This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3139392e302f32342d3234203d3e20313335333737.roa
File:                     3130362e37352e3139392e302f32342d3234203d3e20313335333737.roa (raw, json)
Hash identifier:          aPMwIvTBTkggWjGqTMh2rK8Q8hGXMmGYNQOVYVnlidg=
Subject key identifier:   7A:74:84:E9:44:9B:26:25:66:BE:CC:88:C7:DB:75:3E:01:64:DF:D4
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       6CEBFA8214CE9397435FEF82E03E73912B3EAF06
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3139392e302f32342d3234203d3e20313335333737.roa
Signing time:             Tue 20 Jan 2026 02:10:51 +0000
ROA not before:           Tue 20 Jan 2026 02:05:51 +0000
ROA not after:            Tue 19 Jan 2027 02:10:51 +0000
asID:                     135377
IP address blocks:        106.75.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 07:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:eb:fa:82:14:ce:93:97:43:5f:ef:82:e0:3e:73:91:2b:3e:af:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:51 2026 GMT
            Not After : Jan 19 02:10:51 2027 GMT
        Subject: CN=7A7484E9449B262566BECC88C7DB753E0164DFD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9d:7c:64:4c:83:d6:fd:09:d8:15:23:79:78:
                    8f:6c:97:ac:d4:a8:4d:d6:cd:1f:65:e0:c4:5a:15:
                    96:d8:1f:44:3f:1f:3d:e9:7b:1d:f9:a3:69:49:78:
                    38:05:57:d1:5c:f9:72:28:04:02:a8:9a:ef:f6:1a:
                    05:90:84:8b:c8:08:8c:60:31:23:f6:06:29:5f:09:
                    ff:e0:37:3d:90:af:97:88:e1:ff:f1:3a:3a:5d:52:
                    c1:68:ed:fd:1a:f0:99:d1:34:36:f5:90:ea:07:cb:
                    59:18:ff:f9:a3:c2:26:5b:c1:4a:b4:a9:d9:55:e9:
                    ee:68:c1:01:a6:27:cc:f4:86:d4:48:58:e7:3d:e4:
                    fb:20:2b:03:f7:c0:16:70:64:8e:68:78:fa:f2:a9:
                    b3:4d:38:74:3b:33:50:ec:cb:c4:6b:f4:df:f8:74:
                    68:c2:3a:a0:8d:3d:9d:3a:7b:8b:fd:75:13:b3:b7:
                    36:3a:81:9b:47:b8:29:64:7c:e9:3a:3c:6b:29:93:
                    d3:8c:60:b1:3c:ae:65:5d:e3:bb:bc:28:86:fe:0c:
                    77:55:4d:13:84:17:b7:e6:7b:64:f8:2d:36:4f:57:
                    a2:eb:aa:59:1f:fe:95:31:08:fc:5b:99:e5:de:5d:
                    69:4e:40:e8:cc:73:fc:98:b5:36:eb:ad:b3:59:ca:
                    7f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:84:E9:44:9B:26:25:66:BE:CC:88:C7:DB:75:3E:01:64:DF:D4
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3139392e302f32342d3234203d3e20313335333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.75.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:57:4d:0c:eb:b7:b3:30:e0:80:a5:ea:56:31:40:20:f5:
         54:d1:bd:d5:e1:82:46:d8:90:c9:27:71:2a:00:52:fe:70:43:
         d4:48:c3:ae:4a:27:cf:75:51:86:48:62:34:ed:ac:e6:40:a8:
         19:77:f1:73:e6:19:34:e5:44:de:3e:63:1d:6d:5d:91:dc:d4:
         58:c3:6f:40:d6:b9:e4:e8:7d:c6:66:13:19:50:99:92:4e:35:
         f1:36:9b:dd:6f:9e:81:87:2c:3c:45:b0:0b:96:fd:c5:aa:18:
         c5:10:08:a8:91:fa:4e:5d:7e:ed:79:70:01:87:1d:c6:9a:da:
         0a:cd:51:03:43:e2:db:77:b3:19:8e:0a:63:9d:8a:62:94:ea:
         8f:97:05:93:b7:7f:99:ae:95:32:7c:eb:f3:aa:12:a2:2e:d3:
         a8:29:1f:56:d1:3a:06:63:38:90:e0:e2:92:a7:e5:3b:ae:65:
         ec:2b:68:f2:41:af:0c:6e:2c:ea:5d:d1:ee:c3:c9:22:32:18:
         e5:c2:d2:c9:08:d8:14:40:86:28:aa:3d:b4:b9:b4:d3:1e:79:
         20:6e:6e:54:9f:15:f8:ae:60:35:ca:5c:6d:b9:4f:73:06:79:
         8a:7a:da:7f:b9:ef:80:4c:02:d1:61:33:bc:cb:c3:2c:5f:2d:
         a5:ad:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:31:32 2026 by rpki-client