This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e37382e302f32342d3234203d3e20313531323730.roa
File:                     3131302e34302e37382e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          zfNZniNA/0IgphqeSgGWizashNXjLUcNyFpjXVeyfXk=
Subject key identifier:   73:C3:68:33:05:7F:85:4B:FA:97:D4:F4:EF:25:83:7F:DA:C2:05:F4
Certificate issuer:       /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial:       687CC7B12DF899AD4907821FE35532F03152678A
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e37382e302f32342d3234203d3e20313531323730.roa
Signing time:             Tue 20 Jan 2026 02:12:01 +0000
ROA not before:           Tue 20 Jan 2026 02:07:01 +0000
ROA not after:            Tue 19 Jan 2027 02:12:01 +0000
asID:                     151270
IP address blocks:        110.40.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7c:c7:b1:2d:f8:99:ad:49:07:82:1f:e3:55:32:f0:31:52:67:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
        Validity
            Not Before: Jan 20 02:07:01 2026 GMT
            Not After : Jan 19 02:12:01 2027 GMT
        Subject: CN=73C36833057F854BFA97D4F4EF25837FDAC205F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:63:7f:f6:6b:23:1f:58:cc:73:dd:8d:5d:f6:
                    1a:50:6b:a7:0a:01:a0:12:9a:6b:a6:a4:6b:65:4f:
                    4c:90:16:ee:4a:e9:20:a1:f6:fb:1e:3f:4f:be:1d:
                    0b:25:f3:6d:c0:7e:b6:78:89:2d:91:a4:3d:60:58:
                    52:78:52:22:84:af:47:49:ad:ca:40:2f:58:ef:b5:
                    c1:f0:ea:1c:dd:3a:ae:64:ee:21:27:71:b4:16:18:
                    1a:32:da:42:3a:eb:ac:6d:c7:72:be:3f:76:51:b0:
                    3f:2d:6f:6a:2e:26:a3:3f:99:36:cc:73:7b:03:96:
                    01:7a:00:b8:49:ee:e8:33:c8:6a:81:c2:93:ad:78:
                    fc:5c:6f:47:03:b0:0f:ab:3d:65:54:83:a5:b2:68:
                    0d:91:1e:72:bd:71:a6:b6:7d:87:f3:61:b8:7a:77:
                    86:4e:a1:e8:fc:00:3f:2b:11:e6:13:3e:bd:8d:13:
                    b7:df:fb:52:d8:e5:15:d0:b4:d8:5d:ea:74:30:90:
                    59:eb:d9:af:cc:56:15:56:45:e2:cd:3d:1c:58:3c:
                    57:02:83:14:37:83:b4:4c:63:c1:0c:ab:d9:79:ec:
                    84:c1:fe:4a:7b:55:bb:51:67:9b:6e:c2:b1:60:0d:
                    47:fe:87:54:b8:89:25:41:90:c6:bd:c3:6a:de:30:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C3:68:33:05:7F:85:4B:FA:97:D4:F4:EF:25:83:7F:DA:C2:05:F4
            X509v3 Authority Key Identifier:
                keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e37382e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.40.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:2d:f0:16:c5:12:9d:90:83:8b:3c:ce:d1:26:3d:59:d8:63:
         e3:95:da:c4:26:81:8a:10:19:c9:ca:d7:d0:68:eb:07:8d:02:
         6c:78:44:4f:f6:18:3c:3c:b9:f1:8d:39:1d:d6:0b:11:ba:87:
         98:34:a7:3d:80:d6:84:73:0c:12:9a:65:9e:6f:7a:83:b2:82:
         1f:5e:7e:9b:10:52:c5:0f:23:1a:e2:15:32:aa:93:3a:e7:a1:
         90:ac:93:4a:22:ff:ed:e2:f3:ae:f7:8a:17:e6:67:de:0e:e3:
         97:8f:c8:ab:91:03:4d:5d:ce:7d:d5:bd:62:b4:9b:a0:9a:11:
         47:d6:11:43:e0:f6:37:f2:5e:fa:98:20:26:e8:25:69:ce:a8:
         f8:f7:d1:5b:73:8a:7a:81:fe:57:76:2a:df:0f:85:cc:12:d8:
         11:1b:ba:1e:61:89:ba:97:c2:15:ae:17:5b:9f:bc:0c:a2:9a:
         98:c7:0b:c1:e1:5d:29:b6:01:8e:20:83:93:87:ed:6f:d0:45:
         c8:3c:75:3a:11:00:1d:44:a1:e9:ef:30:15:bf:20:74:a3:cb:
         91:9c:f8:db:6a:a7:f7:05:86:a3:7d:e7:c0:42:dc:aa:2a:fd:
         53:dc:47:7b:b4:3c:5c:35:35:d1:57:a2:ad:91:52:0d:28:dc:
         3c:62:ac:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:09 2026 by rpki-client