This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e35322e302f32342d3234203d3e20313531323730.roa
File:                     3131302e34302e35322e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          SmRU4scI1d5ItLZtbLsixK6Xp7BL82WGWExiBRup4Rg=
Subject key identifier:   10:AC:F0:F3:DB:D1:B5:66:17:96:F1:11:E5:CE:4A:3B:3B:56:C4:94
Certificate issuer:       /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial:       4335773AF6602C45FEBBC39E57A6AAB73120A41F
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e35322e302f32342d3234203d3e20313531323730.roa
Signing time:             Tue 20 Jan 2026 02:11:59 +0000
ROA not before:           Tue 20 Jan 2026 02:06:59 +0000
ROA not after:            Tue 19 Jan 2027 02:11:59 +0000
asID:                     151270
IP address blocks:        110.40.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:35:77:3a:f6:60:2c:45:fe:bb:c3:9e:57:a6:aa:b7:31:20:a4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
        Validity
            Not Before: Jan 20 02:06:59 2026 GMT
            Not After : Jan 19 02:11:59 2027 GMT
        Subject: CN=10ACF0F3DBD1B5661796F111E5CE4A3B3B56C494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:31:ae:f7:54:07:f9:4d:ea:3f:dc:bc:92:e1:
                    d9:d8:74:b2:77:ee:6e:f3:21:e0:54:13:2f:c1:b9:
                    f8:0f:a3:62:6e:0f:e2:7f:a7:38:af:d9:fc:64:76:
                    fc:8e:4a:dc:2a:ec:22:d3:d5:5d:63:9e:c5:55:40:
                    76:a8:81:1d:ca:bd:64:97:dd:d9:e0:5e:e7:45:00:
                    b0:f1:16:e3:96:f1:02:44:8d:07:4d:75:29:5e:08:
                    d2:49:70:1e:a7:54:50:2d:ba:6b:9b:08:06:a4:b1:
                    9c:2e:d1:54:d2:3a:c0:1e:9b:ec:52:b9:8b:d0:cd:
                    bd:cf:5d:c7:c1:9e:25:b9:2e:d9:50:5a:5c:27:76:
                    62:3d:9f:08:1e:61:79:ea:97:a9:50:d0:ca:87:b4:
                    4a:57:88:38:80:f1:ad:b4:5a:ad:d8:88:18:6b:14:
                    b4:ab:fe:a6:ce:98:c2:82:f4:e7:7c:71:22:e6:19:
                    35:e8:d3:95:53:0d:bc:a7:df:ee:7b:51:2e:16:7d:
                    a5:09:33:9b:e6:ee:83:e0:fe:35:2e:7b:0c:ab:51:
                    81:9f:c1:dd:24:60:61:5a:07:2f:ab:e0:50:69:fc:
                    8d:f3:93:f2:b4:00:47:9d:a1:bd:4f:33:de:36:0f:
                    66:b8:ed:46:1d:a5:78:2e:a5:9c:9f:2a:8c:35:9e:
                    dc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AC:F0:F3:DB:D1:B5:66:17:96:F1:11:E5:CE:4A:3B:3B:56:C4:94
            X509v3 Authority Key Identifier:
                keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e35322e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.40.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:32:f4:0f:86:34:9a:d4:10:80:eb:1a:11:8f:5e:01:b5:38:
         c6:88:88:42:af:c9:72:57:f0:39:c5:0b:86:a0:85:65:71:ab:
         c8:e0:31:c3:eb:1a:28:20:92:01:ef:bf:39:3c:cc:96:e9:c1:
         bb:5c:ec:40:21:e1:f7:30:63:f3:fa:33:b5:b0:21:40:7e:b2:
         09:6a:f9:68:60:9b:77:a7:bd:f5:52:5f:98:86:69:01:f4:27:
         cc:30:14:24:64:a0:2b:58:40:38:1e:02:40:6b:cd:0c:3f:08:
         26:e1:72:42:5a:1e:3a:f6:46:c6:83:31:6a:90:ce:21:de:b0:
         69:61:23:23:66:d0:db:36:92:8d:1b:25:5a:ca:b8:73:52:3a:
         9b:5d:0d:fd:68:34:aa:42:c9:65:cd:45:c1:53:15:69:3b:90:
         86:d2:d8:dd:19:81:68:fa:5d:b9:1a:5b:ed:a5:77:35:ee:71:
         f3:74:44:4a:d7:63:7b:a4:de:16:4c:98:45:4e:21:a4:2d:40:
         35:b1:54:e9:f5:8d:03:6f:c1:b7:a4:c9:76:32:20:a8:06:8f:
         92:d8:48:93:c7:25:c2:98:ba:9c:ba:d5:ab:a2:9d:79:c9:f0:
         24:70:0f:51:2b:97:92:c9:6f:85:c2:8d:6d:8b:c1:1f:45:a3:
         9d:ca:86:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:04 2026 by rpki-client