This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e39362e302f32302d3230203d3e2034383131.roa
File:                     3131332e33312e39362e302f32302d3230203d3e2034383131.roa (raw, json)
Hash identifier:          49Sfytd781Ey+leY0YTMfC2qMDbmvU1v/jqOJWI7DrU=
Subject key identifier:   76:12:23:51:68:A1:54:47:16:F1:DF:BA:B1:7D:5B:61:C7:07:F4:7A
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       0A20744FE18E05C307F48200A38E6D222EA9E600
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e39362e302f32302d3230203d3e2034383131.roa
Signing time:             Tue 20 Jan 2026 02:10:52 +0000
ROA not before:           Tue 20 Jan 2026 02:05:52 +0000
ROA not after:            Tue 19 Jan 2027 02:10:52 +0000
asID:                     4811
IP address blocks:        113.31.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:20:74:4f:e1:8e:05:c3:07:f4:82:00:a3:8e:6d:22:2e:a9:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:52 2026 GMT
            Not After : Jan 19 02:10:52 2027 GMT
        Subject: CN=7612235168A1544716F1DFBAB17D5B61C707F47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:12:3c:f0:b0:ef:06:01:d3:7b:7a:f4:71:
                    0c:cc:0c:ab:5e:1c:cd:17:bb:8b:e1:ee:71:06:b4:
                    fc:97:4d:9b:0d:21:c4:54:3b:34:ef:08:2b:06:fb:
                    ca:84:38:77:95:1e:05:15:f8:31:08:bc:40:83:5f:
                    ee:2a:f4:bd:0a:ae:6b:7c:6f:ab:e6:ed:7a:30:8d:
                    27:e1:82:b6:79:d6:fc:c1:af:17:66:0f:b0:6c:28:
                    ec:5c:3c:d7:4f:e8:4f:71:70:cb:57:c5:a5:03:90:
                    b1:9e:3d:b2:2e:b3:a1:a3:9f:f3:38:a6:34:2c:85:
                    c1:9b:92:83:de:a9:85:89:31:01:d9:7d:57:f7:6e:
                    88:bf:50:89:86:60:b2:4d:4f:48:ea:b3:4f:b7:28:
                    c3:b3:e9:55:aa:e5:2d:9e:21:42:2a:d3:f8:1e:58:
                    4a:27:18:2f:3c:9a:fa:44:86:16:ef:d5:15:de:25:
                    12:e5:d3:44:83:06:6c:fe:72:f2:9e:89:0d:2c:a7:
                    c2:61:8b:31:13:34:c2:d7:4c:92:99:1c:53:d0:17:
                    a8:5b:d7:39:69:96:c7:f2:ef:7a:62:87:a5:c6:d8:
                    b0:80:d5:00:5c:a7:04:d9:67:ae:bc:ba:06:6c:85:
                    02:41:3d:ee:49:88:93:b8:c0:ff:29:02:3e:ef:3e:
                    a1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:12:23:51:68:A1:54:47:16:F1:DF:BA:B1:7D:5B:61:C7:07:F4:7A
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e39362e302f32302d3230203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.31.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:59:85:9e:4b:79:8e:f5:b3:4f:55:4c:ed:10:de:c6:e7:7c:
         e9:fe:f8:28:d0:f1:30:4f:3b:c2:ae:7b:b0:5e:19:95:31:c5:
         95:0e:2a:63:df:84:16:0a:54:2c:d1:ea:f4:2e:52:eb:76:23:
         5b:9c:1e:19:37:69:f7:a2:1a:31:c2:88:44:3d:86:40:51:7e:
         69:5c:10:78:b2:5e:52:d6:1f:58:b2:84:27:b9:f5:48:61:92:
         a9:84:3e:ab:2f:d6:e9:86:c4:6a:ad:f9:15:28:de:99:25:c6:
         dc:de:2c:e2:66:78:63:25:42:e0:07:d8:ae:b9:81:ba:a5:c8:
         fb:81:af:75:5a:5f:69:7e:b1:78:01:b5:80:65:fe:84:ab:21:
         65:92:11:ab:ef:6b:1e:7c:75:28:0b:4b:c2:90:81:34:e5:b7:
         47:61:bd:04:57:d4:3c:f8:48:de:e9:e9:d3:51:17:1d:32:11:
         3a:4a:c7:ae:74:ae:e6:f7:88:79:0b:8d:38:43:02:c6:07:5b:
         7a:e8:a1:0a:79:d8:57:5a:52:a5:c5:89:5f:dc:1f:54:b2:91:
         de:00:11:d7:a4:9c:30:14:88:1b:57:41:0d:64:c7:a6:28:c0:
         75:43:1d:14:d2:9c:72:6a:09:bb:25:4a:e1:aa:29:6f:71:40:
         05:81:06:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:22:14 2026 by rpki-client