This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34382e302f32342d3234203d3e20313531323730.roa
File:                     3131302e34302e34382e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          z6RinG9S+jJTeKo8Rvw+92evtahMOYNZQUsHETh33lg=
Subject key identifier:   79:60:74:CD:DA:F1:4C:DF:CF:AE:71:AA:7E:CC:C8:FB:3F:22:6E:7A
Certificate issuer:       /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial:       75055B8E0F3C59B04A3D8F5AD57D70F85D6ACB60
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34382e302f32342d3234203d3e20313531323730.roa
Signing time:             Tue 20 Jan 2026 02:12:00 +0000
ROA not before:           Tue 20 Jan 2026 02:07:00 +0000
ROA not after:            Tue 19 Jan 2027 02:12:00 +0000
asID:                     151270
IP address blocks:        110.40.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:05:5b:8e:0f:3c:59:b0:4a:3d:8f:5a:d5:7d:70:f8:5d:6a:cb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
        Validity
            Not Before: Jan 20 02:07:00 2026 GMT
            Not After : Jan 19 02:12:00 2027 GMT
        Subject: CN=796074CDDAF14CDFCFAE71AA7ECCC8FB3F226E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:c5:21:f2:1f:1c:9a:4f:11:59:92:8f:c1:
                    33:31:ad:e5:b1:c1:eb:af:59:14:f4:9a:6a:7a:7d:
                    3f:06:bc:b0:08:e0:28:fe:20:dc:8e:25:ab:f6:01:
                    2c:92:fd:24:68:2b:d7:d1:dd:59:37:d3:a5:3b:89:
                    18:b9:c2:27:92:ee:6e:2d:f3:51:d1:af:05:19:f7:
                    29:e9:8c:04:52:ca:9e:21:3e:2e:f7:69:8b:11:64:
                    67:b2:d9:f2:17:ae:0c:f7:8a:c0:c1:60:3a:c7:44:
                    83:13:7a:92:5b:84:ad:60:50:95:27:7c:47:6f:cc:
                    ee:fe:c3:24:fe:89:fb:ff:5c:77:be:c7:a7:d3:fe:
                    3e:d7:b3:98:88:fe:48:c3:36:6f:c5:2d:fd:9c:e7:
                    2f:44:e7:6b:60:e3:9f:40:c5:c6:a1:d6:eb:6b:97:
                    70:98:9b:57:7f:97:48:39:dd:2b:ad:62:8d:75:e1:
                    9d:6b:fe:f6:7f:5d:6f:14:68:eb:d3:85:e7:6c:7f:
                    d3:4f:36:74:17:94:ea:05:a5:f4:da:1c:aa:64:00:
                    b4:cd:0c:ca:55:f9:4f:be:85:24:d1:58:4c:05:1a:
                    d1:7e:c5:6d:d6:bd:ef:8a:f6:78:89:59:b5:98:66:
                    9e:7c:c7:df:56:03:79:88:ae:f5:3c:98:96:da:54:
                    4c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:60:74:CD:DA:F1:4C:DF:CF:AE:71:AA:7E:CC:C8:FB:3F:22:6E:7A
            X509v3 Authority Key Identifier:
                keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e34382e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.40.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:13:d6:6e:ac:34:8f:5e:ae:8c:f6:bc:e9:70:79:d8:84:9b:
         26:82:dd:a0:d9:4a:04:e5:eb:f1:a3:0c:19:bc:40:a9:0a:d3:
         bc:b9:69:a2:b8:39:e6:73:db:2a:73:4c:d4:bc:7e:71:ad:b2:
         b8:fd:d6:08:8e:88:3f:4a:f0:71:dc:ce:d5:3c:8a:6f:6f:a8:
         cf:5f:4c:7d:d7:ac:45:78:66:93:e1:f7:fd:71:18:36:dc:a5:
         ba:1e:1f:dd:3d:9b:1a:f1:cc:e7:31:28:a3:2c:09:c6:b6:56:
         30:5b:04:de:a8:65:98:d4:d5:72:64:09:19:00:d7:08:00:29:
         a6:75:53:a6:38:7b:35:64:f6:b7:e1:48:08:fc:ae:47:cd:36:
         59:b3:0c:8f:25:70:79:66:00:fc:9b:1d:59:1f:7f:ff:c6:71:
         ad:77:c0:66:f4:69:81:81:c3:94:a3:af:28:9a:d4:52:07:e3:
         1a:f2:4b:a0:4a:78:62:1b:74:68:64:e5:17:99:30:3b:f3:d0:
         3e:8f:fc:c9:31:12:c5:f2:ed:c7:58:9c:95:29:cd:47:b6:20:
         1c:43:b8:da:4d:f5:2d:f7:03:de:5a:87:7d:92:d3:5c:73:1a:
         9d:2e:4c:3e:48:fb:21:c8:cb:b9:12:3e:15:11:e6:71:ac:4e:
         a6:d7:d3:90
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUdQVbjg88WbBKPY9a1X1w+F1qy2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1
RDkyRjAzQzAeFw0yNjAxMjAwMjA3MDBaFw0yNzAxMTkwMjEyMDBaMDMxMTAvBgNV
BAMTKDc5NjA3NENEREFGMTRDREZDRkFFNzFBQTdFQ0NDOEZCM0YyMjZFN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbcUh8h8cmk8RWZKPwTMxreWx
weuvWRT0mmp6fT8GvLAI4Cj+INyOJav2ASyS/SRoK9fR3Vk306U7iRi5wieS7m4t
81HRrwUZ9ynpjARSyp4hPi73aYsRZGey2fIXrgz3isDBYDrHRIMTepJbhK1gUJUn
fEdvzO7+wyT+ifv/XHe+x6fT/j7Xs5iI/kjDNm/FLf2c5y9E52tg459Axcah1utr
l3CYm1d/l0g53SutYo114Z1r/vZ/XW8UaOvThedsf9NPNnQXlOoFpfTaHKpkALTN
DMpV+U++hSTRWEwFGtF+xW3Wve+K9niJWbWYZp58x99WA3mIrvU8mJbaVEyFAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUeWB0zdrxTN/PrnGqfszI+z8ibnowHwYDVR0j
BBgwFoAU3kr15VH4ICEohBc/KruxZl2S8DwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzEyNzQyNy8wL0RFNEFGNUU1NTFGODIwMjEyODg0MTczRjJBQkJC
MTY2NUQ5MkYwM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1RDkyRjAzQy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzEyNzQyNy8wLzMxMzEzMDJlMzQz
MDJlMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAG4oMDANBgkqhkiG9w0BAQsFAAOCAQEAXxPWbqw0j16ujPa86XB52ISb
JoLdoNlKBOXr8aMMGbxAqQrTvLlporg55nPbKnNM1Lx+ca2yuP3WCI6IP0rwcdzO
1TyKb2+oz19MfdesRXhmk+H3/XEYNtyluh4f3T2bGvHM5zEooywJxrZWMFsE3qhl
mNTVcmQJGQDXCAAppnVTpjh7NWT2t+FICPyuR802WbMMjyVweWYA/JsdWR9//8Zx
rXfAZvRpgYHDlKOvKJrUUgfjGvJLoEp4Yht0aGTlF5kwO/PQPo/8yTESxfLtx1ic
lSnNR7YgHEO42k31LfcD3lqHfZLTXHManS5MPkj7IcjLuRI+FRHmcaxOptfTkA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:06 2026 by rpki-client