This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3139382e302f32342d3234203d3e20313335333737.roa
File:                     3130362e37352e3139382e302f32342d3234203d3e20313335333737.roa (raw, json)
Hash identifier:          ggSVZin/qSeZ3dUCFR7MjN2NtgIQDCq3MZh7MzAGSSU=
Subject key identifier:   DD:14:58:2E:40:CB:D6:A6:6D:8D:6A:77:C4:3A:B7:81:3D:80:03:38
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       70EDEF1E258D0DDFA1EEBBF111857A01AAC05301
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3139382e302f32342d3234203d3e20313335333737.roa
Signing time:             Tue 20 Jan 2026 02:10:52 +0000
ROA not before:           Tue 20 Jan 2026 02:05:52 +0000
ROA not after:            Tue 19 Jan 2027 02:10:52 +0000
asID:                     135377
IP address blocks:        106.75.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ed:ef:1e:25:8d:0d:df:a1:ee:bb:f1:11:85:7a:01:aa:c0:53:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:52 2026 GMT
            Not After : Jan 19 02:10:52 2027 GMT
        Subject: CN=DD14582E40CBD6A66D8D6A77C43AB7813D800338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:89:97:9a:ec:62:e9:ae:61:c8:df:dc:aa:
                    78:44:06:88:ae:c2:6c:c9:26:ba:a0:bc:ab:20:0d:
                    db:6e:d5:d3:4d:ac:33:cb:78:bf:24:48:4c:d7:79:
                    01:60:55:c6:67:d1:d6:7c:ec:1a:da:86:81:29:67:
                    0c:fd:11:ce:10:bd:69:00:23:c2:dc:85:f3:8d:1b:
                    cd:c7:05:ec:a3:fc:4f:85:81:e7:a6:e4:92:ba:81:
                    bb:8a:fd:03:dd:c9:c8:0d:7d:4a:62:b5:c1:1d:ee:
                    8c:e4:f7:ec:59:c0:b9:04:d1:b9:52:90:cb:f5:91:
                    a3:d3:49:6e:42:93:0c:1d:50:16:66:d7:b1:ed:33:
                    3b:d1:b2:07:0f:ce:a6:02:aa:5b:0b:c3:15:54:77:
                    e4:16:f4:57:f9:23:c9:22:55:ca:ee:78:4f:24:cb:
                    2c:af:a6:a0:9d:1d:f9:28:22:03:77:f0:86:bf:be:
                    c7:d2:25:3c:ff:f2:3c:46:2b:29:98:38:6c:5b:c5:
                    a1:72:3c:c6:32:eb:4c:c1:92:23:84:fd:ad:d0:6b:
                    3c:73:6e:2d:78:a0:71:53:6e:d2:28:05:d3:d1:3e:
                    de:3f:19:e8:09:fb:30:aa:7d:41:76:93:ea:b8:e8:
                    04:d4:45:69:fe:14:11:09:3c:4e:7c:20:47:38:01:
                    a8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:14:58:2E:40:CB:D6:A6:6D:8D:6A:77:C4:3A:B7:81:3D:80:03:38
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3139382e302f32342d3234203d3e20313335333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.75.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d5:08:c1:bf:fd:1e:2b:82:7c:52:00:17:99:ad:af:4e:a8:
         a7:d8:21:85:27:21:0e:a4:7e:6c:27:ea:31:23:8c:d9:27:ab:
         cf:06:4c:e2:ff:90:4e:6b:85:33:8c:c4:c1:ad:b7:4d:21:78:
         ab:06:4d:4a:09:68:98:8d:13:ce:18:11:7b:1c:ad:2a:9b:7d:
         a3:87:e0:7c:19:cc:29:3d:db:3e:40:47:ee:fe:d8:cb:f9:92:
         c9:ff:1f:2f:84:cf:f9:fb:8c:95:91:2f:8a:a2:ac:2e:bc:67:
         ad:60:91:53:70:ab:02:9e:e2:dc:e0:03:8d:e7:31:42:1c:24:
         4f:bf:7a:4d:25:e8:ef:8a:ae:a3:86:e1:0c:e9:61:7d:f3:71:
         b7:cd:03:4b:4b:32:ed:c2:53:9c:2c:cd:b3:8e:29:22:a5:f5:
         eb:c6:da:db:17:f0:08:bc:39:e9:c9:34:39:20:f1:95:e7:c3:
         8c:ee:7a:80:e4:0c:5c:05:a7:f5:08:5e:1a:6d:d6:17:95:ab:
         03:28:2b:0a:a3:98:ec:13:a3:89:aa:59:68:3c:41:b1:e6:f2:
         d2:ab:9e:e0:49:34:e7:cc:5e:b8:5e:5d:ac:cb:21:3f:7f:ed:
         46:f4:94:68:b0:a7:35:1d:8d:4b:5e:90:35:3e:c7:7f:9e:96:
         1e:d2:c0:06
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUcO3vHiWNDd+h7rvxEYV6AarAUwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB
OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTJaFw0yNzAxMTkwMjEwNTJaMDMxMTAvBgNV
BAMTKEREMTQ1ODJFNDBDQkQ2QTY2RDhENkE3N0M0M0FCNzgxM0Q4MDAzMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRomXmuxi6a5hyN/cqnhEBoiu
wmzJJrqgvKsgDdtu1dNNrDPLeL8kSEzXeQFgVcZn0dZ87BrahoEpZwz9Ec4QvWkA
I8LchfONG83HBeyj/E+Fgeem5JK6gbuK/QPdycgNfUpitcEd7ozk9+xZwLkE0blS
kMv1kaPTSW5CkwwdUBZm17HtMzvRsgcPzqYCqlsLwxVUd+QW9Ff5I8kiVcrueE8k
yyyvpqCdHfkoIgN38Ia/vsfSJTz/8jxGKymYOGxbxaFyPMYy60zBkiOE/a3Qazxz
bi14oHFTbtIoBdPRPt4/GegJ+zCqfUF2k+q46ATURWn+FBEJPE58IEc4Aai5AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU3RRYLkDL1qZtjWp3xDq3gT2AAzgwHwYDVR0j
BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4
MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1ODkxODcvMC8zMTMwMzYyZTM3
MzUyZTMxMzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMzMzczNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGpLxjANBgkqhkiG9w0BAQsFAAOCAQEAGtUIwb/9HiuCfFIAF5mt
r06op9ghhSchDqR+bCfqMSOM2SerzwZM4v+QTmuFM4zEwa23TSF4qwZNSglomI0T
zhgRexytKpt9o4fgfBnMKT3bPkBH7v7Yy/mSyf8fL4TP+fuMlZEviqKsLrxnrWCR
U3CrAp7i3OADjecxQhwkT796TSXo74quo4bhDOlhffNxt80DS0sy7cJTnCzNs44p
IqX168ba2xfwCLw56ck0OSDxlefDjO56gOQMXAWn9QheGm3WF5WrAygrCqOY7BOj
iapZaDxBseby0que4Ek058xeuF5drMshP3/tRvSUaLCnNR2NS16QNT7Hf56WHtLA
Bg==
-----END CERTIFICATE-----
Generated at Wed Jan 21 01:31:32 2026 by rpki-client