This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3137362e302f32302d3230203d3e2034383131.roa
File:                     3131332e33312e3137362e302f32302d3230203d3e2034383131.roa (raw, json)
Hash identifier:          nVgdqjeM8mKhKBGFWfglN5XtIdtVRqMkMEUkqUdoZRY=
Subject key identifier:   81:A7:65:9C:28:DC:FC:8F:A1:E1:B5:DF:B5:89:78:AC:99:5B:94:5D
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       2E983857331EFC6DEFBC047FCD418E18617177D7
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3137362e302f32302d3230203d3e2034383131.roa
Signing time:             Tue 20 Jan 2026 02:10:47 +0000
ROA not before:           Tue 20 Jan 2026 02:05:47 +0000
ROA not after:            Tue 19 Jan 2027 02:10:47 +0000
asID:                     4811
IP address blocks:        113.31.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:98:38:57:33:1e:fc:6d:ef:bc:04:7f:cd:41:8e:18:61:71:77:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:47 2026 GMT
            Not After : Jan 19 02:10:47 2027 GMT
        Subject: CN=81A7659C28DCFC8FA1E1B5DFB58978AC995B945D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:d6:10:32:aa:a0:76:30:37:bf:81:cc:29:
                    19:b9:82:96:7d:bc:d1:6f:9b:46:4a:2a:d2:bb:db:
                    a6:9b:72:d6:13:d2:a5:20:f9:3e:bc:b4:5b:d9:ab:
                    c9:79:1a:48:fd:e5:e8:05:52:2c:da:e4:40:b1:38:
                    67:05:e6:67:c7:7b:62:55:60:11:48:cb:28:f8:be:
                    7d:72:c5:45:93:e3:89:3a:c8:42:c5:dc:74:94:df:
                    88:07:df:5a:22:00:0a:09:fe:0b:7b:de:26:ef:64:
                    58:7d:30:5c:78:42:72:8a:2c:0d:70:4f:6f:14:8e:
                    85:32:97:69:46:5c:00:29:6f:10:78:4e:77:f0:62:
                    09:7b:d3:5f:2c:68:ab:78:8a:41:ad:59:7a:bd:1f:
                    0c:8e:cb:ef:f4:84:46:10:a1:b3:68:b4:34:fb:0f:
                    be:60:f3:5e:b5:eb:30:6c:d7:75:fb:33:7d:68:c3:
                    05:70:0b:79:d9:ad:fe:55:66:c9:41:8a:46:83:ac:
                    41:0f:36:e6:ad:71:f8:e7:98:96:97:20:f3:1c:7e:
                    e7:92:c7:84:dc:f8:97:e4:73:bd:8b:f8:97:5a:21:
                    8b:ae:5d:3e:dd:32:70:a1:b1:45:f9:40:5f:b8:a8:
                    52:6d:85:f7:05:10:25:9f:14:8e:45:2f:14:19:9d:
                    aa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A7:65:9C:28:DC:FC:8F:A1:E1:B5:DF:B5:89:78:AC:99:5B:94:5D
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3137362e302f32302d3230203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.31.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:06:71:db:a1:e4:ba:86:25:00:6e:68:c9:63:bd:d8:c3:48:
         8e:67:05:2b:f7:65:38:19:23:5d:0e:1a:b2:f4:0f:37:63:5c:
         43:1b:cb:ff:95:6e:bd:0c:51:f5:ce:05:0f:67:a7:87:85:d1:
         47:67:c4:99:c2:ea:d1:58:09:cc:88:91:34:a8:a1:53:07:d9:
         95:c1:b3:22:d3:5b:0c:c1:02:ea:4f:c5:d2:1f:d0:2b:12:dc:
         f5:df:e2:13:5d:05:d8:e6:d8:e8:ae:6c:94:59:c4:1e:ee:e9:
         84:2e:b2:7f:e7:68:92:99:c4:85:da:c1:06:27:20:af:6d:4b:
         66:1a:54:27:fd:65:c5:2d:0d:60:3b:0e:2c:45:e3:78:25:1b:
         b1:5c:a7:4a:ad:45:56:0f:ca:f8:d2:c6:d1:2c:dc:17:91:36:
         cf:b5:0a:22:07:a7:63:a6:ab:da:b1:23:c3:4f:e3:53:64:ec:
         c5:18:25:ba:92:6c:06:c4:0b:2e:0a:08:31:bb:88:84:2e:8b:
         39:7f:d1:ca:49:30:d4:dd:1e:b8:ad:cb:fa:52:01:30:cd:f7:
         d9:96:f2:bc:a9:4b:31:d9:ce:78:8e:b8:2d:55:14:d9:1c:21:
         23:f6:89:b2:14:a9:05:5d:32:c3:07:7a:6b:bb:36:7b:1e:10:
         23:cb:73:98
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIULpg4VzMe/G3vvAR/zUGOGGFxd9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB
OUFBM0MyQzAeFw0yNjAxMjAwMjA1NDdaFw0yNzAxMTkwMjEwNDdaMDMxMTAvBgNV
BAMTKDgxQTc2NTlDMjhEQ0ZDOEZBMUUxQjVERkI1ODk3OEFDOTk1Qjk0NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4dYQMqqgdjA3v4HMKRm5gpZ9
vNFvm0ZKKtK726abctYT0qUg+T68tFvZq8l5Gkj95egFUiza5ECxOGcF5mfHe2JV
YBFIyyj4vn1yxUWT44k6yELF3HSU34gH31oiAAoJ/gt73ibvZFh9MFx4QnKKLA1w
T28UjoUyl2lGXAApbxB4TnfwYgl7018saKt4ikGtWXq9HwyOy+/0hEYQobNotDT7
D75g81616zBs13X7M31owwVwC3nZrf5VZslBikaDrEEPNuatcfjnmJaXIPMcfueS
x4Tc+Jfkc72L+JdaIYuuXT7dMnChsUX5QF+4qFJthfcFECWfFI5FLxQZnaq9AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUgadlnCjc/I+h4bXftYl4rJlblF0wHwYDVR0j
BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4
MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMTMzMmUzMzMx
MmUzMTM3MzYyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHEfsDANBgkqhkiG9w0BAQsFAAOCAQEA0QZx26HkuoYlAG5oyWO92MNIjmcF
K/dlOBkjXQ4asvQPN2NcQxvL/5VuvQxR9c4FD2enh4XRR2fEmcLq0VgJzIiRNKih
UwfZlcGzItNbDMEC6k/F0h/QKxLc9d/iE10F2ObY6K5slFnEHu7phC6yf+dokpnE
hdrBBicgr21LZhpUJ/1lxS0NYDsOLEXjeCUbsVynSq1FVg/K+NLG0SzcF5E2z7UK
IgenY6ar2rEjw0/jU2TsxRglupJsBsQLLgoIMbuIhC6LOX/Rykkw1N0euK3L+lIB
MM332ZbyvKlLMdnOeI64LVUU2RwhI/aJshSpBV0ywwd6a7s2ex4QI8tzmA==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:23:20 2026 by rpki-client