This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34352e302f32342d3234203d3e20313531323730.roa
File:                     3131302e34302e34352e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          Df+EAx9Bx+GEeFQFGoHCEPEa5rPWhyq4mo9XDPQUj+8=
Subject key identifier:   6A:7E:D1:8A:5F:B6:44:AF:A1:EA:55:61:78:B0:5D:E3:14:80:47:0A
Certificate issuer:       /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial:       513857E494DC0F0A689F369C434AE4F2757E73DF
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34352e302f32342d3234203d3e20313531323730.roa
Signing time:             Tue 20 Jan 2026 02:12:01 +0000
ROA not before:           Tue 20 Jan 2026 02:07:01 +0000
ROA not after:            Tue 19 Jan 2027 02:12:01 +0000
asID:                     151270
IP address blocks:        110.40.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:38:57:e4:94:dc:0f:0a:68:9f:36:9c:43:4a:e4:f2:75:7e:73:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
        Validity
            Not Before: Jan 20 02:07:01 2026 GMT
            Not After : Jan 19 02:12:01 2027 GMT
        Subject: CN=6A7ED18A5FB644AFA1EA556178B05DE31480470A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a6:bc:9d:9c:aa:c0:23:d0:b7:0b:73:e7:e7:
                    7c:2c:7b:45:b6:02:94:d1:b7:f7:46:21:aa:3b:cc:
                    7c:36:2c:6b:52:d9:28:e9:86:fc:45:12:ee:cf:41:
                    f8:4a:22:63:3f:dd:7a:8e:05:f8:b4:b8:79:ca:4c:
                    26:f3:be:ed:99:fb:67:00:6b:0d:72:f4:86:70:8a:
                    5e:b6:34:b7:bb:23:4e:7b:96:26:72:8f:d6:cc:7c:
                    12:58:db:cf:94:0c:90:61:ec:1b:e0:33:87:e3:50:
                    64:73:d9:03:9e:34:72:98:e1:0d:9b:9a:e7:72:8a:
                    02:82:16:3f:ff:8c:b8:bb:22:48:94:ec:d3:41:43:
                    aa:d7:be:a6:d4:ba:c8:f4:95:f4:cf:00:9b:b9:77:
                    7b:94:ac:c8:16:4a:bb:61:23:ff:8c:af:60:6a:a9:
                    f0:a4:e2:f0:7a:44:d4:87:37:ba:14:3a:b0:bf:03:
                    d3:8d:68:46:01:06:db:a1:a7:c2:39:2b:ca:48:79:
                    9b:27:26:e6:2e:1e:60:18:8d:6b:1c:57:6a:7a:77:
                    cd:62:2a:d3:f0:c0:97:a5:b1:47:50:20:12:8f:d8:
                    c0:a0:5e:6a:37:a2:04:c3:2a:47:11:04:0a:8b:2d:
                    2c:bb:8f:11:af:ac:02:ec:3e:07:83:90:93:bc:ce:
                    3f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7E:D1:8A:5F:B6:44:AF:A1:EA:55:61:78:B0:5D:E3:14:80:47:0A
            X509v3 Authority Key Identifier:
                keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34352e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.40.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:e6:42:10:b7:88:4d:93:46:e1:76:aa:86:1d:28:f8:65:09:
         20:e8:be:76:68:53:b3:c2:9f:11:89:6a:26:71:91:ce:37:4c:
         5a:88:82:09:41:7b:08:70:3f:60:97:13:93:8f:18:bc:4f:a3:
         fc:1e:be:0a:2b:45:b4:07:27:68:51:01:e1:0d:d3:db:e0:12:
         4b:9b:b5:69:49:c2:19:67:bb:04:f2:dd:b1:0e:e7:60:95:08:
         d4:f7:6c:b4:0b:fc:6a:37:05:15:a6:9f:7a:e3:ef:3a:fe:ab:
         14:bf:6b:b5:5f:28:e7:2d:da:e7:8a:7e:78:3c:ff:38:f9:62:
         72:e4:fd:9c:68:eb:b3:81:d3:ae:3d:6e:e1:6b:67:1f:64:a6:
         c8:66:72:8e:87:78:5b:40:b5:c4:da:4f:0b:6a:f5:df:ca:15:
         84:c6:fe:a0:b3:4c:09:bd:54:24:50:2d:67:64:21:99:e2:dd:
         4f:15:b9:ed:90:ef:b6:4c:cb:57:09:f5:78:e9:63:08:fc:e0:
         d8:7d:19:47:35:77:db:55:e1:36:79:54:c6:df:5b:97:7c:a2:
         a3:3c:5b:ec:d6:1f:c7:d2:77:e2:44:2a:41:89:1e:e6:9e:80:
         ac:6e:44:a9:bb:39:e3:6b:99:c4:8b:2c:ed:d8:2f:bb:af:53:
         ce:54:93:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:13 2026 by rpki-client