This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e38302e302f32342d3234203d3e20313531323730.roa
File:                     3131302e34302e38302e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          VqiUeFiKFnRa4ejTgotm4YJk3KYGlqMPzcSMkd44z18=
Subject key identifier:   FE:29:45:E1:B6:DA:AA:95:2A:97:BB:FE:71:9C:74:46:00:40:FB:83
Certificate issuer:       /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial:       2F4FAAD1B9655E65962323FE5CF6F3087FADEDBC
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e38302e302f32342d3234203d3e20313531323730.roa
Signing time:             Tue 20 Jan 2026 02:12:01 +0000
ROA not before:           Tue 20 Jan 2026 02:07:01 +0000
ROA not after:            Tue 19 Jan 2027 02:12:01 +0000
asID:                     151270
IP address blocks:        110.40.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4f:aa:d1:b9:65:5e:65:96:23:23:fe:5c:f6:f3:08:7f:ad:ed:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
        Validity
            Not Before: Jan 20 02:07:01 2026 GMT
            Not After : Jan 19 02:12:01 2027 GMT
        Subject: CN=FE2945E1B6DAAA952A97BBFE719C74460040FB83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:04:99:8f:81:3e:3f:74:4e:28:e2:05:fb:
                    7e:66:d8:fb:4a:1c:f6:ed:e9:7e:87:9f:30:d9:54:
                    0c:6f:e5:39:a8:70:03:57:1a:e7:b2:cb:c3:68:0d:
                    18:52:94:97:28:12:5d:4e:85:9a:55:3e:48:c0:cd:
                    af:a5:05:1e:5f:a9:69:e7:9f:c4:1b:03:f9:45:ae:
                    da:44:ac:25:34:1d:c5:39:c9:c3:dd:a3:f0:1b:7b:
                    5d:05:a0:ca:1c:04:4c:5b:f0:c6:00:3c:29:cf:01:
                    3d:d0:1d:5a:da:9d:a1:6e:c8:44:5e:8c:fd:d4:56:
                    88:c6:f9:8f:9e:6d:45:cc:9f:61:0a:7a:c2:e4:72:
                    0a:dd:d9:f8:59:f9:ad:17:a0:a5:22:b5:cf:00:0e:
                    4d:fa:76:fb:4d:15:a9:fc:06:00:5d:3d:da:a1:d9:
                    fb:63:2d:cd:10:28:e5:cf:a3:48:38:84:47:41:69:
                    7f:88:7d:2b:68:00:fe:46:2c:f3:13:fa:2a:38:e9:
                    cc:a0:90:1c:eb:28:c4:08:d6:64:03:17:b5:41:13:
                    1f:f2:d1:4f:ab:35:5b:af:1b:87:3c:e2:9e:f4:2e:
                    86:4d:64:88:ac:4e:14:fa:2a:6e:8a:64:93:55:ea:
                    d1:5d:ca:be:d5:e4:19:ba:8c:0b:64:01:a9:e8:73:
                    52:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:29:45:E1:B6:DA:AA:95:2A:97:BB:FE:71:9C:74:46:00:40:FB:83
            X509v3 Authority Key Identifier:
                keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e38302e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.40.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:77:c3:8a:4b:e4:1a:32:77:73:e3:af:a1:bb:bc:3c:36:91:
         dd:00:05:7e:fb:ba:d8:29:32:52:23:08:e2:b6:62:ea:47:0d:
         2d:1a:f2:57:c6:f8:f5:a5:b9:17:47:58:e8:56:c1:9d:ef:d0:
         4c:12:03:d3:a1:dd:a5:c3:07:5f:b5:ab:3c:b8:3b:0e:ba:81:
         91:63:64:ca:0b:74:fd:3f:60:6d:eb:e5:cd:23:e3:99:3d:7e:
         10:b0:05:88:27:20:00:ba:95:42:43:ea:db:b5:8f:dc:38:f9:
         a7:d6:fb:ba:91:2b:ee:da:af:1a:e7:d9:ae:ef:06:ff:05:5c:
         ac:e7:24:e9:8d:0f:ea:80:a3:d5:1b:48:c3:75:bf:6f:e7:9a:
         9d:e7:10:64:37:d6:7d:ea:f0:a2:14:82:08:4c:c2:d4:07:0d:
         d4:31:c2:19:c5:8c:3a:54:b3:8b:ed:4b:38:d1:ef:e3:33:84:
         28:17:6c:98:3f:84:69:17:7b:64:ab:e0:bd:1b:c3:7c:be:7d:
         4c:e2:bc:1f:29:d1:cd:3e:1c:97:5d:fd:2e:1c:cc:30:7f:e9:
         20:3b:8f:8f:ad:e3:74:c7:64:91:d4:f2:48:15:f5:f5:a7:d3:
         56:ce:61:4a:4f:b6:83:ef:91:a8:98:22:2a:67:07:75:c2:df:
         cc:f1:3b:24
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUL0+q0bllXmWWIyP+XPbzCH+t7bwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1
RDkyRjAzQzAeFw0yNjAxMjAwMjA3MDFaFw0yNzAxMTkwMjEyMDFaMDMxMTAvBgNV
BAMTKEZFMjk0NUUxQjZEQUFBOTUyQTk3QkJGRTcxOUM3NDQ2MDA0MEZCODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURQSZj4E+P3ROKOIF+35m2PtK
HPbt6X6HnzDZVAxv5TmocANXGueyy8NoDRhSlJcoEl1OhZpVPkjAza+lBR5fqWnn
n8QbA/lFrtpErCU0HcU5ycPdo/Abe10FoMocBExb8MYAPCnPAT3QHVranaFuyERe
jP3UVojG+Y+ebUXMn2EKesLkcgrd2fhZ+a0XoKUitc8ADk36dvtNFan8BgBdPdqh
2ftjLc0QKOXPo0g4hEdBaX+IfStoAP5GLPMT+io46cygkBzrKMQI1mQDF7VBEx/y
0U+rNVuvG4c84p70LoZNZIisThT6Km6KZJNV6tFdyr7V5Bm6jAtkAanoc1JLAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU/ilF4bbaqpUql7v+cZx0RgBA+4MwHwYDVR0j
BBgwFoAU3kr15VH4ICEohBc/KruxZl2S8DwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzEyNzQyNy8wL0RFNEFGNUU1NTFGODIwMjEyODg0MTczRjJBQkJC
MTY2NUQ5MkYwM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1RDkyRjAzQy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzEyNzQyNy8wLzMxMzEzMDJlMzQz
MDJlMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAG4oUDANBgkqhkiG9w0BAQsFAAOCAQEARXfDikvkGjJ3c+Ovobu8PDaR
3QAFfvu62CkyUiMI4rZi6kcNLRryV8b49aW5F0dY6FbBne/QTBID06HdpcMHX7Wr
PLg7DrqBkWNkygt0/T9gbevlzSPjmT1+ELAFiCcgALqVQkPq27WP3Dj5p9b7upEr
7tqvGufZru8G/wVcrOck6Y0P6oCj1RtIw3W/b+eanecQZDfWferwohSCCEzC1AcN
1DHCGcWMOlSzi+1LONHv4zOEKBdsmD+EaRd7ZKvgvRvDfL59TOK8HynRzT4cl139
LhzMMH/pIDuPj63jdMdkkdTySBX19afTVs5hSk+2g++RqJgiKmcHdcLfzPE7JA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:17 2026 by rpki-client