This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138312e302f32342d3234203d3e20313436373632.roa
File:                     3131342e3131312e3138312e302f32342d3234203d3e20313436373632.roa (raw, json)
Hash identifier:          euPUAsBr1t7QdXoj1ahahda0S3VUgs4yGGVvDrZpqVI=
Subject key identifier:   09:88:36:C2:8E:4F:0E:CA:BA:AB:9B:2A:C4:F7:F5:BE:F4:F6:D6:1C
Certificate issuer:       /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D
Certificate serial:       0DD42402430510133B7502234107E8D8C99537EE
Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138312e302f32342d3234203d3e20313436373632.roa
Signing time:             Tue 20 Jan 2026 02:26:10 +0000
ROA not before:           Tue 20 Jan 2026 02:21:10 +0000
ROA not after:            Tue 19 Jan 2027 02:26:10 +0000
asID:                     146762
IP address blocks:        114.111.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d4:24:02:43:05:10:13:3b:75:02:23:41:07:e8:d8:c9:95:37:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D
        Validity
            Not Before: Jan 20 02:21:10 2026 GMT
            Not After : Jan 19 02:26:10 2027 GMT
        Subject: CN=098836C28E4F0ECABAAB9B2AC4F7F5BEF4F6D61C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:ee:f7:8b:f9:81:c6:20:68:85:66:ad:a8:
                    f9:12:44:b2:a9:8d:48:ca:bf:81:f5:33:b5:dc:77:
                    95:90:da:10:19:c8:db:e0:d8:b0:77:e9:fe:48:38:
                    d0:1e:bd:1c:1e:3c:af:f1:9c:92:c7:44:bf:f2:b8:
                    39:b6:a9:cc:22:d2:c3:4f:86:dc:ad:0a:ba:b1:9d:
                    9a:bd:71:ab:1a:6b:57:75:ca:80:60:c8:3c:5c:48:
                    90:2e:3c:a8:3b:80:07:8b:91:ef:82:c4:37:df:4f:
                    13:51:92:19:51:dd:46:b6:af:b1:06:9e:55:c2:2d:
                    18:c0:d7:96:e7:59:f3:8f:63:3d:4e:6a:46:bb:32:
                    aa:93:44:e3:08:e5:83:b0:d8:7c:ea:74:42:b1:e7:
                    db:e7:db:36:32:d3:99:ec:00:1f:8a:60:3e:2d:49:
                    d7:2b:56:34:28:77:65:2b:24:40:c2:26:61:ca:a5:
                    e0:bc:76:28:76:e0:5f:5c:a4:63:9e:d0:44:32:35:
                    1a:b6:e0:b9:6e:f3:b9:90:d1:51:d1:42:08:67:51:
                    d8:7a:54:3c:dc:6d:06:b8:f1:88:02:8d:6e:41:f8:
                    e6:68:d0:1a:b0:8b:19:03:3e:4d:aa:ec:16:be:cb:
                    46:68:12:73:27:e9:ac:5c:7e:b3:22:21:f6:43:f7:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:88:36:C2:8E:4F:0E:CA:BA:AB:9B:2A:C4:F7:F5:BE:F4:F6:D6:1C
            X509v3 Authority Key Identifier:
                keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3138312e302f32342d3234203d3e20313436373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.111.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:fc:74:b0:d6:8f:a2:3d:f1:93:4d:53:2b:15:3d:d0:64:
         63:d9:a5:a6:2a:8b:fa:46:90:b0:e7:5b:69:96:9a:98:63:5f:
         98:8d:7c:fa:0f:72:e7:98:95:b7:4c:21:ae:eb:64:a1:b4:87:
         87:3b:38:c1:4f:26:67:46:fa:46:37:3d:01:97:72:fc:6c:1f:
         39:4f:9a:02:23:8a:62:e4:3a:93:c1:e2:b0:df:2a:d6:f5:a2:
         99:99:54:36:b0:1b:48:23:a1:26:0d:91:e5:12:5a:63:2d:f0:
         29:9b:e2:d9:c8:01:c0:b6:30:72:2b:48:bb:e1:a9:b1:2f:67:
         34:7e:f1:e6:d5:d9:ab:74:88:ad:dd:17:d6:32:d4:3b:99:63:
         0e:7d:3c:20:98:31:65:2e:2c:69:eb:f7:3f:47:72:b7:2b:23:
         f7:fc:ec:4e:2a:73:49:98:ec:83:83:7a:a7:4a:10:fc:00:31:
         d3:c5:e0:3b:42:11:83:36:67:18:a4:a3:e0:86:b3:55:46:df:
         1b:6d:ff:81:ed:76:df:f7:17:45:40:b8:e8:5e:ab:8c:69:de:
         d4:f0:2c:fd:d6:68:82:c1:21:95:86:3b:c7:66:8a:37:6b:d9:
         06:95:42:95:a1:d2:85:14:38:9f:a5:2c:f6:a4:4f:f4:e8:f7:
         fb:8a:c3:d0
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUDdQkAkMFEBM7dQIjQQfo2MmVN+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3
REEyOTExRDAeFw0yNjAxMjAwMjIxMTBaFw0yNzAxMTkwMjI2MTBaMDMxMTAvBgNV
BAMTKDA5ODgzNkMyOEU0RjBFQ0FCQUFCOUIyQUM0RjdGNUJFRjRGNkQ2MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyH+73i/mBxiBohWatqPkSRLKp
jUjKv4H1M7Xcd5WQ2hAZyNvg2LB36f5IONAevRwePK/xnJLHRL/yuDm2qcwi0sNP
htytCrqxnZq9casaa1d1yoBgyDxcSJAuPKg7gAeLke+CxDffTxNRkhlR3Ua2r7EG
nlXCLRjA15bnWfOPYz1Oaka7MqqTROMI5YOw2HzqdEKx59vn2zYy05nsAB+KYD4t
SdcrVjQod2UrJEDCJmHKpeC8dih24F9cpGOe0EQyNRq24Llu87mQ0VHRQghnUdh6
VDzcbQa48YgCjW5B+OZo0BqwixkDPk2q7Ba+y0ZoEnMn6axcfrMiIfZD9+xzAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUCYg2wo5PDsq6q5sqxPf1vvT21hwwHwYDVR0j
BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC
RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MzI0MDM1LzAvMzEzMTM0MmUz
MTMxMzEyZTMxMzgzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzYz
Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAHJvtTANBgkqhkiG9w0BAQsFAAOCAQEADSn8dLDWj6I98ZNN
UysVPdBkY9mlpiqL+kaQsOdbaZaamGNfmI18+g9y55iVt0whrutkobSHhzs4wU8m
Z0b6Rjc9AZdy/GwfOU+aAiOKYuQ6k8HisN8q1vWimZlUNrAbSCOhJg2R5RJaYy3w
KZvi2cgBwLYwcitIu+GpsS9nNH7x5tXZq3SIrd0X1jLUO5ljDn08IJgxZS4saev3
P0dytysj9/zsTipzSZjsg4N6p0oQ/AAx08XgO0IRgzZnGKSj4IazVUbfG23/ge12
3/cXRUC46F6rjGne1PAs/dZogsEhlYY7x2aKN2vZBpVClaHShRQ4n6Us9qRP9Oj3
+4rD0A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:31:30 2026 by rpki-client