This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131302e37352e302e302f31372d3137203d3e203337393633.roa
File:                     3131302e37352e302e302f31372d3137203d3e203337393633.roa (raw, json)
Hash identifier:          NjV/4Tmugxcb7MxgKN/CQ0Zj9ubpxTO3VJ0+YKiY0Bc=
Subject key identifier:   57:97:63:4F:EA:67:7C:E1:B2:76:18:6E:62:B2:CC:5A:09:5D:0F:CE
Certificate issuer:       /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Certificate serial:       3FB947456ADA6961FB4F72F8D2CFE08D0F46FE54
Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131302e37352e302e302f31372d3137203d3e203337393633.roa
Signing time:             Tue 20 Jan 2026 02:09:31 +0000
ROA not before:           Tue 20 Jan 2026 02:04:31 +0000
ROA not after:            Tue 19 Jan 2027 02:09:31 +0000
asID:                     37963
IP address blocks:        110.75.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b9:47:45:6a:da:69:61:fb:4f:72:f8:d2:cf:e0:8d:0f:46:fe:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
        Validity
            Not Before: Jan 20 02:04:31 2026 GMT
            Not After : Jan 19 02:09:31 2027 GMT
        Subject: CN=5797634FEA677CE1B276186E62B2CC5A095D0FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:3d:d2:11:7f:d6:6b:83:c9:b5:b2:c3:c8:
                    f6:e9:7a:95:4b:2c:ff:5b:e5:e6:85:0d:a9:65:0a:
                    0e:b6:6f:ce:69:f4:36:44:cb:d7:5b:57:27:dd:c9:
                    22:59:fa:92:82:2d:df:97:21:79:de:be:a7:96:ca:
                    88:dd:29:c1:2d:11:e0:ee:6e:11:a8:73:4c:76:3c:
                    71:dd:1f:af:45:ae:6a:45:e9:3d:79:31:11:f9:9f:
                    c5:8d:8f:4b:42:00:96:8f:d0:02:c5:c6:10:36:22:
                    05:5d:c0:ce:b4:8d:c3:77:25:a2:97:e7:70:29:a5:
                    39:a9:a2:fb:d2:49:50:9f:93:24:80:eb:75:57:3f:
                    97:84:9f:84:d7:d4:ce:1b:e0:7b:8c:18:5c:2d:0a:
                    73:b1:57:9b:fb:b4:c8:52:bc:9e:b3:4f:57:af:58:
                    38:70:b0:20:16:9f:31:93:b2:fa:f4:3b:c3:18:f1:
                    97:2d:6b:7f:8b:ed:3d:81:73:1a:f7:6d:2b:1b:20:
                    f5:be:60:3a:06:1c:39:6b:6f:ef:75:e3:dd:72:bd:
                    4a:98:6a:d6:d4:45:66:2a:4d:6c:82:fa:13:60:86:
                    ba:62:d9:b1:01:8b:89:d4:73:c3:32:84:24:d9:4c:
                    42:f5:be:b4:ad:0d:67:bf:49:d4:73:a0:5c:80:7f:
                    e7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:97:63:4F:EA:67:7C:E1:B2:76:18:6E:62:B2:CC:5A:09:5D:0F:CE
            X509v3 Authority Key Identifier:
                keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131302e37352e302e302f31372d3137203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.75.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a0:e1:96:88:4a:2e:d3:f4:29:99:1e:50:b9:47:af:1c:fd:8f:
         af:6e:69:87:09:2e:d5:94:dd:89:aa:03:04:a4:da:43:31:1a:
         3c:d7:12:ef:30:6e:d1:4e:d3:bc:c5:79:82:ad:b1:2c:c9:3f:
         f1:22:db:64:81:93:99:2d:40:70:60:8f:3b:06:38:a1:7f:e0:
         31:c8:fc:7e:7e:b2:3c:06:81:ee:6a:24:4f:68:cf:4f:a8:37:
         99:1d:71:df:fc:82:cb:44:9f:ec:13:49:a0:05:33:84:a6:cd:
         a6:04:20:3e:53:5f:57:44:b7:23:db:07:29:89:39:e3:b0:8a:
         99:3c:f0:40:b7:e4:e9:af:63:f3:77:2e:1d:a3:fd:f9:63:25:
         d9:6c:f6:4c:5d:60:f4:55:78:26:64:4d:29:6c:d9:3d:b4:52:
         c5:3e:fe:dd:a1:4a:bd:d6:ce:29:27:c1:7b:00:07:9c:b2:0a:
         83:ed:69:20:59:2c:d4:17:b5:4f:90:52:76:30:39:7b:78:d4:
         97:59:5e:c4:a7:1b:31:9e:33:b9:2f:50:89:27:4d:5f:7d:d4:
         d7:48:f3:77:c3:d6:b0:60:38:05:4d:8b:f7:cd:9c:07:97:d1:
         32:3e:27:79:f9:77:3a:64:ce:f3:ed:d4:7f:55:4f:d9:21:7d:
         1d:98:06:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:42:51 2026 by rpki-client