This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa
File:                     3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (raw, json)
Hash identifier:          CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=
Subject key identifier:   23:10:4E:4D:CC:AF:D4:7A:89:4A:6B:43:71:45:1A:8C:85:86:3E:4F
Certificate issuer:       /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Certificate serial:       4E2015CBCF12027189E422A73691227132E6DCA4
Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa
Signing time:             Tue 20 Jan 2026 02:07:17 +0000
ROA not before:           Tue 20 Jan 2026 02:02:17 +0000
ROA not after:            Tue 19 Jan 2027 02:07:17 +0000
asID:                     139187
IP address blocks:        165.101.70.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 03:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:20:15:cb:cf:12:02:71:89:e4:22:a7:36:91:22:71:32:e6:dc:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
        Validity
            Not Before: Jan 20 02:02:17 2026 GMT
            Not After : Jan 19 02:07:17 2027 GMT
        Subject: CN=23104E4DCCAFD47A894A6B4371451A8C85863E4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:72:d4:22:20:58:de:a3:fc:29:f4:04:81:
                    f3:f0:30:c3:03:e9:1c:ae:71:32:04:77:36:41:b5:
                    35:fb:c3:df:0e:f2:43:b0:00:b7:7e:a4:28:37:09:
                    e9:c9:b4:ba:ff:f4:5b:6c:5f:89:01:62:8e:58:b7:
                    ea:2d:5d:e1:a0:60:cb:ce:bc:da:ea:88:37:00:8a:
                    66:6b:36:4f:cd:ab:ba:bd:0b:2b:d7:3e:14:7f:66:
                    59:44:90:52:17:83:46:6b:f2:5e:7b:08:73:f0:a3:
                    49:f1:e6:2c:dc:f1:94:85:04:e1:e3:bf:b0:a2:5b:
                    12:4e:ce:83:16:f2:9d:e0:eb:b7:c6:77:a1:e8:71:
                    fa:22:d8:d7:49:85:69:3b:7b:ae:e4:e5:25:fb:8e:
                    68:6c:a8:55:57:b0:5e:fa:77:dd:96:6b:c7:7e:d1:
                    43:19:67:3a:db:68:dd:2e:13:0b:0d:3b:d6:af:d0:
                    42:c3:48:e1:6d:8a:81:cb:33:8f:d9:42:9d:63:ed:
                    21:8f:6d:25:b1:be:36:63:eb:75:5f:12:b8:30:28:
                    f4:d9:a9:e3:60:64:b9:5f:94:b1:53:c5:32:ce:a2:
                    65:72:43:b4:aa:13:87:50:a5:50:70:fd:1b:52:c4:
                    e8:1a:0b:e9:74:3c:0c:fd:17:ae:ca:46:10:4e:fe:
                    be:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:10:4E:4D:CC:AF:D4:7A:89:4A:6B:43:71:45:1A:8C:85:86:3E:4F
            X509v3 Authority Key Identifier:
                keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:1e:34:d8:1f:2f:a4:16:c4:c2:8e:ed:67:b7:9c:c9:ff:8e:
         d5:fd:44:2f:11:11:9e:8a:c3:05:ee:f3:a1:78:ca:ba:04:5a:
         84:1c:f9:49:0f:a3:c5:81:9d:d2:5e:f2:64:b3:92:1b:10:13:
         be:18:3a:95:e4:4d:54:31:a4:f4:23:ee:90:2a:b6:e0:e9:ff:
         2b:4e:54:9d:86:ab:64:e7:1b:75:e3:b0:fb:4d:0f:2b:a8:3a:
         ca:6b:9e:ec:58:a2:94:90:34:55:7b:a1:97:36:6d:43:bb:4b:
         82:aa:fe:0e:3a:f9:af:b5:ab:5a:19:9d:b1:fd:3e:10:bb:a3:
         f0:ba:6c:3b:77:98:c2:e2:44:ff:b6:1b:77:67:79:70:6a:16:
         0e:73:11:63:07:b0:5d:a5:37:54:35:c7:7d:16:f6:eb:7f:40:
         3e:12:8f:ca:3b:0e:ca:0e:ba:94:de:26:07:0b:a5:7a:32:ef:
         e2:4e:e9:ce:fb:cb:eb:e2:3e:03:d9:57:61:37:0a:94:59:50:
         62:f5:2a:e0:59:0d:eb:ff:f3:2d:d4:80:95:06:36:eb:9e:bb:
         aa:df:85:71:66:e6:3e:1b:2e:6b:ae:b7:18:c5:7e:70:80:1a:
         98:04:c2:9b:b8:0a:ef:ab:9f:4a:d3:ea:52:9d:5b:3e:de:44:
         09:bc:25:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:43:41 2026 by rpki-client