This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34322e302f32342d3234203d3e20313531323730.roa
File:                     3131302e34302e34322e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          Uyj8KokDFD1uU80elHzt9gvbRCtgXkYNmcp5Rp1DFkM=
Subject key identifier:   AC:B1:4A:97:41:8A:AD:DF:7C:34:49:77:57:F8:5B:4A:DD:3F:72:3C
Certificate issuer:       /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial:       5F1459E44B113B2913D9EE4BD79AC117ED7A1520
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34322e302f32342d3234203d3e20313531323730.roa
Signing time:             Tue 20 Jan 2026 02:12:00 +0000
ROA not before:           Tue 20 Jan 2026 02:07:00 +0000
ROA not after:            Tue 19 Jan 2027 02:12:00 +0000
asID:                     151270
IP address blocks:        110.40.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:14:59:e4:4b:11:3b:29:13:d9:ee:4b:d7:9a:c1:17:ed:7a:15:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
        Validity
            Not Before: Jan 20 02:07:00 2026 GMT
            Not After : Jan 19 02:12:00 2027 GMT
        Subject: CN=ACB14A97418AADDF7C34497757F85B4ADD3F723C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:08:6f:0e:09:2f:33:68:f0:af:c8:a0:cb:
                    53:41:8f:80:f9:62:51:ec:39:63:e9:81:29:31:ca:
                    29:21:0d:ce:77:5f:55:9a:fd:ae:91:0c:f7:3f:50:
                    c5:8f:c1:c8:5b:be:36:17:d5:31:76:11:3d:0b:34:
                    39:17:99:70:d6:15:51:e8:b3:1b:31:37:a7:60:38:
                    e7:8c:f9:d6:41:5d:05:5b:08:a7:ed:c5:cb:d1:0f:
                    2c:55:c0:dc:7f:d9:91:aa:f6:74:ee:3b:c4:89:e9:
                    07:17:84:61:77:98:f6:59:2e:d3:2c:3f:01:40:a1:
                    b6:ff:b6:a8:74:63:62:49:4e:d2:dd:dc:41:84:d4:
                    99:81:72:38:4d:d1:5a:a4:c2:e5:c4:ed:4b:f7:51:
                    bd:f8:50:77:ca:12:55:67:0f:f9:91:39:1a:dd:b5:
                    20:09:73:4c:d7:49:37:62:70:2f:6f:f4:d6:7f:a6:
                    00:c8:68:9c:ce:f7:25:6d:38:e2:35:01:1b:35:a5:
                    82:8c:26:28:6e:5b:0e:c2:81:3d:51:1c:b2:42:1f:
                    0f:6c:dd:41:e4:98:05:c6:cb:43:12:63:2a:9c:c9:
                    36:8a:40:a4:4d:3b:4a:17:57:91:fd:7e:8b:3d:71:
                    88:cc:4f:2b:d0:df:c4:8e:ba:6e:76:6b:d6:37:b3:
                    71:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B1:4A:97:41:8A:AD:DF:7C:34:49:77:57:F8:5B:4A:DD:3F:72:3C
            X509v3 Authority Key Identifier:
                keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34322e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.40.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e6:3a:d8:b0:47:e8:67:fd:e2:f2:3f:e5:c7:c5:8e:8f:83:
         63:ae:28:c5:6a:0d:75:7f:81:cb:3d:ab:bc:ea:15:7d:56:f4:
         96:83:b5:a5:51:5e:93:df:62:1d:f7:09:1e:82:4d:6b:1b:9a:
         12:ac:b2:71:18:0c:4b:10:f3:60:42:64:ec:b6:90:1f:b6:ef:
         35:53:04:05:0f:b2:03:7c:13:00:2a:94:2a:2b:e3:37:4d:f2:
         39:e6:9b:f0:81:6f:66:74:ce:47:65:5e:c6:ca:3a:39:28:b2:
         3e:63:df:8e:29:5f:7c:bf:67:1f:81:a3:00:87:a3:48:cf:21:
         e7:28:96:a3:1b:b3:85:6f:fd:f2:f1:ba:79:c6:3f:37:8e:93:
         db:31:8c:93:09:9e:86:03:7f:14:cc:4a:34:ba:0b:a3:0e:c6:
         df:62:ea:1f:27:cb:72:78:c4:f3:b3:2b:c4:7e:96:87:0c:bd:
         7f:f8:27:5a:44:33:2e:1b:86:c7:ab:25:d0:04:fa:6a:bc:ea:
         82:73:31:c6:50:2f:07:14:31:23:a9:23:9d:89:89:bd:12:c3:
         4d:dd:8f:74:5b:8a:21:ca:10:ed:f8:b2:ab:7c:6b:77:50:a0:
         b5:6f:c0:8e:c8:6c:23:ec:8d:ab:67:f7:91:59:3b:68:40:3b:
         b8:8d:d1:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:02 2026 by rpki-client