This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3133362e302f32322d3234203d3e203632333837.roa
File:                     3130312e3233322e3133362e302f32322d3234203d3e203632333837.roa (raw, json)
Hash identifier:          aF9AyQlYz6RZt0xQ2JBCrtNSCaQewPlZBi9SEDy/6I8=
Subject key identifier:   0B:E2:0E:10:D5:35:93:B6:62:5A:D9:20:82:70:56:E2:F7:6C:22:0E
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       737AE849F38C825B7BD0841D55579B75B10B1519
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3133362e302f32322d3234203d3e203632333837.roa
Signing time:             Tue 20 Jan 2026 02:11:58 +0000
ROA not before:           Tue 20 Jan 2026 02:06:58 +0000
ROA not after:            Tue 19 Jan 2027 02:11:58 +0000
asID:                     62387
IP address blocks:        101.232.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 10:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7a:e8:49:f3:8c:82:5b:7b:d0:84:1d:55:57:9b:75:b1:0b:15:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jan 20 02:06:58 2026 GMT
            Not After : Jan 19 02:11:58 2027 GMT
        Subject: CN=0BE20E10D53593B6625AD920827056E2F76C220E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8a:b6:d4:c7:27:32:cf:24:79:9a:dd:e6:a3:
                    2b:91:a2:65:bb:61:88:6d:5f:3b:cd:db:a8:38:7b:
                    06:da:52:cf:50:29:da:0b:e8:f3:90:2c:fc:ac:8b:
                    24:11:0b:c7:f3:de:2c:b5:82:eb:75:4e:ff:53:3d:
                    54:f8:d2:7a:40:18:9b:65:15:3d:0c:62:cb:dd:2f:
                    ee:c0:48:f4:84:fc:2d:5b:30:91:f6:18:0f:89:ea:
                    bc:75:cb:3b:d6:a1:fc:78:df:6d:94:92:3f:c1:20:
                    58:c8:75:89:ec:2b:17:b6:09:a0:a2:b9:41:99:9d:
                    20:45:06:ce:d0:96:85:28:d8:a3:f1:40:b6:26:4a:
                    3b:9f:87:6f:17:fa:18:15:5d:f4:ad:d5:70:7b:ec:
                    2a:16:3e:5f:87:00:b5:85:7d:ad:8a:9f:a2:72:43:
                    61:ee:dd:91:db:47:75:0b:a1:a0:6d:14:44:2b:fe:
                    31:4f:27:ab:b0:87:9c:e2:3b:df:66:d5:20:e3:46:
                    e5:97:a9:7d:c2:30:ed:66:ea:c2:0c:6a:1a:51:f9:
                    d8:77:9b:7e:f4:1a:73:f4:f2:54:2b:27:21:e8:b5:
                    d4:18:5f:b4:40:f9:d1:31:f5:69:57:27:a6:df:46:
                    07:a8:10:75:64:4f:2e:cb:17:5e:c3:4f:2c:e7:cc:
                    1e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E2:0E:10:D5:35:93:B6:62:5A:D9:20:82:70:56:E2:F7:6C:22:0E
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3133362e302f32322d3234203d3e203632333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.232.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:97:2a:c9:dc:68:2c:e5:dd:37:97:7b:94:db:8e:aa:5f:93:
         12:52:a2:41:a2:7e:1e:0c:5d:93:ea:05:2f:44:68:e0:23:81:
         a0:9c:e6:84:64:e1:95:26:3f:31:ac:c2:43:3f:e8:02:38:73:
         a6:13:56:12:7b:6c:96:fa:79:8a:8e:ab:94:25:46:8d:3d:e8:
         2a:bc:d1:97:29:53:e1:cf:2e:b0:58:7c:f8:3c:91:53:6f:53:
         13:f0:33:02:bd:c9:e7:37:35:84:5e:20:ba:19:f6:b4:45:2e:
         32:71:fb:48:dd:5e:3d:b1:ad:4e:fa:4e:2d:55:b8:f6:41:a4:
         bf:3b:95:70:b5:25:d6:37:ed:9e:e4:56:4a:f3:3e:90:a2:f3:
         00:6d:ef:4c:78:23:a2:85:b3:81:29:7b:87:42:22:d9:b5:8c:
         84:16:4e:c5:29:7e:17:86:a8:06:67:f2:fc:6c:9c:fe:83:41:
         91:a7:29:c8:8e:e4:93:40:a2:86:d9:9a:b9:1b:61:43:6a:c9:
         b6:b5:6d:95:3a:76:be:05:d5:51:30:97:7f:fe:2b:f5:ea:37:
         c8:db:0b:43:3e:d3:ff:b8:77:68:d5:b9:b7:97:00:f1:bf:06:
         93:f8:f1:6b:ea:eb:26:11:d5:59:f8:0b:da:38:30:b3:b9:85:
         9f:7d:3c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 15:31:45 2026 by rpki-client