This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36382e302f32342d3234203d3e20313334373638.roa
File:                     3130332e3233362e36382e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier:          WZIxaCGEeJ8J+MxvefNW58eRQw+0UHvv3QiTr/p9gBo=
Subject key identifier:   8C:71:8C:56:38:74:6F:EE:CC:34:C9:2F:31:2C:FA:A1:85:72:25:73
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       5E4BE1632D3B2C9A7E5688EA467691C2375ED423
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36382e302f32342d3234203d3e20313334373638.roa
Signing time:             Tue 20 Jan 2026 02:21:35 +0000
ROA not before:           Tue 20 Jan 2026 02:16:35 +0000
ROA not after:            Tue 19 Jan 2027 02:21:35 +0000
asID:                     134768
IP address blocks:        103.236.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4b:e1:63:2d:3b:2c:9a:7e:56:88:ea:46:76:91:c2:37:5e:d4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: Jan 20 02:16:35 2026 GMT
            Not After : Jan 19 02:21:35 2027 GMT
        Subject: CN=8C718C5638746FEECC34C92F312CFAA185722573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:89:65:f4:49:57:15:be:db:57:75:c7:57:
                    49:cd:24:25:a2:75:15:0f:a4:be:e2:9f:74:32:a9:
                    73:cc:cf:01:60:9c:44:f0:36:2d:0b:be:89:46:08:
                    7c:2b:cf:b9:05:3f:4b:8f:b7:a5:a2:7e:b2:bb:f8:
                    5e:5f:c1:9d:2e:cd:d9:6e:6b:31:a8:93:99:46:3a:
                    f1:24:3a:19:92:4c:d8:6c:17:94:ba:a5:26:7c:92:
                    42:a5:4e:f5:d5:cb:e7:ba:be:1c:68:71:da:8b:87:
                    e9:b7:a0:a8:3d:23:bf:88:f7:9b:7f:5b:19:8a:83:
                    73:57:84:d3:81:4a:70:03:bb:33:71:ef:67:71:eb:
                    7e:8c:9a:b5:5e:49:b3:21:66:05:58:60:00:0d:d8:
                    d2:9c:21:ec:bc:d2:03:45:f1:64:6e:05:85:4e:12:
                    3b:b0:8b:64:87:e3:3b:ee:60:e9:65:2b:35:2b:ce:
                    7a:33:59:08:29:06:29:c9:b6:ad:fb:65:8e:43:61:
                    0f:b5:d3:76:e0:88:3e:a2:fa:e0:c2:de:a0:4b:9b:
                    b7:62:e7:92:9f:42:68:41:8f:af:38:aa:51:35:cd:
                    b6:7d:43:6d:32:b2:61:90:df:15:68:77:d1:ca:27:
                    d1:ef:08:5e:a3:9b:ee:06:4b:01:14:e3:17:02:0a:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:71:8C:56:38:74:6F:EE:CC:34:C9:2F:31:2C:FA:A1:85:72:25:73
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36382e302f32342d3234203d3e20313334373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:2e:0f:83:3d:c1:1e:44:18:6b:45:48:b6:9d:83:3c:f4:8c:
         7b:9a:1f:74:ab:82:49:32:db:8a:bb:3a:02:2d:91:95:34:e7:
         7f:10:a8:24:59:3a:83:f2:a1:43:14:0a:79:9e:e5:47:47:92:
         8b:50:9e:1b:fc:00:c0:cb:b5:40:1f:8b:49:f1:8e:56:ca:38:
         8c:ab:2b:5f:0c:d4:67:32:b2:39:34:8d:f9:17:a1:6f:43:87:
         b1:21:ee:a6:28:70:09:d5:ec:19:d5:72:2e:b9:21:5f:cf:48:
         b8:a3:f0:41:10:0d:70:13:f7:28:fd:9c:9f:76:b0:65:10:fc:
         f7:3e:d4:e2:53:c6:10:e7:ac:86:67:57:f7:53:fe:bf:b2:34:
         95:69:b8:1e:d1:c0:5b:df:58:11:42:a1:94:41:ec:dd:9e:88:
         7b:37:f4:fe:0d:22:97:87:62:94:8f:b5:17:e8:3f:d0:5e:07:
         57:54:60:c2:69:55:c1:7a:0b:2b:db:13:94:e1:f1:7d:d5:e3:
         37:a6:a8:6c:94:4a:f9:5c:7f:e7:73:32:57:b6:76:86:fe:1d:
         de:a4:a9:42:9d:b9:7b:06:ab:1d:16:a7:6a:76:18:84:c5:c4:
         8e:80:21:08:aa:4a:5c:de:f2:cc:a2:bb:18:1b:d3:06:a3:e7:
         d3:f1:8c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:51 2026 by rpki-client