This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa
File:                     3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa (raw, json)
Hash identifier:          D0J+ywNira+Kl03ezdRJIK+PVflth3zvrHDo5domtUQ=
Subject key identifier:   24:65:36:C3:D6:9D:32:F3:1E:83:01:0F:85:07:B1:34:7E:87:69:9D
Certificate issuer:       /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Certificate serial:       5434D07FEADF4C1DC029D38B95FAF304225EFDF0
Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa
Signing time:             Tue 20 Jan 2026 02:09:31 +0000
ROA not before:           Tue 20 Jan 2026 02:04:31 +0000
ROA not after:            Tue 19 Jan 2027 02:09:31 +0000
asID:                     37963
IP address blocks:        110.173.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:34:d0:7f:ea:df:4c:1d:c0:29:d3:8b:95:fa:f3:04:22:5e:fd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
        Validity
            Not Before: Jan 20 02:04:31 2026 GMT
            Not After : Jan 19 02:09:31 2027 GMT
        Subject: CN=246536C3D69D32F31E83010F8507B1347E87699D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f6:fb:ad:7b:f4:3e:79:fe:a8:e9:73:57:93:
                    a1:2e:4d:b1:fe:86:81:94:1b:40:e3:5b:e4:6e:bf:
                    65:29:ce:12:02:3b:ec:34:78:c5:10:1e:31:c3:7b:
                    98:4b:d6:c1:8f:22:f2:73:ba:24:47:e5:62:83:10:
                    c4:ea:bd:8c:01:a0:8b:ae:c8:10:72:13:b3:b6:d6:
                    d5:1b:d6:91:56:cc:2e:15:26:f1:e6:41:bc:88:86:
                    5c:7b:4e:e7:a6:e0:9a:5c:d8:c0:75:77:bb:ec:0d:
                    89:e1:78:5a:bd:41:40:7e:7c:f2:6a:89:65:ac:ad:
                    bf:80:87:d8:03:2f:4b:ed:b4:5a:8e:c2:a6:68:9b:
                    db:12:c8:04:9f:fe:4c:6d:84:68:f1:d4:00:71:70:
                    86:e9:b8:3b:ee:67:0f:3b:92:e4:9b:c3:fe:25:ee:
                    30:82:0a:8a:b3:a6:2c:9c:48:8c:b0:3b:79:c6:f0:
                    a6:8b:a5:50:7f:01:3f:cf:e7:33:b6:5d:54:4b:7e:
                    f1:c4:be:cf:cd:93:81:17:7e:b9:e9:87:1b:02:a9:
                    b6:7a:c9:92:4f:77:e2:e4:ab:1f:89:7d:b2:23:8f:
                    d0:f1:ed:8a:15:9f:50:2b:e7:13:c5:d4:62:a0:8a:
                    8c:35:2e:5d:c7:6f:17:5b:8f:9e:b7:ed:49:b6:73:
                    1c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:65:36:C3:D6:9D:32:F3:1E:83:01:0F:85:07:B1:34:7E:87:69:9D
            X509v3 Authority Key Identifier:
                keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:cf:c0:fc:10:81:c4:0f:d7:79:63:73:d7:83:86:ee:34:78:
         60:49:12:f8:77:de:28:f2:fe:76:93:21:f4:d1:6d:05:c5:70:
         57:0c:cc:ec:d2:fe:e6:9d:3e:72:ac:84:9d:f2:67:26:63:f1:
         f6:e7:57:b8:11:b8:e8:32:59:81:35:c9:c5:d8:b3:6b:21:28:
         72:d0:08:b8:c3:ac:fb:45:a7:5d:b7:33:7b:c0:74:37:48:71:
         65:34:eb:0c:76:0b:c0:0f:19:d8:b6:cc:c0:46:cc:b9:fa:2b:
         63:a0:36:63:d2:c8:0a:bb:bb:5b:62:6f:d7:ac:f4:59:5e:d5:
         86:f8:a8:04:ab:33:82:d3:ba:3f:a6:72:06:af:e7:f9:6e:2b:
         f6:c3:71:fc:0e:4d:82:6f:11:0d:cf:e7:d9:c5:2a:3e:4f:1a:
         d8:4a:11:82:a2:d9:db:66:88:d0:49:ee:7d:71:de:06:c3:af:
         66:f8:d7:0d:32:15:85:df:7b:87:87:52:42:fc:e3:18:c6:91:
         74:11:39:d0:0f:df:48:fc:28:d4:8e:54:80:01:0e:5b:76:f2:
         a8:e6:2e:f0:44:a2:3b:48:84:5b:2d:be:fc:dd:7c:59:1d:7e:
         80:ba:8a:40:e0:51:a2:fd:61:ac:50:26:93:ea:27:9b:98:aa:
         41:b1:4c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:12:01 2026 by rpki-client