This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e372e302f32342d3332203d3e20313331353339.roa
File:                     3131302e34322e372e302f32342d3332203d3e20313331353339.roa (raw, json)
Hash identifier:          PnRTCZodwFvvxLNCVBWc71hkMeLqFF+kuYfdErpIm54=
Subject key identifier:   8F:AA:95:A6:F4:A0:DD:01:59:D4:0E:0F:EA:59:85:AB:B8:F9:00:D4
Certificate issuer:       /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial:       2059107B44ECC2B92C15210B10B6D1090A4393F5
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e372e302f32342d3332203d3e20313331353339.roa
Signing time:             Tue 20 Jan 2026 02:12:04 +0000
ROA not before:           Tue 20 Jan 2026 02:07:04 +0000
ROA not after:            Tue 19 Jan 2027 02:12:04 +0000
asID:                     131539
IP address blocks:        110.42.7.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:59:10:7b:44:ec:c2:b9:2c:15:21:0b:10:b6:d1:09:0a:43:93:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
        Validity
            Not Before: Jan 20 02:07:04 2026 GMT
            Not After : Jan 19 02:12:04 2027 GMT
        Subject: CN=8FAA95A6F4A0DD0159D40E0FEA5985ABB8F900D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d6:67:78:1c:25:6d:ff:80:f1:81:a6:16:07:
                    7b:11:ea:61:b8:5e:86:17:2b:28:ea:11:38:60:aa:
                    ea:86:ec:93:f0:22:a0:d5:8a:c2:59:57:9d:07:d9:
                    2a:6f:1c:86:2f:0d:1b:ba:8c:20:da:04:ba:79:05:
                    8d:07:ad:de:bf:1b:5a:f7:3f:69:fc:72:5d:0a:83:
                    f7:77:82:07:8a:90:b5:5c:4a:3c:02:08:d5:3f:95:
                    93:43:3b:1c:45:61:4d:3c:e6:33:a0:63:fe:57:18:
                    b2:8d:55:96:5d:1f:0a:d2:82:54:78:b9:5a:59:41:
                    0e:99:07:4b:8c:c2:b2:fe:e4:33:7e:a3:ef:99:48:
                    a1:f5:c9:8b:ec:e0:70:c1:ba:0a:70:68:e9:0b:9c:
                    dd:0a:a0:9f:81:fc:ae:c5:68:5d:63:c9:9e:91:3e:
                    b3:b4:34:06:51:1b:62:0d:74:89:70:cc:2e:44:dd:
                    27:fa:df:9f:64:99:ba:4c:10:e0:98:28:1b:02:80:
                    c7:09:7e:22:96:c5:58:9f:84:fb:0d:a0:54:12:bf:
                    cf:6f:1b:5a:24:95:5f:89:50:79:26:a6:85:cb:df:
                    3e:3d:34:f2:61:23:e7:2a:d8:ef:da:1b:b9:93:64:
                    ea:3c:e5:c7:38:0d:f0:69:03:4b:fe:8b:f2:49:9c:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AA:95:A6:F4:A0:DD:01:59:D4:0E:0F:EA:59:85:AB:B8:F9:00:D4
            X509v3 Authority Key Identifier:
                keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e372e302f32342d3332203d3e20313331353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.42.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:ac:49:4a:3b:e7:8a:3e:8e:01:25:ce:5a:7d:81:2e:90:8f:
         50:ed:41:86:b8:93:72:94:63:c9:36:68:2f:69:ae:65:72:be:
         41:05:db:c3:81:39:0b:d7:37:95:75:01:2d:38:2f:d7:1f:c7:
         75:77:0f:8a:a1:d9:82:f9:66:8f:1e:07:0c:b3:e3:7c:e9:4d:
         1b:31:d8:06:6b:e8:00:ad:15:57:17:25:00:bb:bb:d1:5c:3a:
         78:a3:6a:4e:cd:13:2f:ad:1a:45:52:5d:6f:93:fa:2e:4b:0e:
         09:66:8c:85:6b:96:61:e0:01:22:27:3a:bf:6c:20:af:ba:fe:
         93:ac:bc:ad:c0:9f:df:3c:bf:59:ed:e6:48:a9:80:06:a4:72:
         fc:d3:7f:53:4b:69:a8:4f:0e:fb:83:f3:ec:c3:31:27:93:19:
         80:61:39:17:a2:a1:1e:bd:7f:20:47:51:04:fe:88:11:53:f3:
         c5:dd:e1:6c:2b:b4:a7:56:75:bc:5b:1f:f1:a3:0a:37:ec:43:
         54:d3:2f:f6:28:ee:60:97:94:02:32:8a:e2:f4:5f:76:67:5f:
         ac:25:97:b8:7d:8b:09:b8:91:00:30:60:2b:ea:b8:70:f0:c1:
         8e:68:b2:fd:7d:85:7c:9b:3c:ce:bb:72:47:9d:56:f9:90:61:
         3b:af:75:6c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUIFkQe0TswrksFSELELbRCQpDk/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURF
Njk3MDBCRjAeFw0yNjAxMjAwMjA3MDRaFw0yNzAxMTkwMjEyMDRaMDMxMTAvBgNV
BAMTKDhGQUE5NUE2RjRBMEREMDE1OUQ0MEUwRkVBNTk4NUFCQjhGOTAwRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ1md4HCVt/4DxgaYWB3sR6mG4
XoYXKyjqEThgquqG7JPwIqDVisJZV50H2SpvHIYvDRu6jCDaBLp5BY0Hrd6/G1r3
P2n8cl0Kg/d3ggeKkLVcSjwCCNU/lZNDOxxFYU085jOgY/5XGLKNVZZdHwrSglR4
uVpZQQ6ZB0uMwrL+5DN+o++ZSKH1yYvs4HDBugpwaOkLnN0KoJ+B/K7FaF1jyZ6R
PrO0NAZRG2INdIlwzC5E3Sf6359kmbpMEOCYKBsCgMcJfiKWxVifhPsNoFQSv89v
G1oklV+JUHkmpoXL3z49NPJhI+cq2O/aG7mTZOo85cc4DfBpA0v+i/JJnEljAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUj6qVpvSg3QFZ1A4P6lmFq7j5ANQwHwYDVR0j
BBgwFoAUCjesiOMD9LuDTBgLBvJQreaXAL8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzI2OTI1MC8wLzBBMzdBQzg4RTMwM0Y0QkI4MzRDMTgwQjA2RjI1
MEFERTY5NzAwQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURFNjk3MDBCRi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3MjY5MjUwLzAvMzEzMTMwMmUzNDMy
MmUzNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzMTM1MzMzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAG4qBzANBgkqhkiG9w0BAQsFAAOCAQEAdqxJSjvnij6OASXOWn2BLpCPUO1B
hriTcpRjyTZoL2muZXK+QQXbw4E5C9c3lXUBLTgv1x/HdXcPiqHZgvlmjx4HDLPj
fOlNGzHYBmvoAK0VVxclALu70Vw6eKNqTs0TL60aRVJdb5P6LksOCWaMhWuWYeAB
Iic6v2wgr7r+k6y8rcCf3zy/We3mSKmABqRy/NN/U0tpqE8O+4Pz7MMxJ5MZgGE5
F6KhHr1/IEdRBP6IEVPzxd3hbCu0p1Z1vFsf8aMKN+xDVNMv9ijuYJeUAjKK4vRf
dmdfrCWXuH2LCbiRADBgK+q4cPDBjmiy/X2FfJs8zrtyR51W+ZBhO691bA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:35 2026 by rpki-client