:10:50 +0000
ROA not before:           Tue 20 Jan 2026 02:05:50 +0000
ROA not after:            Tue 19 Jan 2027 02:10:50 +0000
asID:                     59077
IP address blocks:        106.75.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:69:94:85:9a:fa:98:3d:d0:94:1f:d4:37:05:3f:6c:28:14:5a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:50 2026 GMT
            Not After : Jan 19 02:10:50 2027 GMT
        Subject: CN=B2E4D18085CF409DB0F2C8050398F270E4D9FFB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:51:c6:fd:6c:d8:2b:e5:be:5c:5e:0e:3d:
                    a4:4f:92:9b:82:92:dc:95:ff:d7:fd:f7:e5:f9:bb:
                    51:6b:0b:c6:bc:37:64:3e:b2:37:c6:96:fd:04:4d:
                    f8:e7:80:0d:f5:ed:dc:6a:b1:ec:88:37:d6:46:52:
                    8f:94:f6:df:8e:d7:62:99:f5:80:1c:9d:9b:a4:cd:
                    ea:98:d3:0b:29:6c:d1:df:12:17:c5:7b:81:0f:f1:
                    d1:a4:4f:4d:8a:aa:f3:6c:ff:58:55:dd:d8:78:67:
                    c0:b1:fd:95:d8:04:4a:0e:8a:eb:5d:0a:a3:d1:4b:
                    0e:0c:12:d0:54:13:56:48:cb:e5:ae:fb:b5:6b:df:
                    c0:d6:87:28:f5:c5:01:43:ba:20:78:54:60:cb:81:
                    56:90:2a:62:78:0a:60:cc:ef:66:1e:69:01:65:89:
                    bd:af:f6:a4:70:53:14:66:ca:3c:c6:c1:1c:52:1e:
                    f8:f8:b6:69:a7:7c:04:69:4a:5b:55:4e:73:87:b7:
                    c7:8c:38:ed:90:76:56:1c:46:b5:e0:2c:bf:a9:af:
                    1f:a5:a0:7c:63:c5:5d:3d:6c:61:92:2f:d3:b7:d9:
                    32:03:74:5a:b9:14:33:4f:40:44:29:c6:4b:da:82:
                    1e:b7:9f:36:73:08:55:cc:05:f9:2a:8d:81:27:31:
                    4e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E4:D1:80:85:CF:40:9D:B0:F2:C8:05:03:98:F2:70:E4:D9:FF:B1
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3134342e302f32302d3230203d3e203539303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.75.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:05:59:a8:27:41:cb:57:c9:96:24:2f:28:a8:a2:df:b6:e1:
         5c:1a:09:cc:33:e7:2f:3e:a4:0e:c1:c7:d5:2b:40:af:93:42:
         0f:6e:9b:c7:86:fa:2e:61:da:f7:11:7d:1b:be:57:44:70:bf:
         2f:c4:74:b1:24:45:15:b5:87:df:09:ec:97:31:1d:46:40:dc:
         91:5d:1c:5a:a8:e7:ec:71:5a:ec:71:60:27:65:27:5c:3e:3f:
         0d:33:0b:33:c1:ec:c0:39:ad:12:e0:47:8b:12:de:48:44:0c:
         5b:cf:6d:f3:63:f5:dd:42:75:bb:d0:d6:9b:2f:f0:77:ce:72:
         54:ea:75:75:df:e3:48:86:81:77:6d:5e:66:47:46:65:a1:c8:
         0a:02:a1:d0:18:60:f1:e7:35:55:e9:a8:8b:19:e8:c3:02:95:
         1e:00:3a:53:83:43:9b:b0:71:23:c2:8b:bc:00:90:8c:0b:12:
         ed:af:cb:57:75:ea:8a:8d:af:39:11:0f:99:2d:ba:7d:a5:81:
         e0:9a:4e:1c:59:2a:75:0d:d4:dd:3e:15:46:c1:98:92:47:5b:
         f6:42:5e:3e:1a:49:58:ac:5d:fc:a1:90:97:1d:31:d2:0e:f8:
         86:02:50:f6:9a:c5:1a:08:24:cb:14:3e:51:8a:3f:e8:fa:f2:
         65:8b:70:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:23:21 2026 by rpki-client