This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3232342e302f32302d3230203d3e2034383132.roa
File:                     3130362e37352e3232342e302f32302d3230203d3e2034383132.roa (raw, json)
Hash identifier:          /67svCtPIpZT17HXDY0giK0d6YzFlvyDvmp7Qge7634=
Subject key identifier:   C7:DE:56:28:53:B0:E9:CD:A9:C5:CB:4F:35:B5:41:61:FD:3A:AD:10
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       4EADE70A785C58AE60A568D8E766030F24A59032
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3232342e302f32302d3230203d3e2034383132.roa
Signing time:             Tue 20 Jan 2026 02:10:51 +0000
ROA not before:           Tue 20 Jan 2026 02:05:51 +0000
ROA not after:            Tue 19 Jan 2027 02:10:51 +0000
asID:                     4812
IP address blocks:        106.75.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ad:e7:0a:78:5c:58:ae:60:a5:68:d8:e7:66:03:0f:24:a5:90:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:51 2026 GMT
            Not After : Jan 19 02:10:51 2027 GMT
        Subject: CN=C7DE562853B0E9CDA9C5CB4F35B54161FD3AAD10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e3:0f:69:0f:4d:eb:b2:72:54:43:03:69:40:
                    6c:22:72:6c:cc:81:10:02:ce:69:09:7d:79:a2:92:
                    7a:6f:13:d1:e2:8b:b7:a5:30:6c:b4:46:4c:d3:09:
                    9a:95:b4:47:e7:26:52:cf:2f:2e:c1:52:ac:17:d6:
                    1f:d1:fd:39:c9:53:f9:40:ce:f8:96:b4:3a:a1:d1:
                    78:4a:bd:d6:07:55:e7:f5:88:37:21:a1:7e:7f:51:
                    81:ee:2e:23:14:87:5e:53:ea:40:fb:ca:51:33:2b:
                    ca:de:3a:3b:bb:57:2b:7d:f4:c3:b8:85:c7:28:a1:
                    f0:f6:18:1e:44:fa:5a:1c:ab:ef:42:ae:e2:07:6c:
                    77:eb:aa:38:37:7a:8b:e5:f5:2d:3f:eb:56:f1:f4:
                    ff:61:d9:94:ba:58:75:a2:96:a9:5e:89:75:d0:70:
                    89:89:7b:15:d6:dd:32:91:7e:ee:a9:85:7f:92:11:
                    e9:c2:fa:c3:74:f1:67:0b:9c:25:1b:ab:6e:e4:e2:
                    cc:77:2d:06:24:77:b9:cd:0f:3f:d0:ed:d4:fe:74:
                    68:3a:86:e1:67:30:c1:97:c4:f6:f3:89:a6:35:d4:
                    99:53:52:e6:a8:a2:4b:17:91:8c:bc:a5:32:a0:24:
                    eb:85:45:78:ee:a2:15:22:a8:60:0c:d8:c3:89:4c:
                    b1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DE:56:28:53:B0:E9:CD:A9:C5:CB:4F:35:B5:41:61:FD:3A:AD:10
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e3232342e302f32302d3230203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.75.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:b2:36:c9:63:2e:88:f3:dc:d0:cb:59:80:b7:cc:1e:73:a8:
         b6:2c:f0:dc:f3:28:ca:fe:be:b1:91:a9:38:5b:d3:95:0d:29:
         17:ee:63:96:2f:98:69:b6:90:47:5f:2d:f2:bf:47:e0:a4:84:
         91:96:9c:bd:e4:bc:cb:1f:fe:c8:89:fd:0a:40:c1:8a:ad:f3:
         e6:c7:e1:d4:55:52:74:35:b1:1b:f3:e0:d3:e8:56:a6:8d:75:
         56:9b:59:41:b3:8e:88:e3:c3:b4:ba:45:eb:bd:0d:83:5b:04:
         c3:bd:e4:a0:31:57:be:13:3b:85:79:14:90:dd:9a:d8:5e:f0:
         51:d7:c1:c7:cc:13:78:45:3f:f5:72:f8:fe:b5:6a:9d:b4:2a:
         63:9b:15:cb:66:67:3d:69:d2:26:ec:73:8b:32:6c:a2:d3:4b:
         b5:d8:3f:e3:c5:e6:73:ad:27:85:88:4f:03:37:d5:31:f5:2e:
         d8:b8:f3:5f:4c:0b:47:47:fc:5a:1d:82:58:ac:9a:dd:06:f5:
         fa:ba:43:a5:e4:a4:91:d7:0f:4c:7a:4e:cc:4e:e5:be:7d:c1:
         b1:c2:ae:99:45:ca:3e:54:43:a8:3d:e0:58:c0:2e:08:fa:d7:
         a9:87:da:a3:98:39:ba:f4:c9:db:43:9a:6c:dc:80:50:b4:dc:
         ad:49:3a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:22:00 2026 by rpki-client