This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131302e37352e302e302f31382d3234203d3e203337393633.roa
File:                     3131302e37352e302e302f31382d3234203d3e203337393633.roa (raw, json)
Hash identifier:          hqcYOV5DzQRa8/wBnBYjQnjsbrLdtVYrbvETGifMOeE=
Subject key identifier:   73:15:18:12:EB:29:FB:87:7C:2D:4D:A6:31:E4:9E:C9:18:CE:E8:4F
Certificate issuer:       /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Certificate serial:       560D1530F77FEBC74655BED0B500AD18E5EF015D
Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131302e37352e302e302f31382d3234203d3e203337393633.roa
Signing time:             Tue 20 Jan 2026 02:09:31 +0000
ROA not before:           Tue 20 Jan 2026 02:04:31 +0000
ROA not after:            Tue 19 Jan 2027 02:09:31 +0000
asID:                     37963
IP address blocks:        110.75.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0d:15:30:f7:7f:eb:c7:46:55:be:d0:b5:00:ad:18:e5:ef:01:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
        Validity
            Not Before: Jan 20 02:04:31 2026 GMT
            Not After : Jan 19 02:09:31 2027 GMT
        Subject: CN=73151812EB29FB877C2D4DA631E49EC918CEE84F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:4b:83:32:eb:06:96:96:32:d5:ad:0d:30:
                    ab:eb:1f:6c:00:73:be:44:18:75:f8:12:ce:32:d6:
                    c8:0c:91:92:25:27:ce:9b:2e:38:58:98:d1:50:0b:
                    f9:d9:de:16:b3:74:f6:96:e9:ca:c2:29:c5:b7:40:
                    1e:cc:aa:09:d8:1c:3d:26:71:98:56:7e:a5:c6:76:
                    d2:03:0f:44:d2:fa:56:37:1d:54:21:a6:e3:25:06:
                    d4:96:2b:f8:b1:2c:6a:dd:50:1d:5f:46:92:cf:08:
                    18:1a:5a:0f:c7:31:48:23:22:dd:9e:f6:36:c7:48:
                    52:2c:db:8d:a4:76:2a:f4:1a:00:b4:03:2b:e3:ca:
                    eb:a7:c8:93:2c:fa:98:5b:d6:cb:98:2f:02:81:a4:
                    58:25:e3:fa:ae:60:82:f9:b8:cf:d4:27:50:49:b1:
                    07:91:ef:28:fe:ae:ae:7d:4b:b9:dc:36:ff:bf:93:
                    7a:52:23:c6:23:85:94:e5:19:9f:63:82:89:63:78:
                    30:2a:71:a3:c6:a4:76:af:9a:4a:81:7b:4a:11:12:
                    bd:95:2c:bd:53:97:b5:3f:56:4d:b3:39:09:a9:0a:
                    0d:64:26:c3:44:6e:3d:8a:22:4d:7c:a6:0b:e5:86:
                    4c:72:cf:0c:5d:91:f8:d7:80:ef:98:d7:9b:b8:8f:
                    03:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:15:18:12:EB:29:FB:87:7C:2D:4D:A6:31:E4:9E:C9:18:CE:E8:4F
            X509v3 Authority Key Identifier:
                keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131302e37352e302e302f31382d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.75.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         03:0b:a8:70:03:e8:f7:90:20:38:09:87:b5:e5:c6:67:94:1b:
         a3:55:a3:8c:25:3d:69:e3:0c:b0:96:48:6a:a8:c7:3f:83:99:
         ab:9e:ec:21:d4:2a:fa:d4:40:6a:1f:ea:2e:41:1d:39:eb:9e:
         a8:12:f5:7b:f4:88:4d:6f:46:fe:39:23:7d:06:29:8d:37:34:
         6e:22:3f:7f:d8:65:c1:bd:70:7e:4c:58:5c:21:c6:0c:4c:0b:
         91:fc:a4:7f:9a:22:a0:7b:cc:cc:2f:f4:41:8a:26:48:e9:a4:
         e3:2b:a6:55:08:66:d7:22:af:3a:8b:0a:8e:87:67:38:ba:ce:
         c3:59:66:f5:6c:61:06:32:be:3c:0b:f4:bd:1c:00:6e:81:e1:
         c2:a3:94:02:8b:7b:da:a9:fd:91:f2:c7:f6:72:34:72:30:b4:
         00:db:c0:0b:66:3d:97:13:d9:a0:72:29:2c:4b:99:d9:c3:7a:
         25:30:88:5a:77:16:24:78:64:90:39:96:72:18:67:90:64:ec:
         76:e9:22:8a:8b:c8:c8:a9:00:66:06:b0:84:25:dc:c7:bc:8d:
         3c:13:bc:5e:05:af:c3:0c:7e:19:b1:69:4b:70:4f:67:30:c4:
         2a:9e:96:24:ac:a6:5a:4c:34:47:ac:c9:cb:3b:c0:5e:6e:ca:
         43:43:6e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:42:46 2026 by rpki-client