This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36392e302f32342d3234203d3e20313334373638.roa
File:                     3130332e3233362e36392e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier:          1APXXm/kYahc2jKgEf2qrO3gmXUmJ2TwDJKYZrfSabI=
Subject key identifier:   64:AC:54:C9:F9:7C:D8:37:08:ED:EA:E6:A8:58:11:32:D8:E0:4D:1E
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       733DBE3F949DBAF7C2C537062A73171435314EA0
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36392e302f32342d3234203d3e20313334373638.roa
Signing time:             Tue 20 Jan 2026 02:21:35 +0000
ROA not before:           Tue 20 Jan 2026 02:16:35 +0000
ROA not after:            Tue 19 Jan 2027 02:21:35 +0000
asID:                     134768
IP address blocks:        103.236.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3d:be:3f:94:9d:ba:f7:c2:c5:37:06:2a:73:17:14:35:31:4e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: Jan 20 02:16:35 2026 GMT
            Not After : Jan 19 02:21:35 2027 GMT
        Subject: CN=64AC54C9F97CD83708EDEAE6A8581132D8E04D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:a6:dc:87:29:10:ae:83:dc:9d:7d:bd:d4:
                    c1:86:bb:d8:51:41:90:e7:73:7a:cf:14:00:e3:a4:
                    3a:69:cd:19:60:12:5f:19:3c:f3:f3:4c:db:66:a7:
                    c2:30:d4:8f:a1:b5:0b:6c:db:f0:7e:f5:fb:48:a9:
                    01:cc:34:fe:0f:a2:7d:14:0c:1f:bd:db:f9:b6:a7:
                    7d:9d:ba:a6:20:a6:3c:36:67:a6:83:a5:cd:7c:5c:
                    64:1b:aa:a4:c8:8f:98:af:7b:fc:07:80:b6:39:b6:
                    30:27:1a:6f:06:ed:9f:ec:ea:0e:9c:28:93:b4:d5:
                    7a:6f:d8:de:93:bc:c6:2a:d8:c8:ea:36:68:2c:d7:
                    8a:d8:83:cb:ac:21:16:c5:9c:f7:7f:33:76:5a:36:
                    09:11:d2:df:0c:ef:df:ad:ff:34:3d:2a:64:22:52:
                    c5:98:42:23:c0:45:24:c7:63:53:af:77:33:41:a7:
                    12:75:99:c4:c9:72:d4:74:45:e5:fc:8a:e1:f0:59:
                    78:1f:7c:42:68:cd:07:52:76:a1:73:86:2f:6c:ff:
                    96:d5:eb:c6:9f:29:0e:70:77:58:da:0d:66:c8:d3:
                    5a:87:ce:1d:98:d5:70:95:c2:c8:7b:28:e4:8c:e8:
                    2d:77:36:27:25:2f:32:d7:dc:aa:ee:20:d6:c2:54:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AC:54:C9:F9:7C:D8:37:08:ED:EA:E6:A8:58:11:32:D8:E0:4D:1E
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36392e302f32342d3234203d3e20313334373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:11:6d:ce:ae:c1:9e:6c:1c:f2:14:03:da:c7:1b:27:de:79:
         18:6d:ed:c3:34:20:8e:01:85:4d:54:b9:d0:69:43:fb:13:bd:
         21:c5:ee:14:dc:08:65:72:0b:44:1c:f4:a0:28:93:b1:a9:9c:
         0e:49:75:9e:d1:87:6a:d0:55:08:7c:e2:2b:b8:96:be:b8:90:
         0e:1f:2d:17:cb:8f:bc:28:4e:17:38:5c:08:15:bd:50:5a:3d:
         bd:5b:d4:a8:77:92:88:0b:21:f8:5f:88:23:51:07:69:59:dc:
         63:b3:dd:84:04:ba:a6:b5:d5:b4:34:4f:fe:fb:64:12:f0:1c:
         ce:84:df:38:e0:b4:6e:e2:2e:be:dc:2c:43:b6:42:fe:5f:58:
         c4:9f:80:3b:3e:11:36:44:00:3e:ba:4e:6e:b1:76:1a:a1:b0:
         bc:2b:94:a2:1a:1a:c4:5b:10:01:e7:4b:0e:0c:94:94:ad:72:
         97:9f:dd:ce:63:13:c9:36:c5:8d:7c:8e:28:d5:1c:32:d1:bb:
         44:ac:38:44:53:45:d8:d3:50:d0:64:90:2b:12:aa:72:65:86:
         91:0e:a6:62:93:58:64:40:86:e5:34:a3:86:bc:ba:de:1d:c0:
         78:50:e5:21:c5:1f:4f:ba:40:52:00:7b:de:4f:55:8e:1f:f7:
         4b:d3:90:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:34 2026 by rpki-client