This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3137362e302f32302d3230203d3e203539303737.roa
File:                     3130362e37352e3137362e302f32302d3230203d3e203539303737.roa (raw, json)
Hash identifier:          noG/jcvX46mBKAlYgZr5dHGv+r9xIV8QJLBUn5Synno=
Subject key identifier:   1D:59:A8:54:39:DD:D9:43:8F:E9:2C:C6:E3:03:82:D9:8F:FB:29:15
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       1776333DC4F26EA707910B5508DCAE87B71A5E41
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3137362e302f32302d3230203d3e203539303737.roa
Signing time:             Tue 20 Jan 2026 02:10:52 +0000
ROA not before:           Tue 20 Jan 2026 02:05:52 +0000
ROA not after:            Tue 19 Jan 2027 02:10:52 +0000
asID:                     59077
IP address blocks:        106.75.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:76:33:3d:c4:f2:6e:a7:07:91:0b:55:08:dc:ae:87:b7:1a:5e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:52 2026 GMT
            Not After : Jan 19 02:10:52 2027 GMT
        Subject: CN=1D59A85439DDD9438FE92CC6E30382D98FFB2915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:70:7d:98:c1:c4:63:66:d0:3b:24:12:62:
                    60:bf:83:43:30:15:56:74:c7:f6:43:16:e3:8b:6c:
                    a7:46:7e:59:0d:32:e7:92:9d:43:62:fa:63:b0:eb:
                    f9:00:5a:66:7f:2b:89:0d:85:47:d7:c5:45:9c:ca:
                    34:aa:97:6f:7a:75:4b:66:a1:74:d5:11:c9:b7:c9:
                    68:e3:a4:06:e5:91:ef:30:c3:a9:8e:30:13:e2:05:
                    03:f5:a2:ba:47:fc:ef:58:be:1a:f8:5e:89:0b:24:
                    2a:d4:31:2b:a6:9a:10:d7:6b:d9:9e:0e:6b:90:50:
                    4b:30:3a:15:5d:02:19:63:08:e2:72:d2:8c:0d:01:
                    c0:f5:4c:39:18:90:6b:d2:93:7b:3e:71:1a:2a:83:
                    c3:07:4e:0d:60:f8:bd:98:de:58:54:73:c0:c0:05:
                    2f:13:83:42:45:39:9a:70:68:8f:7e:4b:f6:66:59:
                    a0:5d:0c:e4:c3:7b:cb:06:6a:7a:65:0f:23:58:fb:
                    23:18:6a:9c:4a:fe:a9:58:2f:ff:38:a0:62:f7:eb:
                    e6:0c:bc:df:fe:40:06:9e:c8:fb:f2:bd:2e:99:ae:
                    32:02:8d:b7:6a:82:fe:17:07:1b:23:13:34:f9:c8:
                    84:d4:c5:c6:80:86:88:7c:fc:54:66:fc:e2:a5:85:
                    93:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:59:A8:54:39:DD:D9:43:8F:E9:2C:C6:E3:03:82:D9:8F:FB:29:15
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3137362e302f32302d3230203d3e203539303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.75.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d0:2e:c0:ed:db:20:b6:e4:89:43:00:5a:62:64:b1:ff:d9:86:
         92:e9:2a:94:81:6d:41:e4:6c:b3:35:0b:3c:99:b5:54:e8:2e:
         38:07:05:22:7d:ca:fc:57:58:49:f2:1c:eb:61:a5:b8:ca:8a:
         1b:d1:28:a7:64:80:fc:76:b9:1a:2d:66:64:58:be:0c:f7:a6:
         df:62:96:41:15:64:3d:59:66:c8:68:ef:15:8d:12:f3:f9:56:
         b0:dd:57:a5:3e:a7:43:e2:2d:c0:42:10:1b:00:ec:6c:f8:e3:
         0e:c0:1f:63:25:ec:a9:e6:5f:0d:9b:40:f3:56:96:d7:f0:9f:
         b1:37:84:74:fb:7f:17:95:f9:72:e6:c6:83:2e:c5:dd:f6:df:
         d1:87:d0:77:df:df:00:4c:bb:04:b8:b9:f0:fc:93:b5:99:15:
         d9:82:20:0a:bd:fe:65:22:b3:bd:31:e5:27:f1:c3:e5:45:5b:
         37:fa:85:fb:bc:a7:b0:c7:fe:03:81:46:ee:19:8b:14:07:48:
         e5:e3:2a:55:1b:36:57:30:c0:88:12:d1:33:94:61:8a:d3:27:
         47:de:48:fe:44:f9:f6:0b:a5:2a:3a:1b:64:8a:da:71:7b:61:
         18:27:ae:c9:40:11:ff:3a:ec:10:0b:38:6a:1b:ff:e7:db:88:
         01:92:8d:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:23:26 2026 by rpki-client