This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3130312e39362e3139322e302f31382d3234203d3e2034383131.roa
File:                     3130312e39362e3139322e302f31382d3234203d3e2034383131.roa (raw, json)
Hash identifier:          py4oeix/cgz+ZeGjQdBPNTXeIYYQlU7botGcgRQvIpE=
Subject key identifier:   C1:24:83:E6:A4:C9:A8:C2:F0:4C:2E:C8:DF:5B:6F:8E:99:3A:3D:CE
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       7890CC953438EBBF6719196818E0E6433C88E26A
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3130312e39362e3139322e302f31382d3234203d3e2034383131.roa
Signing time:             Tue 20 Jan 2026 02:09:41 +0000
ROA not before:           Tue 20 Jan 2026 02:04:41 +0000
ROA not after:            Tue 19 Jan 2027 02:09:41 +0000
asID:                     4811
IP address blocks:        101.96.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:90:cc:95:34:38:eb:bf:67:19:19:68:18:e0:e6:43:3c:88:e2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jan 20 02:04:41 2026 GMT
            Not After : Jan 19 02:09:41 2027 GMT
        Subject: CN=C12483E6A4C9A8C2F04C2EC8DF5B6F8E993A3DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:05:48:21:94:21:3c:e0:ba:99:05:6e:9c:
                    7d:80:13:67:86:9d:3f:2c:cb:15:c7:33:f3:b7:fe:
                    a1:94:c1:ba:42:92:7a:a2:4a:6b:15:90:a5:85:d5:
                    53:e5:0a:4e:82:37:f2:8d:ca:4e:90:ef:86:53:25:
                    b3:8c:11:92:ca:8a:2c:58:bb:c2:75:ab:4e:63:c9:
                    af:7e:9e:a0:4b:f8:e4:4d:cc:71:17:13:56:22:5d:
                    2f:c1:3e:dc:80:89:7a:90:23:62:c4:49:7c:bf:ba:
                    58:d2:c6:94:00:34:4a:9e:ca:e8:bd:4f:9f:04:80:
                    19:af:ec:d4:24:ce:ca:dd:79:97:18:8f:38:8e:2d:
                    49:1f:5a:a6:8c:1e:69:e1:6e:0b:0a:f9:b0:c5:ce:
                    44:f6:d3:76:fc:7d:12:34:56:10:f6:e4:04:d7:f4:
                    3a:0b:18:c6:01:73:a1:9f:a6:e7:c1:53:96:cf:5b:
                    44:d9:ac:09:ca:6f:5d:73:47:f8:94:f1:d0:7e:6f:
                    b6:a4:49:23:52:26:4b:80:6c:64:67:35:ec:db:3e:
                    f2:40:71:49:6f:84:4f:16:6f:90:3b:74:75:1a:54:
                    35:7b:cb:b1:61:33:fd:42:85:0b:79:8c:2c:4a:f1:
                    6f:04:d6:13:44:c8:e4:c0:3f:c9:42:86:0c:6f:c1:
                    5d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:24:83:E6:A4:C9:A8:C2:F0:4C:2E:C8:DF:5B:6F:8E:99:3A:3D:CE
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3130312e39362e3139322e302f31382d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.96.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6b:af:f2:f5:64:e3:f4:28:a3:cf:47:7a:19:fa:3c:30:5d:0b:
         39:c3:32:4a:d1:95:ac:f3:27:1c:a5:7d:05:dd:4c:4a:5b:8a:
         d1:e4:95:61:65:e0:53:1e:fe:4b:34:67:b4:52:93:67:31:5a:
         ec:2d:8c:f6:26:35:36:e4:13:de:7d:a8:16:c4:19:40:b0:04:
         bd:f6:d5:6e:3a:fa:47:50:d3:4c:7a:d1:09:81:45:73:e4:53:
         e2:e1:d4:be:4e:b7:7e:a5:7f:f4:9d:5c:d0:04:a1:e5:67:f6:
         af:46:a2:b4:c9:e2:90:ee:7f:8b:a8:fe:ed:ff:f6:6e:a0:e1:
         fc:af:79:92:99:1f:57:0e:36:16:ee:c8:32:80:72:aa:64:4c:
         ab:62:f3:67:1a:57:72:bb:69:9b:22:f9:8a:02:b5:25:27:79:
         43:d9:e3:78:63:61:93:37:16:b4:d6:47:8c:b0:96:90:ee:04:
         4a:4d:24:3e:91:f2:09:64:3c:58:2e:18:bb:3c:39:a1:99:8d:
         16:28:d7:53:98:3b:73:2d:50:b9:2d:1f:da:0e:9f:4d:69:2e:
         5f:61:f7:95:22:59:64:6f:fb:bc:b1:a2:95:e1:67:4b:87:22:
         44:62:e0:ec:66:94:90:9a:d6:be:28:82:c9:d1:b2:d4:26:1f:
         eb:e7:9f:4b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUeJDMlTQ4679nGRloGODmQzyI4mowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJE
MUVFRjM4RjAeFw0yNjAxMjAwMjA0NDFaFw0yNzAxMTkwMjA5NDFaMDMxMTAvBgNV
BAMTKEMxMjQ4M0U2QTRDOUE4QzJGMDRDMkVDOERGNUI2RjhFOTkzQTNEQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+wVIIZQhPOC6mQVunH2AE2eG
nT8syxXHM/O3/qGUwbpCknqiSmsVkKWF1VPlCk6CN/KNyk6Q74ZTJbOMEZLKiixY
u8J1q05jya9+nqBL+ORNzHEXE1YiXS/BPtyAiXqQI2LESXy/uljSxpQANEqeyui9
T58EgBmv7NQkzsrdeZcYjziOLUkfWqaMHmnhbgsK+bDFzkT203b8fRI0VhD25ATX
9DoLGMYBc6GfpufBU5bPW0TZrAnKb11zR/iU8dB+b7akSSNSJkuAbGRnNezbPvJA
cUlvhE8Wb5A7dHUaVDV7y7FhM/1ChQt5jCxK8W8E1hNEyOTAP8lChgxvwV17AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUwSSD5qTJqMLwTC7I31tvjpk6Pc4wHwYDVR0j
BBgwFoAUMHdGU7O3vxWzi4u//XOlwtHu848wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTY5MTY1MC8wLzMwNzc0NjUzQjNCN0JGMTVCMzhCOEJCRkZENzNB
NUMyRDFFRUYzOEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUwLzAvMzEzMDMxMmUzOTM2
MmUzMTM5MzIyZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBmVgwDANBgkqhkiG9w0BAQsFAAOCAQEAa6/y9WTj9Cijz0d6Gfo8MF0LOcMy
StGVrPMnHKV9Bd1MSluK0eSVYWXgUx7+SzRntFKTZzFa7C2M9iY1NuQT3n2oFsQZ
QLAEvfbVbjr6R1DTTHrRCYFFc+RT4uHUvk63fqV/9J1c0ASh5Wf2r0aitMnikO5/
i6j+7f/2bqDh/K95kpkfVw42Fu7IMoByqmRMq2LzZxpXcrtpmyL5igK1JSd5Q9nj
eGNhkzcWtNZHjLCWkO4ESk0kPpHyCWQ8WC4Yuzw5oZmNFijXU5g7cy1QuS0f2g6f
TWkuX2H3lSJZZG/7vLGileFnS4ciRGLg7GaUkJrWviiCydGy1CYf6+efSw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:41:09 2026 by rpki-client