This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e36352e302f32342d3234203d3e20313531323730.roa
File:                     3131302e34302e36352e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          CqOZ1GEEVGspVVDPDgGXrZGFlwNDnRAuaKj+LDrrdFo=
Subject key identifier:   3D:EC:0E:10:5D:EE:6D:C2:05:18:37:5F:FA:7A:59:7C:DB:32:B3:FC
Certificate issuer:       /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial:       15A29E8B85BDD35385929D2A11EF756224A8307B
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e36352e302f32342d3234203d3e20313531323730.roa
Signing time:             Tue 20 Jan 2026 02:12:01 +0000
ROA not before:           Tue 20 Jan 2026 02:07:01 +0000
ROA not after:            Tue 19 Jan 2027 02:12:01 +0000
asID:                     151270
IP address blocks:        110.40.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a2:9e:8b:85:bd:d3:53:85:92:9d:2a:11:ef:75:62:24:a8:30:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
        Validity
            Not Before: Jan 20 02:07:01 2026 GMT
            Not After : Jan 19 02:12:01 2027 GMT
        Subject: CN=3DEC0E105DEE6DC20518375FFA7A597CDB32B3FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c8:54:26:9c:f9:cc:6c:95:68:d9:6d:69:0b:
                    39:78:a8:f4:9b:99:ba:06:f4:2f:fa:97:22:97:f5:
                    8e:2b:44:4c:40:32:53:05:ac:d7:32:82:2c:f7:f0:
                    3a:9b:c0:c5:9e:63:23:c4:fb:e7:38:59:c1:e0:e9:
                    d5:32:b3:18:2c:41:50:cd:f6:6a:a3:da:4a:42:e2:
                    d5:52:63:bd:81:16:30:70:f2:29:cc:90:31:42:2e:
                    dc:ac:59:ac:77:0c:c6:92:2d:96:d3:74:9b:5e:c6:
                    a0:61:60:b5:72:02:de:97:0b:36:10:ff:99:20:c1:
                    54:c4:da:9c:bf:cd:e3:6b:95:65:84:4c:18:21:a8:
                    c0:a2:68:5d:81:82:b3:9f:13:00:84:d7:d8:97:72:
                    cd:44:69:dc:68:0c:20:7a:1c:c6:e8:ae:58:b4:4a:
                    bb:d9:90:37:6d:4a:20:42:da:62:da:fa:64:11:1d:
                    49:f2:d7:0d:08:fe:98:1b:5b:b3:ec:44:06:68:f9:
                    48:f1:77:aa:89:22:ce:b4:6b:05:0d:8b:27:71:c6:
                    06:e2:b7:73:52:d1:e1:23:fc:18:b2:e2:34:28:6f:
                    a7:98:b8:6a:15:ff:4b:aa:d7:81:4d:f1:c1:9f:32:
                    ba:b3:34:12:49:b3:4a:83:1f:29:5a:9f:8d:5b:2c:
                    13:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EC:0E:10:5D:EE:6D:C2:05:18:37:5F:FA:7A:59:7C:DB:32:B3:FC
            X509v3 Authority Key Identifier:
                keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e36352e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.40.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:39:a2:26:b5:9b:05:c8:e8:b6:7c:17:6f:6f:2e:3b:d2:b9:
         ee:9a:91:46:a4:46:93:66:d1:c3:af:0d:bf:a6:b9:d9:18:10:
         84:96:6c:46:71:28:ba:d2:5e:33:b9:a8:fc:92:44:06:2d:c4:
         a7:98:4d:f8:a4:be:22:20:18:18:76:b1:c8:1f:d3:48:87:98:
         4e:23:25:83:d3:31:9a:48:81:45:98:90:66:10:ab:6f:ae:87:
         3a:89:90:dc:2d:88:7c:1e:29:81:e5:91:fe:f1:d0:08:4d:84:
         66:29:1e:68:46:98:43:f7:bc:ab:23:2c:96:a2:4c:56:a6:0c:
         00:30:c7:c0:e0:ea:f2:b4:dc:79:3e:d5:7e:5a:2d:94:ad:b2:
         d3:21:43:53:18:55:f5:55:2c:e1:56:e1:d6:4c:d0:06:8f:d6:
         02:75:7b:9b:3e:15:7b:b7:30:b8:3e:fd:7e:ab:7a:ec:c1:19:
         a5:95:d1:b9:d7:87:c8:42:41:37:a1:70:c0:04:49:64:71:19:
         59:08:18:9c:7a:c1:b9:2a:c2:3a:0a:3d:83:6b:78:d9:0d:44:
         24:58:bb:0c:22:8b:51:d9:ea:74:07:79:f8:51:04:b6:69:c5:
         2a:cb:fa:3e:95:25:31:ff:06:82:3a:66:4c:ff:4c:de:6a:83:
         a6:ec:73:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:18 2026 by rpki-client