This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e36382e302f32342d3234203d3e20313531323730.roa
File:                     3131302e34302e36382e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          7TmrFwmcYNL49K4gOSLIxjUkfZXrWxzzZTnA3dbY7/8=
Subject key identifier:   7C:34:79:5E:7F:E5:26:04:BB:05:90:4F:BE:93:FA:5A:6E:DC:71:80
Certificate issuer:       /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial:       6A73DE6A349B131C8536EE6CA2285F2BAD2BC456
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e36382e302f32342d3234203d3e20313531323730.roa
Signing time:             Tue 20 Jan 2026 02:11:59 +0000
ROA not before:           Tue 20 Jan 2026 02:06:59 +0000
ROA not after:            Tue 19 Jan 2027 02:11:59 +0000
asID:                     151270
IP address blocks:        110.40.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:73:de:6a:34:9b:13:1c:85:36:ee:6c:a2:28:5f:2b:ad:2b:c4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
        Validity
            Not Before: Jan 20 02:06:59 2026 GMT
            Not After : Jan 19 02:11:59 2027 GMT
        Subject: CN=7C34795E7FE52604BB05904FBE93FA5A6EDC7180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f5:0b:5d:24:fb:e5:93:e0:ed:d5:3c:85:9a:
                    19:79:60:0a:94:c8:e8:5d:18:27:6b:a2:75:18:03:
                    98:b4:2a:52:e0:9c:ef:6b:07:a1:21:93:c5:3e:0e:
                    0e:ae:15:37:d6:fa:67:f2:08:9d:06:c3:a7:7d:92:
                    f9:01:c6:79:5a:42:ca:46:86:3d:5a:c9:f9:c3:c0:
                    60:77:dc:a3:2c:bc:65:cf:9a:7f:31:6d:39:68:92:
                    bb:69:b8:9b:a0:82:fe:71:de:9b:1c:89:eb:13:7b:
                    4e:2c:bf:81:96:61:30:17:7a:00:9e:47:be:0d:4a:
                    66:15:d5:2e:7c:8c:30:13:d1:70:08:70:ff:6c:2d:
                    27:c9:3d:cf:34:87:b9:cf:f5:4c:1f:a2:9d:52:79:
                    b7:e0:13:31:87:ae:e2:df:b2:e7:20:63:39:3f:43:
                    74:62:9a:15:23:b9:d8:7c:1d:84:2c:dd:04:0b:27:
                    ca:d7:73:b0:23:e3:01:f8:a2:80:75:65:5e:98:a7:
                    24:a5:24:ea:07:0a:a1:f0:e4:cc:c0:d4:a5:8c:50:
                    63:ae:dc:92:61:15:23:f1:df:ba:60:d5:12:cb:2b:
                    e9:fd:43:f1:74:92:3f:99:a8:5c:dd:1b:46:59:91:
                    50:00:4b:34:2a:c9:b7:7c:ae:03:cd:89:a7:6d:f9:
                    ee:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:34:79:5E:7F:E5:26:04:BB:05:90:4F:BE:93:FA:5A:6E:DC:71:80
            X509v3 Authority Key Identifier:
                keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e36382e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.40.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:f2:d4:92:85:13:ad:f6:00:e3:09:38:91:96:d8:60:5d:7e:
         16:47:43:c5:b1:0d:9e:8b:65:55:88:fd:8f:08:a1:56:39:95:
         49:e6:03:37:3c:7f:60:6c:44:0b:9e:b8:4d:aa:6b:28:62:28:
         f1:86:03:c5:f3:88:fa:b6:d4:fa:ca:97:f4:ef:42:b1:4f:90:
         d4:01:36:0b:2b:f1:d5:7c:a0:62:ab:57:d6:99:7e:8d:41:83:
         43:f2:9c:d8:84:ff:7e:cb:b8:90:75:ca:92:be:1c:6d:aa:0f:
         e6:a0:a0:0c:f5:15:bf:35:57:ad:7f:a0:f0:de:ce:56:e4:a1:
         c0:e7:9f:98:c1:d7:41:7e:43:cf:4a:98:1c:66:9a:5f:23:b5:
         59:55:3a:4c:70:f3:67:f0:ac:25:ed:ae:61:d5:43:fe:75:0f:
         d0:65:e6:77:39:62:bf:b0:d8:74:36:94:5c:a1:d7:a3:39:9d:
         34:92:07:8c:b7:37:a0:6f:35:a6:d4:6b:14:6f:63:4b:8c:67:
         67:4f:72:b8:fc:c1:51:a8:cd:7e:58:b9:53:a7:45:51:cb:44:
         7f:f1:cc:50:a7:28:26:d8:c0:89:8e:d2:9b:33:40:78:f7:8f:
         ee:ef:e5:a1:8e:4b:7d:a9:56:e1:a7:54:74:87:e6:59:fd:86:
         1d:07:0a:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:14 2026 by rpki-client