This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e33322e302f31392d3139203d3e203233373234.roa
File:                     3130362e37352e33322e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier:          Cd7+ZmrxH553jGTI+1CD8bVTWCrBViVb/WY93/28PXg=
Subject key identifier:   2A:7F:21:80:2D:1F:18:5D:54:3C:18:D9:8E:DC:3F:F8:2F:2C:A5:20
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       091E9A12DF78B3831E0C2648129EC595ED8C0D24
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e33322e302f31392d3139203d3e203233373234.roa
Signing time:             Tue 20 Jan 2026 02:10:51 +0000
ROA not before:           Tue 20 Jan 2026 02:05:51 +0000
ROA not after:            Tue 19 Jan 2027 02:10:51 +0000
asID:                     23724
IP address blocks:        106.75.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1e:9a:12:df:78:b3:83:1e:0c:26:48:12:9e:c5:95:ed:8c:0d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:51 2026 GMT
            Not After : Jan 19 02:10:51 2027 GMT
        Subject: CN=2A7F21802D1F185D543C18D98EDC3FF82F2CA520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:c0:8e:00:f5:8e:b1:42:c0:f1:ac:4a:96:
                    29:14:9d:79:31:57:a5:13:9d:6d:f7:ef:34:b9:10:
                    3d:f2:a4:99:fd:78:db:6d:1d:3c:80:4e:7f:7e:ce:
                    87:08:49:13:34:52:d7:f4:44:f3:7a:2e:bf:19:79:
                    25:80:a6:0d:0e:fd:6b:b2:4f:94:83:41:d2:f2:f3:
                    a4:49:6a:8b:e1:85:6c:19:61:9f:21:f1:a4:44:98:
                    a2:80:12:b2:78:05:47:d8:06:e7:5b:94:d5:d4:0f:
                    ab:b2:02:2d:e4:51:d4:8d:2f:43:7c:d1:60:e2:91:
                    8b:97:b9:37:5e:43:17:48:3c:89:9c:e8:d5:df:2f:
                    f5:b0:61:db:22:2b:ee:c4:55:23:b8:43:d2:22:70:
                    82:0a:ab:0e:d4:b4:e1:4b:ad:3c:d8:fa:65:15:9b:
                    91:05:cb:44:5c:15:0a:b9:63:8b:fd:00:1f:44:15:
                    0e:73:52:4b:af:8d:5b:f3:d8:50:6f:98:b2:35:9e:
                    50:fe:ab:01:ec:d1:0f:8d:17:76:5f:75:f6:b0:ae:
                    f6:30:dd:f5:30:8c:86:c6:e7:93:7a:93:95:89:b1:
                    7b:6a:6b:d8:9e:83:c8:21:6e:c1:43:31:75:04:f2:
                    d7:69:fe:56:dc:b1:3e:92:2f:f8:7c:ce:eb:ee:b2:
                    05:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7F:21:80:2D:1F:18:5D:54:3C:18:D9:8E:DC:3F:F8:2F:2C:A5:20
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e33322e302f31392d3139203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.75.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:66:55:58:32:57:f2:65:ad:69:18:0e:d6:8d:98:8e:5b:61:
         3f:24:63:23:35:a8:bd:42:4a:94:83:56:ea:a9:8a:49:b5:98:
         f0:07:c4:ef:5f:05:ed:5a:64:ad:7a:4a:98:17:b9:31:99:24:
         b3:9b:fd:43:70:91:c3:4a:8e:68:6a:ac:34:27:48:c3:10:51:
         84:fd:a3:66:b3:dd:a2:a9:aa:52:5c:3f:91:85:1e:5d:92:e4:
         14:6b:7c:fb:66:b8:ac:8f:ee:18:65:8e:51:3c:21:18:c9:3d:
         ba:83:28:dc:de:95:67:42:3c:ef:4a:4c:91:c7:09:1c:f5:6f:
         99:c0:86:22:6a:2f:9d:5f:bb:9e:4c:2f:15:04:b4:00:50:a7:
         ac:6b:00:76:6c:1c:c3:a0:7e:01:99:bd:99:87:2c:26:b8:cc:
         3e:08:22:c2:28:e3:c1:06:e7:c3:99:39:ed:a6:19:d2:33:b4:
         87:37:a6:57:aa:b7:ae:31:dc:9b:0e:bf:db:5d:53:37:56:2b:
         f1:96:1c:16:fc:30:f1:d6:b0:45:be:fd:df:d9:04:88:90:e7:
         1b:16:a3:09:95:45:ac:55:a3:1a:5a:1b:7e:59:0a:de:4b:a5:
         f8:db:e2:59:4b:7c:ea:c7:fc:c8:1b:7c:ae:56:a2:1e:03:5d:
         36:77:fd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:23:26 2026 by rpki-client