This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3136302e302f32302d3230203d3e2034383131.roa
File:                     3131332e33312e3136302e302f32302d3230203d3e2034383131.roa (raw, json)
Hash identifier:          +ksKiur7E24m122r+qNrN9IfRHkdbaD7AqlEfNU2bAU=
Subject key identifier:   F6:1B:62:DD:A5:6F:AA:E4:3F:E5:28:BE:74:B1:54:10:D3:34:2E:AB
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       5212413AD71032BF36643B74A357DFED75C4E5E5
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3136302e302f32302d3230203d3e2034383131.roa
Signing time:             Tue 20 Jan 2026 02:10:52 +0000
ROA not before:           Tue 20 Jan 2026 02:05:52 +0000
ROA not after:            Tue 19 Jan 2027 02:10:52 +0000
asID:                     4811
IP address blocks:        113.31.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:12:41:3a:d7:10:32:bf:36:64:3b:74:a3:57:df:ed:75:c4:e5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:52 2026 GMT
            Not After : Jan 19 02:10:52 2027 GMT
        Subject: CN=F61B62DDA56FAAE43FE528BE74B15410D3342EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:f9:39:bb:2d:c0:f2:aa:a3:7c:2a:22:0d:
                    fb:05:a3:55:10:6b:d9:81:be:39:55:3a:55:f8:01:
                    6d:90:d4:fc:75:97:b4:06:0d:f8:fd:43:0d:42:70:
                    9a:99:9e:31:f8:68:ce:07:c0:96:73:06:91:72:88:
                    67:5d:33:5d:8f:55:1c:a5:17:59:a6:84:a3:92:f2:
                    cb:99:36:44:1e:0f:bf:22:c4:10:de:67:da:7f:83:
                    44:45:3c:39:b6:03:2f:33:02:da:41:8e:a8:83:61:
                    f4:53:8e:73:c7:e1:9e:6c:b7:29:91:57:86:44:d0:
                    42:ec:aa:b5:7c:c6:69:9a:47:26:9a:22:61:d8:0f:
                    af:94:30:a2:73:30:65:63:65:bd:ab:cf:f0:23:69:
                    d3:6d:cb:99:46:ee:07:36:2a:41:06:cc:d5:4d:86:
                    1f:26:1a:b2:d7:5a:83:d3:2a:1f:13:c0:3e:f3:67:
                    d4:c7:aa:2e:d5:73:85:93:91:68:d3:51:0b:e5:01:
                    df:e4:20:31:3e:49:70:50:c9:b0:64:d0:3c:e1:fa:
                    62:3e:57:7f:95:1c:b9:4d:75:2e:a7:b7:56:02:a8:
                    c9:ab:0b:46:23:a5:d5:c9:c0:f4:87:7a:c0:d9:23:
                    94:ba:62:67:c1:3d:43:96:77:50:2d:67:f4:33:2d:
                    c4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1B:62:DD:A5:6F:AA:E4:3F:E5:28:BE:74:B1:54:10:D3:34:2E:AB
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3136302e302f32302d3230203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.31.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e0:4f:46:6c:d7:2a:60:2b:e0:93:1a:25:05:8a:70:14:16:b2:
         d3:bb:7d:30:fd:75:8c:56:a8:73:14:a6:2e:3f:ce:92:1d:c9:
         d9:80:07:38:d3:6e:27:80:a2:3b:9f:28:a9:27:d6:e4:9b:5c:
         da:cc:7d:73:d3:3e:2c:1b:ec:75:af:c0:1c:c4:bd:0f:e0:e0:
         07:f1:47:2b:f7:f4:2d:8e:05:ab:43:a9:6f:db:e4:23:34:c0:
         ca:70:0a:96:07:97:8b:69:4f:98:13:b2:ae:72:b7:3d:01:be:
         51:23:82:59:53:f2:7e:88:cb:a5:cd:02:fc:75:88:87:d9:c2:
         56:92:18:4f:c8:b7:95:fe:ad:9d:ae:cb:f0:27:f1:b8:08:9a:
         1b:7c:8f:c4:3c:8f:50:f9:f3:61:3f:dd:b6:86:be:e7:2e:a6:
         9d:de:d7:b4:4f:eb:34:7d:62:fe:17:c4:87:b1:4d:09:d3:2f:
         0f:72:ac:b3:f1:c5:1c:d4:d8:3d:fc:e4:a6:80:c1:73:b1:2d:
         6d:ae:7b:20:69:fd:cf:c6:06:08:7c:06:89:88:6a:bf:50:a0:
         2b:1a:3f:f0:9f:54:f2:d1:1c:07:57:d9:20:21:54:b0:c1:4a:
         4f:b3:b6:f5:42:57:75:e4:d3:c3:3e:90:4c:98:8e:5a:93:ef:
         38:db:94:b4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUUhJBOtcQMr82ZDt0o1ff7XXE5eUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB
OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTJaFw0yNzAxMTkwMjEwNTJaMDMxMTAvBgNV
BAMTKEY2MUI2MkREQTU2RkFBRTQzRkU1MjhCRTc0QjE1NDEwRDMzNDJFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkovk5uy3A8qqjfCoiDfsFo1UQ
a9mBvjlVOlX4AW2Q1Px1l7QGDfj9Qw1CcJqZnjH4aM4HwJZzBpFyiGddM12PVRyl
F1mmhKOS8suZNkQeD78ixBDeZ9p/g0RFPDm2Ay8zAtpBjqiDYfRTjnPH4Z5stymR
V4ZE0ELsqrV8xmmaRyaaImHYD6+UMKJzMGVjZb2rz/AjadNty5lG7gc2KkEGzNVN
hh8mGrLXWoPTKh8TwD7zZ9THqi7Vc4WTkWjTUQvlAd/kIDE+SXBQybBk0Dzh+mI+
V3+VHLlNdS6nt1YCqMmrC0YjpdXJwPSHesDZI5S6YmfBPUOWd1AtZ/QzLcSDAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU9hti3aVvquQ/5Si+dLFUENM0LqswHwYDVR0j
BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4
MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMTMzMmUzMzMx
MmUzMTM2MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHEfoDANBgkqhkiG9w0BAQsFAAOCAQEA4E9GbNcqYCvgkxolBYpwFBay07t9
MP11jFaocxSmLj/Okh3J2YAHONNuJ4CiO58oqSfW5Jtc2sx9c9M+LBvsda/AHMS9
D+DgB/FHK/f0LY4Fq0Opb9vkIzTAynAKlgeXi2lPmBOyrnK3PQG+USOCWVPyfojL
pc0C/HWIh9nCVpIYT8i3lf6tna7L8CfxuAiaG3yPxDyPUPnzYT/dtoa+5y6mnd7X
tE/rNH1i/hfEh7FNCdMvD3Kss/HFHNTYPfzkpoDBc7Etba57IGn9z8YGCHwGiYhq
v1CgKxo/8J9U8tEcB1fZICFUsMFKT7O29UJXdeTTwz6QTJiOWpPvONuUtA==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:22:46 2026 by rpki-client