This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e39362e302f31392d3139203d3e203233373234.roa
File:                     3130362e37352e39362e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier:          +S42z9yVw1vcP3nQspEZxKCc8aV4GBulgTo1FFtUM1Y=
Subject key identifier:   3E:47:C3:4F:79:53:9D:BA:B3:B8:94:AB:25:5F:E2:58:61:7E:06:A1
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       7698C5CC218E42EC90ED2F2CD1352014C95278E6
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e39362e302f31392d3139203d3e203233373234.roa
Signing time:             Tue 20 Jan 2026 02:10:50 +0000
ROA not before:           Tue 20 Jan 2026 02:05:50 +0000
ROA not after:            Tue 19 Jan 2027 02:10:50 +0000
asID:                     23724
IP address blocks:        106.75.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:98:c5:cc:21:8e:42:ec:90:ed:2f:2c:d1:35:20:14:c9:52:78:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:50 2026 GMT
            Not After : Jan 19 02:10:50 2027 GMT
        Subject: CN=3E47C34F79539DBAB3B894AB255FE258617E06A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9e:b9:0f:69:e1:08:fb:b5:87:a2:80:be:73:
                    d1:8f:e5:1e:98:62:5c:ad:3b:1f:07:1a:ba:95:33:
                    03:2f:1a:9b:43:76:80:70:33:68:af:5f:8e:cc:15:
                    f5:af:9c:e0:4c:9a:e2:89:6d:12:09:a2:18:38:b4:
                    17:c0:de:13:84:01:8f:d0:3c:64:de:67:3b:04:da:
                    fe:6a:cb:d6:a5:b4:00:5e:9d:3e:02:3f:03:2a:10:
                    e2:eb:60:a7:bc:6b:5d:0a:5e:f7:dd:48:8c:ce:2a:
                    a4:83:49:09:1f:e9:22:c0:bb:59:1d:f9:ed:3d:37:
                    5e:7a:54:72:8f:87:86:51:05:dc:ef:22:3b:0e:33:
                    88:fe:43:95:07:57:5a:2a:24:24:eb:b0:f3:ae:89:
                    7c:ea:ff:67:e4:69:9f:0e:5a:40:e0:84:b6:fb:63:
                    a4:05:0c:08:b3:38:20:62:6c:23:ad:ef:d0:46:dd:
                    bf:99:da:4a:f2:79:49:45:18:87:00:f4:a6:87:bb:
                    92:a2:de:42:f9:85:29:4a:a8:2b:05:6f:75:8c:9b:
                    54:00:f1:38:10:c1:14:ef:d2:50:92:b5:6a:02:e1:
                    36:3b:20:3c:c1:2e:57:d0:95:27:ce:46:e9:bc:04:
                    b0:76:30:30:0f:52:ee:5d:47:7f:4a:9a:ea:12:29:
                    30:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:47:C3:4F:79:53:9D:BA:B3:B8:94:AB:25:5F:E2:58:61:7E:06:A1
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130362e37352e39362e302f31392d3139203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.75.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cd:24:be:16:18:b8:00:12:99:03:dd:71:47:b2:2c:2a:84:9b:
         1e:e7:cd:c9:f3:69:6a:51:33:54:45:eb:f1:10:0e:a6:99:ac:
         24:8c:74:f1:9e:53:9f:a8:e6:7d:0e:be:ab:88:a4:79:2b:97:
         f0:cf:dd:39:2e:1e:8e:f7:39:ba:0b:b7:bc:3b:5d:1c:23:e3:
         54:47:fd:0b:a4:c5:ca:81:cd:2e:43:92:0c:2f:7b:82:c8:86:
         89:24:df:f5:a9:1e:63:cd:ce:0d:13:b2:5a:ba:47:3f:cd:c2:
         78:46:53:d0:5d:d5:cf:17:0a:a3:3b:a1:9e:6d:1e:09:83:71:
         32:24:3b:10:d5:36:59:c4:08:5e:4f:86:61:68:da:61:cc:b5:
         fd:58:bd:df:1c:4d:a6:d3:6b:ac:45:03:2c:ba:87:3d:94:f9:
         b4:f8:9e:87:01:ea:25:c0:7b:9a:98:0b:4e:db:97:85:55:6c:
         88:14:c1:a2:a5:a1:71:f5:fc:99:8d:2f:3c:5c:ed:49:28:15:
         b0:7d:4a:06:5f:91:79:54:8f:07:39:35:8a:d8:d6:6f:01:12:
         93:87:57:6c:9d:bf:c9:50:55:92:f8:43:0b:62:27:fa:b3:35:
         21:c1:af:b2:d8:bf:e4:be:9c:94:cd:d2:3d:45:e9:95:ae:4d:
         6e:f4:35:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:23:26 2026 by rpki-client