This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3139332e302f32342d3234203d3e20313335333737.roa
File:                     3130362e37352e3139332e302f32342d3234203d3e20313335333737.roa (raw, json)
Hash identifier:          /TPslG+olXwNEKEEMS7fGfBP5Ljj0w7wPq7qCvIvkYw=
Subject key identifier:   8A:15:AD:69:B1:0C:7A:CB:36:50:04:02:F3:22:E0:F1:A0:67:45:7C
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       6A3A0215F55E378674FEEF106A62C1812FA93AC9
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3139332e302f32342d3234203d3e20313335333737.roa
Signing time:             Tue 20 Jan 2026 02:10:47 +0000
ROA not before:           Tue 20 Jan 2026 02:05:47 +0000
ROA not after:            Tue 19 Jan 2027 02:10:47 +0000
asID:                     135377
IP address blocks:        106.75.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 07:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3a:02:15:f5:5e:37:86:74:fe:ef:10:6a:62:c1:81:2f:a9:3a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:47 2026 GMT
            Not After : Jan 19 02:10:47 2027 GMT
        Subject: CN=8A15AD69B10C7ACB36500402F322E0F1A067457C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:60:d8:e5:16:16:72:32:a7:dc:bb:06:8a:d7:
                    f2:3e:fa:ed:a4:f9:80:e9:ff:06:77:20:53:b1:a5:
                    e6:df:b3:99:d5:d5:fe:b8:83:44:1e:d9:05:1c:e4:
                    26:b9:6b:1b:20:e0:a0:30:b4:da:92:b0:b7:1b:b9:
                    0d:78:5a:f6:bb:2a:b2:41:4e:55:84:85:7e:44:d3:
                    3e:9e:7e:3b:35:72:e1:3e:c0:5e:00:9c:5b:c8:97:
                    13:1c:41:f1:31:93:ee:db:0b:42:0d:f5:bd:46:d1:
                    74:a9:ba:a7:cd:ba:5c:5d:4d:2d:6e:23:ba:7f:94:
                    eb:ad:d4:9e:fd:05:16:ff:aa:4f:aa:96:bb:7a:63:
                    9e:d5:c0:84:fa:a5:81:0b:a0:b0:57:b2:17:1d:8e:
                    fe:b3:68:00:89:d1:80:5f:65:c9:e6:2c:e6:62:e7:
                    9e:30:53:0b:5a:7f:c0:9b:86:30:78:6a:89:79:15:
                    f9:36:e4:5c:78:fb:fc:9d:8f:73:31:44:1c:bf:80:
                    ed:68:8d:79:d6:30:ce:5a:19:77:ff:11:a2:68:11:
                    59:20:21:ec:f0:5c:ac:c6:9a:1a:6c:03:fd:44:c4:
                    6e:e5:1b:0b:8e:79:ca:6b:c4:fc:6e:fc:b7:98:a8:
                    a3:c3:0e:d1:a0:03:3b:d4:62:5e:02:7a:4b:98:b7:
                    ea:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:15:AD:69:B1:0C:7A:CB:36:50:04:02:F3:22:E0:F1:A0:67:45:7C
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3139332e302f32342d3234203d3e20313335333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.75.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:a9:80:97:d4:78:18:6d:c9:ed:a0:c8:79:54:ac:61:09:fa:
         2b:b5:81:1f:ca:e9:0a:cb:d1:be:51:ab:9d:c4:c0:c4:1a:72:
         78:b2:aa:b2:28:cd:d9:e9:a9:ed:6b:dc:b6:c8:96:6f:a8:c6:
         f8:7f:74:46:a3:15:ff:64:d0:32:50:d8:b6:c3:0c:5a:d0:94:
         0d:a1:91:ca:6f:e4:10:09:bc:45:22:52:e4:1d:59:78:fd:4a:
         b2:1d:7b:fa:3b:9e:61:02:59:ac:be:9b:99:8d:ed:ec:f9:05:
         8b:39:50:f8:d7:81:c1:91:3f:7e:d3:f5:a8:3e:e1:4f:70:96:
         b5:0f:48:1a:33:41:ae:ea:f3:c6:2c:73:9e:6d:3f:58:40:f8:
         74:c0:77:ab:f3:31:27:bb:7f:0c:49:6d:1a:2e:0f:44:96:26:
         f7:cf:98:f2:d4:1f:b7:95:14:3e:b6:93:61:54:83:02:40:ca:
         9a:a3:52:41:58:1e:88:58:c7:3e:01:49:e9:3c:ee:d0:93:ab:
         a8:da:ea:19:73:ca:7d:67:f7:8b:10:c8:4f:57:62:5b:b0:8e:
         4a:0a:16:25:e0:81:cc:3a:0e:ee:32:2b:58:cd:7e:15:b0:88:
         84:8c:d4:27:ab:84:84:d3:75:0f:39:b4:3d:dd:84:29:65:1b:
         6f:90:72:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:31:33 2026 by rpki-client