This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e36392e302f32342d3332203d3e20313331353339.roa
File:                     3131302e34322e36392e302f32342d3332203d3e20313331353339.roa (raw, json)
Hash identifier:          N+KAvoBPFthmtPAZmA4Ct00jKsGdsu4x9NEs5BJ7SHA=
Subject key identifier:   68:C8:C6:41:2E:76:B2:32:5A:08:A4:E3:CF:2D:D8:6B:76:56:79:CB
Certificate issuer:       /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial:       655C82FAB451A6F2B6F75F375180EAFEA456C6E2
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e36392e302f32342d3332203d3e20313331353339.roa
Signing time:             Tue 20 Jan 2026 02:12:04 +0000
ROA not before:           Tue 20 Jan 2026 02:07:04 +0000
ROA not after:            Tue 19 Jan 2027 02:12:04 +0000
asID:                     131539
IP address blocks:        110.42.69.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5c:82:fa:b4:51:a6:f2:b6:f7:5f:37:51:80:ea:fe:a4:56:c6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
        Validity
            Not Before: Jan 20 02:07:04 2026 GMT
            Not After : Jan 19 02:12:04 2027 GMT
        Subject: CN=68C8C6412E76B2325A08A4E3CF2DD86B765679CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d4:41:56:53:37:11:24:f6:0c:23:79:b6:53:
                    27:f7:3d:04:29:13:24:10:73:b0:51:b9:83:d1:f8:
                    c9:ad:35:c5:81:9d:22:d5:b5:24:da:0d:6b:fd:2f:
                    bd:63:81:95:f0:12:84:c2:ed:2f:3a:f2:e6:90:d6:
                    69:1f:d6:0c:b5:75:2c:cd:7d:41:6a:3e:b3:63:51:
                    39:b1:bc:20:fb:a0:9b:3d:19:36:c7:3c:43:fa:6a:
                    ff:10:2b:bc:01:3e:91:cb:33:28:8e:f7:67:d8:e5:
                    24:88:d2:34:38:19:e5:8e:55:52:04:14:b8:6d:8f:
                    bd:5b:4a:8d:cf:3b:0f:66:dd:60:fd:7d:8d:78:a8:
                    1d:97:4a:db:3b:9a:bb:27:e6:53:0c:61:cd:3e:a3:
                    6c:f9:31:d9:e3:5e:69:98:87:01:f2:27:f4:69:4f:
                    57:0e:93:d3:d5:f7:7d:f1:96:d0:4f:96:2a:50:01:
                    8e:42:89:43:3f:b6:c9:ca:f0:a1:e4:91:96:50:6b:
                    22:c9:57:46:89:f8:2d:c0:0d:4b:10:a5:89:ce:49:
                    a1:00:22:88:d4:34:d9:3a:a7:17:91:e0:9a:8c:22:
                    99:4b:0a:d8:6b:8a:fe:3a:e8:7d:4a:fb:dd:97:94:
                    d7:ea:f6:78:05:97:15:76:bc:37:ec:06:6f:ab:be:
                    2a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C8:C6:41:2E:76:B2:32:5A:08:A4:E3:CF:2D:D8:6B:76:56:79:CB
            X509v3 Authority Key Identifier:
                keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e36392e302f32342d3332203d3e20313331353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.42.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:43:a1:94:13:05:a4:e8:2e:ff:c7:0a:51:c1:e1:59:87:be:
         c6:e9:27:18:83:e6:03:bc:a6:bf:fb:1a:e6:16:9d:6f:f5:3c:
         d4:69:99:44:39:41:19:9a:bd:e7:85:12:cc:de:3c:b0:a0:06:
         68:47:5e:15:8a:e1:70:ef:87:57:37:c3:36:90:22:fe:60:68:
         1c:bd:44:fe:94:d1:e5:ec:c8:65:04:f4:ec:74:17:37:6d:3d:
         fa:54:cb:84:5b:7b:46:73:c7:d2:28:ff:5e:cf:f5:ae:a4:ab:
         b6:97:d9:12:98:7f:2f:4a:5b:fe:3b:81:69:9a:41:e0:d5:a8:
         58:15:a4:e3:51:cd:7e:3d:42:72:3c:5f:9c:8f:d6:33:7d:c6:
         53:0e:dd:df:a4:38:0e:92:7e:d1:81:2b:5b:d4:4e:41:22:bd:
         a4:f3:0e:93:d9:60:86:88:31:f7:70:ad:55:96:38:72:e1:c1:
         cb:60:59:3b:ac:34:1f:33:a7:91:50:62:f7:cb:00:0f:9f:ff:
         7d:56:b7:6b:b6:a9:79:56:a4:16:f6:22:2d:cf:36:a7:3b:8a:
         d2:3b:48:01:43:e7:f2:a3:40:13:aa:57:54:88:a1:1c:ab:6b:
         e2:19:cb:96:57:a4:d8:b6:e8:17:f5:b0:51:58:c6:cc:db:65:
         64:b1:ec:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:06 2026 by rpki-client