This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3139342e302f32342d3234203d3e20313335333737.roa
File:                     3130362e37352e3139342e302f32342d3234203d3e20313335333737.roa (raw, json)
Hash identifier:          Lli2W5PL74MbsX4VX+GIjtJUXzchuC1gIL2JLIiXyXQ=
Subject key identifier:   44:C1:46:91:8F:EF:0C:B0:4C:03:D5:37:12:C1:0A:FC:7D:73:05:08
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       1F3B79BFE7B76A2CF07361DC62120C643061AED8
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3139342e302f32342d3234203d3e20313335333737.roa
Signing time:             Tue 20 Jan 2026 02:10:47 +0000
ROA not before:           Tue 20 Jan 2026 02:05:47 +0000
ROA not after:            Tue 19 Jan 2027 02:10:47 +0000
asID:                     135377
IP address blocks:        106.75.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 07:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3b:79:bf:e7:b7:6a:2c:f0:73:61:dc:62:12:0c:64:30:61:ae:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:47 2026 GMT
            Not After : Jan 19 02:10:47 2027 GMT
        Subject: CN=44C146918FEF0CB04C03D53712C10AFC7D730508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:e8:32:a4:b3:44:1b:4d:64:2c:15:2f:70:
                    bc:a9:63:23:59:1a:05:7a:b9:24:61:6f:0c:29:43:
                    74:5d:b6:8d:01:ae:71:b4:94:5c:1b:ab:b5:71:4b:
                    5a:34:65:cc:76:6f:73:43:26:9d:45:48:06:09:0a:
                    e7:c3:67:9a:74:9c:31:f1:9f:5d:07:32:44:6e:ae:
                    88:bd:91:73:bf:d8:f4:a6:f8:03:66:30:a6:cf:44:
                    f2:55:e6:8f:6e:a1:03:a3:7d:ac:46:12:ec:ec:10:
                    a4:53:3d:48:09:2b:b3:2d:20:b3:3c:ac:09:55:6b:
                    aa:ea:69:6a:0d:87:44:76:11:b2:29:dc:cc:a2:d2:
                    64:32:b8:61:d5:07:29:a3:45:4a:76:a2:64:a6:53:
                    6a:d9:e4:80:6e:5e:c1:92:93:d0:50:04:b1:68:3a:
                    08:ff:6d:cd:b4:4e:4e:13:6e:a5:98:12:f2:10:75:
                    fa:fe:cd:bb:f7:31:1d:1e:a6:97:8a:db:40:5d:db:
                    c2:33:3a:9b:8b:58:d7:50:d9:db:2d:7c:e4:d4:a7:
                    26:c0:f6:a1:8c:02:1b:b7:f2:41:ac:e1:e4:c7:86:
                    1d:79:4f:9a:e6:37:86:17:b2:11:d7:f7:80:7e:c1:
                    bc:d5:db:90:ae:67:03:53:2f:e5:7a:cf:82:d2:3d:
                    94:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C1:46:91:8F:EF:0C:B0:4C:03:D5:37:12:C1:0A:FC:7D:73:05:08
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3139342e302f32342d3234203d3e20313335333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.75.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d7:6f:96:48:7a:41:6c:b6:bb:35:6c:51:46:04:10:51:76:
         24:51:5c:63:c5:0b:53:15:fe:41:94:f5:14:f1:06:c2:47:e0:
         28:0e:e5:d9:e0:48:14:b8:83:6d:a0:f1:4d:72:05:e3:18:2a:
         a6:c4:fe:55:cf:f4:52:f0:8e:58:00:7a:d8:01:ce:7f:b4:5d:
         3d:bd:a2:4b:a9:05:9c:dd:71:fa:be:1e:37:0b:dc:fd:4e:41:
         02:e3:08:27:7e:82:10:4e:7d:27:1c:76:07:4e:5c:bf:03:2b:
         67:72:d7:70:b0:56:2e:71:22:21:f9:2f:8d:02:b6:46:53:28:
         6d:12:76:6c:1c:b5:37:4e:6b:9d:40:ed:6b:5b:9f:dc:17:f5:
         7c:ba:95:c9:ab:fd:af:c2:28:60:7c:d4:f2:2a:cb:d1:82:8a:
         e4:f2:a0:ff:c4:2a:d0:01:0d:5b:9c:f6:ad:83:6b:4c:c7:52:
         81:4b:cf:84:04:24:b4:4f:43:72:a6:96:73:90:d6:0e:60:c9:
         37:95:9d:14:b6:05:47:ac:e6:62:d7:9e:ac:6f:d8:83:c9:c8:
         4d:e2:96:9d:32:e2:11:d8:db:3b:ae:e7:3c:a6:ba:4f:f1:d4:
         d6:2b:b6:d9:f5:38:e7:a6:c9:93:e4:da:22:88:fe:06:38:73:
         a1:c7:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:31:11 2026 by rpki-client