This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e38342e302f32342d3234203d3e20313531323730.roa
File:                     3131302e34302e38342e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          l60H/jjer0CZfPuQlb03Hvv6l+sefDqCAEquqDxlxA8=
Subject key identifier:   0A:5F:E6:A3:6B:62:E3:7A:53:3B:39:80:0E:88:89:0E:5F:9C:B9:31
Certificate issuer:       /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial:       2ADC08A6E2D861B55C520A3944340DB9B3A97FAD
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e38342e302f32342d3234203d3e20313531323730.roa
Signing time:             Tue 20 Jan 2026 02:12:00 +0000
ROA not before:           Tue 20 Jan 2026 02:07:00 +0000
ROA not after:            Tue 19 Jan 2027 02:12:00 +0000
asID:                     151270
IP address blocks:        110.40.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:dc:08:a6:e2:d8:61:b5:5c:52:0a:39:44:34:0d:b9:b3:a9:7f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
        Validity
            Not Before: Jan 20 02:07:00 2026 GMT
            Not After : Jan 19 02:12:00 2027 GMT
        Subject: CN=0A5FE6A36B62E37A533B39800E88890E5F9CB931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:69:46:29:98:d4:fc:b3:c3:ba:7d:35:87:
                    0e:d5:ff:ee:9d:ce:c7:d0:b0:2b:ed:81:fe:4a:6e:
                    a9:b1:70:8d:2e:27:ba:e6:a6:e1:11:2a:30:2c:f5:
                    66:fe:d3:6c:0c:68:86:04:93:7f:a2:1e:ae:44:f7:
                    5c:83:1d:1a:24:9e:b7:3f:f6:01:30:04:36:8a:6e:
                    f4:eb:e9:96:4d:ef:62:91:97:cd:1c:31:34:d7:db:
                    88:ff:91:e4:60:e8:8e:22:4d:43:79:eb:32:ff:e8:
                    75:98:b1:9d:d8:73:36:f8:ac:04:95:b1:fe:73:27:
                    76:16:2c:74:3f:e6:db:2a:f0:d8:93:22:2a:12:d2:
                    55:d8:fd:8c:9a:e1:9b:a3:9a:5c:aa:ff:60:3c:ec:
                    d3:36:c5:f0:75:3a:74:2a:84:03:44:09:45:9f:8e:
                    6c:14:c7:9b:dd:c9:cb:1a:7e:84:68:66:a1:a6:7d:
                    55:4f:e5:01:5b:c4:8a:79:83:47:0f:57:74:6d:f9:
                    7a:82:ce:0f:76:85:fa:2d:e3:33:12:22:ee:2e:ab:
                    d7:32:91:c3:4d:43:af:d2:52:74:e7:99:a6:ec:d6:
                    f8:3f:7f:f9:a4:94:0c:6e:df:0a:5d:9c:f2:f5:3d:
                    77:99:0c:47:f5:c2:c0:08:27:cf:1f:a3:b8:98:d0:
                    22:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5F:E6:A3:6B:62:E3:7A:53:3B:39:80:0E:88:89:0E:5F:9C:B9:31
            X509v3 Authority Key Identifier:
                keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/3131302e34302e38342e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.40.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ff:22:77:53:ac:40:2c:27:ba:b3:ba:06:46:eb:0c:71:8a:
         5b:ff:29:f9:3d:ff:86:f9:f3:77:07:e0:3d:0a:63:fa:15:4b:
         4f:0c:00:28:c3:2c:63:d1:7b:6c:7f:a1:09:61:b3:4e:c0:46:
         94:2a:ef:ec:72:cd:5b:38:8e:79:ca:78:74:42:65:1b:0d:cc:
         d1:21:77:7e:ec:41:45:8c:a9:1e:12:0a:1c:bb:f8:e4:eb:07:
         ba:4c:f6:1b:d5:17:8f:50:1d:82:69:f9:ea:aa:80:a7:9c:58:
         e5:7a:98:6e:fb:53:87:db:75:96:79:41:9d:b1:e7:3d:d0:57:
         d3:1a:89:85:1b:4b:8b:3d:6f:be:f4:d3:58:fa:a4:30:71:a3:
         bf:93:04:67:ab:16:88:87:5e:16:8d:9a:c6:29:61:08:4f:b1:
         cc:3c:79:56:e1:10:68:fd:6d:37:15:cf:52:db:f9:57:c0:b8:
         29:e3:b4:da:17:31:c5:8f:5b:e1:db:47:ea:16:a7:c1:34:78:
         73:1a:a9:14:c5:8f:ec:60:51:f1:3b:74:21:76:6a:88:b2:88:
         f3:0f:da:99:3b:fc:90:e9:e7:7d:8c:42:92:87:3f:16:27:95:
         0b:5e:d5:aa:9d:fb:76:ea:d6:df:f3:d3:d8:90:5f:91:b4:e4:
         49:dd:2e:ed
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUKtwIpuLYYbVcUgo5RDQNubOpf60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1
RDkyRjAzQzAeFw0yNjAxMjAwMjA3MDBaFw0yNzAxMTkwMjEyMDBaMDMxMTAvBgNV
BAMTKDBBNUZFNkEzNkI2MkUzN0E1MzNCMzk4MDBFODg4OTBFNUY5Q0I5MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAGlGKZjU/LPDun01hw7V/+6d
zsfQsCvtgf5KbqmxcI0uJ7rmpuERKjAs9Wb+02wMaIYEk3+iHq5E91yDHRoknrc/
9gEwBDaKbvTr6ZZN72KRl80cMTTX24j/keRg6I4iTUN56zL/6HWYsZ3Yczb4rASV
sf5zJ3YWLHQ/5tsq8NiTIioS0lXY/Yya4Zujmlyq/2A87NM2xfB1OnQqhANECUWf
jmwUx5vdycsafoRoZqGmfVVP5QFbxIp5g0cPV3Rt+XqCzg92hfot4zMSIu4uq9cy
kcNNQ6/SUnTnmabs1vg/f/mklAxu3wpdnPL1PXeZDEf1wsAIJ88fo7iY0CIJAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUCl/mo2ti43pTOzmADoiJDl+cuTEwHwYDVR0j
BBgwFoAU3kr15VH4ICEohBc/KruxZl2S8DwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzEyNzQyNy8wL0RFNEFGNUU1NTFGODIwMjEyODg0MTczRjJBQkJC
MTY2NUQ5MkYwM0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1RDkyRjAzQy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNzEyNzQyNy8wLzMxMzEzMDJlMzQz
MDJlMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAG4oVDANBgkqhkiG9w0BAQsFAAOCAQEAdf8id1OsQCwnurO6BkbrDHGK
W/8p+T3/hvnzdwfgPQpj+hVLTwwAKMMsY9F7bH+hCWGzTsBGlCrv7HLNWziOecp4
dEJlGw3M0SF3fuxBRYypHhIKHLv45OsHukz2G9UXj1Adgmn56qqAp5xY5XqYbvtT
h9t1lnlBnbHnPdBX0xqJhRtLiz1vvvTTWPqkMHGjv5MEZ6sWiIdeFo2axilhCE+x
zDx5VuEQaP1tNxXPUtv5V8C4KeO02hcxxY9b4dtH6hanwTR4cxqpFMWP7GBR8Tt0
IXZqiLKI8w/amTv8kOnnfYxCkoc/FieVC17Vqp37durW3/PT2JBfkbTkSd0u7Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:11 2026 by rpki-client