This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131302e3233362e302e302f31352d3135203d3e2039383038.roa
File:                     3131302e3233362e302e302f31352d3135203d3e2039383038.roa (raw, json)
Hash identifier:          hEDr8/74LWqVAxQIAl/qC7YYDZiTh64u3Td4QxxhlWk=
Subject key identifier:   86:6B:DB:07:09:20:B3:CB:FF:83:F3:49:4E:EC:3F:BD:11:82:48:9F
Certificate issuer:       /CN=373B103C68D9B84455801815E437C49839794406
Certificate serial:       2E28540BB661F1730EB2321867F46858001A7411
Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131302e3233362e302e302f31352d3135203d3e2039383038.roa
Signing time:             Tue 20 Jan 2026 02:22:45 +0000
ROA not before:           Tue 20 Jan 2026 02:17:45 +0000
ROA not after:            Tue 19 Jan 2027 02:22:45 +0000
asID:                     9808
IP address blocks:        110.236.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:28:54:0b:b6:61:f1:73:0e:b2:32:18:67:f4:68:58:00:1a:74:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373B103C68D9B84455801815E437C49839794406
        Validity
            Not Before: Jan 20 02:17:45 2026 GMT
            Not After : Jan 19 02:22:45 2027 GMT
        Subject: CN=866BDB070920B3CBFF83F3494EEC3FBD1182489F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:ec:73:6c:b1:2a:b5:7a:7f:5b:4b:d2:85:
                    89:a6:2e:b6:05:e0:2d:b1:e9:5c:1f:36:df:a6:eb:
                    ed:4b:04:fd:73:d7:42:ce:4c:3d:c0:53:ce:0e:6c:
                    32:f0:a8:d5:11:a3:3e:f5:f6:e5:5b:d6:3e:70:ba:
                    29:24:d6:fd:da:21:f3:4b:46:b3:2e:5b:f7:03:4d:
                    91:0a:77:cb:a9:3e:a9:cb:5f:98:8e:2f:d4:7b:bf:
                    b5:9c:39:ef:20:5e:a0:27:76:83:31:45:a6:a8:c3:
                    1f:bc:1a:dc:0c:ed:54:17:80:3f:3d:92:72:06:cf:
                    5f:f4:6c:58:b0:a1:9e:51:04:d5:c9:ee:19:68:17:
                    74:ec:e7:7d:66:e1:f0:01:b3:12:b5:28:6a:e5:34:
                    60:d3:33:ed:9c:bc:e2:7b:48:bc:84:52:6a:d2:dc:
                    ca:c6:31:9a:b2:c2:30:02:56:18:64:47:b5:1b:bc:
                    e1:2d:99:5a:2c:d8:d0:a6:98:3f:44:c3:78:47:b2:
                    50:6a:69:66:41:f0:70:14:b7:d5:e9:91:82:d4:83:
                    2c:ee:c7:fb:0b:00:53:c6:c8:3e:b7:4f:19:cb:01:
                    78:f9:e5:0a:87:8b:60:1f:4a:dc:32:93:81:3a:98:
                    8d:15:b7:4f:e4:07:34:47:08:dd:92:47:d4:92:7a:
                    4f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6B:DB:07:09:20:B3:CB:FF:83:F3:49:4E:EC:3F:BD:11:82:48:9F
            X509v3 Authority Key Identifier:
                keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131302e3233362e302e302f31352d3135203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.236.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         61:5f:27:fa:6a:2b:59:e3:83:64:5d:36:5c:ca:e7:4a:6b:f0:
         81:0e:ba:89:b0:fc:04:f0:40:6e:60:4f:c1:e8:7b:32:02:ae:
         52:5a:07:59:fb:17:b0:17:e5:b6:16:2b:30:7c:27:4d:3a:58:
         e4:ea:ef:de:60:4a:c2:1e:50:6b:b1:50:a7:bd:f9:7c:7a:2d:
         ae:c5:05:30:0d:fe:a1:e9:f5:b4:24:69:ce:c4:e8:1d:90:33:
         ce:2f:e5:76:9a:6b:33:df:db:12:2b:e0:48:11:40:29:e1:21:
         3a:0d:62:76:e7:01:c0:5a:7a:a6:be:4c:26:8a:93:f4:0d:e3:
         a5:a3:5d:1c:9e:12:e1:95:2d:9a:93:54:e9:c0:75:50:78:03:
         6f:78:2b:df:f7:b5:76:73:7c:5e:aa:da:1f:ad:be:76:2e:19:
         dd:c9:48:cd:75:28:e5:63:cb:1d:41:c0:91:25:fc:96:5b:6e:
         05:5d:cb:d3:4e:de:ce:8b:58:b5:0f:10:cf:40:85:76:46:eb:
         ed:54:b5:a9:2e:88:7e:5d:f5:df:f0:4a:7a:64:c4:6a:88:f1:
         26:ec:cb:d8:4d:37:5a:d4:9e:e7:b2:41:ef:02:66:cf:ac:61:
         99:ff:56:56:65:71:13:0d:a4:d4:1a:fb:61:f5:fd:7b:96:14:
         ea:e4:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:47 2026 by rpki-client