This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3137362e302f32302d3230203d3e203538343636.roa
File:                     3130362e37352e3137362e302f32302d3230203d3e203538343636.roa (raw, json)
Hash identifier:          vnxh5j4iy/xRpcsh8UAsIAX0F1EQLtGTl8U1KZU4mSg=
Subject key identifier:   D9:7C:17:26:5F:19:88:22:D7:3E:56:88:62:D7:8F:5F:56:A7:E7:69
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       453A17D4315874FB2102198041EBEA4917F0B2CE
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3137362e302f32302d3230203d3e203538343636.roa
Signing time:             Tue 20 Jan 2026 02:10:49 +0000
ROA not before:           Tue 20 Jan 2026 02:05:49 +0000
ROA not after:            Tue 19 Jan 2027 02:10:49 +0000
asID:                     58466
IP address blocks:        106.75.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3a:17:d4:31:58:74:fb:21:02:19:80:41:eb:ea:49:17:f0:b2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:49 2026 GMT
            Not After : Jan 19 02:10:49 2027 GMT
        Subject: CN=D97C17265F198822D73E568862D78F5F56A7E769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:72:9d:ec:ec:ee:b4:ac:cb:f6:c5:b8:75:
                    46:1a:6c:1f:b9:57:c9:90:3b:ff:b6:33:bf:0c:49:
                    7a:98:72:fd:6f:9c:08:b7:80:3f:3b:33:b9:59:3a:
                    58:78:31:11:5a:f6:98:ff:63:25:12:2c:8b:7b:5c:
                    bb:72:70:64:c5:fb:19:83:63:77:bc:e5:ee:e1:a6:
                    e0:be:ab:ee:66:bb:2e:3f:66:9f:5a:7b:85:29:ac:
                    55:50:6c:e7:57:a0:9c:89:1f:4c:f7:10:9c:83:36:
                    4a:af:34:fd:46:7a:7a:b3:e5:c5:af:1a:92:ac:f1:
                    fe:b1:09:b2:5c:79:17:74:d0:96:99:97:e7:3e:05:
                    7b:6c:b2:50:b7:88:4f:0b:a5:3a:70:79:3d:43:18:
                    6a:5c:b3:d0:46:98:08:67:30:f8:8a:79:8b:ca:c1:
                    ee:61:05:56:51:55:e6:89:60:4a:c2:be:0d:10:c0:
                    0f:ec:7f:48:f8:dd:dc:58:7a:81:3a:ff:c6:65:1b:
                    4e:d3:4f:cc:9a:b6:cb:74:50:88:65:20:e3:44:56:
                    e5:86:4c:45:17:d1:3d:07:8b:9f:70:11:12:f5:1c:
                    ff:a3:a4:53:2c:1b:e3:30:73:04:0a:27:dc:47:b9:
                    07:e8:94:5a:3a:ce:13:49:b8:5b:62:6f:38:e0:7b:
                    18:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7C:17:26:5F:19:88:22:D7:3E:56:88:62:D7:8F:5F:56:A7:E7:69
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3137362e302f32302d3230203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.75.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:4e:e4:0e:47:60:ad:86:94:20:f6:47:79:fa:4c:53:97:39:
         18:b5:f3:7a:86:ee:e9:9f:e0:bc:b6:21:e1:9e:95:ae:95:e2:
         ee:db:76:be:74:e3:b7:f0:7b:64:aa:f8:f7:5d:e5:c2:3b:cb:
         22:58:f4:e8:7a:9d:55:6f:af:93:76:87:8b:50:41:0e:27:c2:
         3b:29:e4:47:c3:76:54:c2:56:da:49:b0:64:a0:7c:a9:62:83:
         35:fa:5a:66:a6:78:28:e6:39:40:9b:c5:8c:91:fb:e6:cb:78:
         ee:e7:d1:e8:a2:b5:34:a7:96:f3:1b:7b:68:14:e9:d1:73:77:
         a4:ce:a7:a2:d3:88:56:21:33:ab:8b:ba:70:e5:4e:ea:0f:6d:
         cc:e0:38:a5:0b:62:48:c5:8d:af:e2:f6:9d:e0:ce:fb:23:bf:
         cb:c5:3b:fd:d9:b6:5d:e3:5c:3a:99:2a:a9:ce:93:39:02:be:
         ad:b1:dd:b9:c7:62:d2:c5:a2:dc:86:0c:f9:e2:ca:9a:58:23:
         67:cf:90:2c:2f:14:01:ef:6e:34:7e:87:15:fd:9d:c5:55:32:
         69:57:c1:16:64:67:90:78:ba:79:48:92:59:84:f6:5b:ce:69:
         1d:9f:b7:0f:63:0a:87:89:17:c2:c0:3a:9d:7d:fd:6b:77:9a:
         45:0b:39:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:23:21 2026 by rpki-client