This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130312e34382e302e302f31362d3136203d3e203539303738.roa
File:                     3130312e34382e302e302f31362d3136203d3e203539303738.roa (raw, json)
Hash identifier:          00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=
Subject key identifier:   FB:1C:3F:1A:9D:D8:E2:42:AC:50:1C:42:56:23:0A:BB:03:CD:FC:8C
Certificate issuer:       /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Certificate serial:       13B315363F2C3A7A7CFCD470FF1296A1F5B11067
Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130312e34382e302e302f31362d3136203d3e203539303738.roa
Signing time:             Tue 20 Jan 2026 02:16:49 +0000
ROA not before:           Tue 20 Jan 2026 02:11:49 +0000
ROA not after:            Tue 19 Jan 2027 02:16:49 +0000
asID:                     59078
IP address blocks:        101.48.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b3:15:36:3f:2c:3a:7a:7c:fc:d4:70:ff:12:96:a1:f5:b1:10:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
        Validity
            Not Before: Jan 20 02:11:49 2026 GMT
            Not After : Jan 19 02:16:49 2027 GMT
        Subject: CN=FB1C3F1A9DD8E242AC501C4256230ABB03CDFC8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d7:2d:23:94:7d:91:4f:8b:8b:57:fa:83:3d:
                    7d:f0:8e:b7:d3:a7:0e:b6:0d:28:70:b6:76:12:8a:
                    6e:af:3f:be:c0:39:17:8b:4b:76:c5:ab:61:16:2f:
                    5f:68:45:34:1f:8a:9a:87:2f:63:76:02:1c:43:db:
                    55:79:26:20:77:8b:40:36:f8:1f:02:0d:04:37:d7:
                    f1:76:82:79:19:8e:0b:cf:64:0b:8f:be:21:a7:80:
                    ea:b5:99:32:48:25:c8:5c:1a:78:74:14:38:db:8a:
                    a4:d2:8d:63:c1:04:7d:49:e4:b9:67:40:f7:85:f1:
                    38:5a:2e:da:90:d8:ee:09:dc:09:af:24:d7:9f:ac:
                    98:20:73:f9:ac:fb:46:76:44:e1:5c:07:15:bb:28:
                    70:81:ee:4f:84:df:4e:28:d3:2b:75:b4:8d:42:46:
                    5e:44:ed:9e:80:1b:e3:29:a1:62:3b:62:8a:39:04:
                    5d:4c:0f:48:8b:11:c9:e4:1b:d2:91:40:d5:89:29:
                    cd:8f:53:1e:06:e8:95:b6:b3:1a:c3:8f:be:64:69:
                    20:2b:61:07:d7:44:22:d5:25:20:8d:0a:a5:28:cf:
                    3b:d5:50:19:a1:ca:41:b3:28:f5:9a:dd:80:f4:dd:
                    b2:0f:ec:02:71:0e:e0:a1:37:29:2e:50:c5:b3:41:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1C:3F:1A:9D:D8:E2:42:AC:50:1C:42:56:23:0A:BB:03:CD:FC:8C
            X509v3 Authority Key Identifier:
                keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130312e34382e302e302f31362d3136203d3e203539303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:c7:28:4c:13:f9:d0:89:c3:6d:1d:1a:8d:37:e5:0a:f5:2e:
         aa:2a:62:a8:86:ae:7f:41:d6:a3:2b:3b:b6:16:27:f2:8c:f5:
         a9:59:59:49:85:9a:06:a8:c7:70:ef:a0:e1:ee:c3:f3:5d:02:
         99:3e:bd:2b:88:c6:ca:c5:70:2f:f9:01:ce:90:67:e0:80:7f:
         15:af:c0:d9:e0:17:2b:39:93:a8:a7:ef:17:a6:61:5b:c7:5d:
         12:a2:5d:07:6c:36:48:a9:5c:c3:68:64:71:3c:8b:15:81:ab:
         1f:a4:53:9b:d9:17:b2:0b:9b:ca:b6:d4:1b:bb:1b:45:e7:02:
         c3:d9:ac:37:c2:bf:83:9f:d7:50:1e:aa:6c:17:e8:f3:43:b7:
         50:0c:08:7e:69:22:d7:2d:16:3c:96:05:db:d9:8a:28:4a:41:
         e6:51:b2:fd:d0:3e:22:49:0d:a3:07:6c:f3:7e:8b:9a:a7:36:
         d0:0b:7a:f4:f2:a0:4f:88:8c:7f:65:7d:f9:85:a0:f1:b2:83:
         3e:32:e0:10:9a:be:92:e7:2e:dc:bf:8b:51:f9:50:31:bc:12:
         d3:d0:11:dc:ad:ca:1e:fb:34:d4:4e:1d:fa:69:8c:8a:bd:82:
         df:db:11:6c:33:52:32:77:64:6d:9d:7f:52:24:00:cb:a0:75:
         a0:dc:53:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:56 2026 by rpki-client