This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37332e302f32342d3234203d3e20313334373638.roa
File:                     3130332e3233362e37332e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier:          FVYOTIagc+FmPENRxxhwTWcocNyyY/Tp5uGg7CuJU2c=
Subject key identifier:   46:DE:72:36:96:87:1C:9E:D5:4F:60:CC:44:81:47:A5:32:28:31:EF
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       76C2EA9878A55A95D3AA2E58DC7C371FB5A81603
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37332e302f32342d3234203d3e20313334373638.roa
Signing time:             Tue 20 Jan 2026 02:21:37 +0000
ROA not before:           Tue 20 Jan 2026 02:16:37 +0000
ROA not after:            Tue 19 Jan 2027 02:21:37 +0000
asID:                     134768
IP address blocks:        103.236.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c2:ea:98:78:a5:5a:95:d3:aa:2e:58:dc:7c:37:1f:b5:a8:16:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: Jan 20 02:16:37 2026 GMT
            Not After : Jan 19 02:21:37 2027 GMT
        Subject: CN=46DE723696871C9ED54F60CC448147A5322831EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:21:fc:e6:4e:d2:60:7d:d8:a5:82:29:e7:
                    e1:46:16:5b:f6:0c:d1:39:34:e5:e3:7f:e6:5f:ba:
                    f4:c7:64:77:20:43:ab:c6:6e:24:46:05:bd:c4:a8:
                    30:44:4f:e6:64:4a:a2:9c:31:24:95:27:bf:79:cd:
                    8b:6d:db:3f:17:c5:b7:9e:be:49:c2:2e:9f:89:bb:
                    f4:1b:27:54:b9:f4:bb:8c:cb:fe:23:e7:1e:cc:91:
                    cf:0c:87:9c:4c:4d:74:bf:b7:38:a8:15:33:4c:62:
                    02:37:29:a5:b7:7f:3d:da:7a:e5:61:eb:c1:5b:68:
                    15:45:76:c7:23:c5:59:8d:b5:b8:cf:c2:f0:ac:2f:
                    d8:9f:0a:4c:a1:55:76:b6:1e:0e:4d:81:de:1e:4a:
                    4e:f1:bf:e7:0d:d0:83:78:b2:f2:83:5e:c0:b9:2d:
                    64:78:30:45:f6:e6:9f:e9:29:14:69:32:6a:05:1a:
                    9a:79:93:2d:d4:68:77:da:87:c8:38:3a:de:26:a5:
                    d7:87:92:80:e1:ef:fe:66:18:dc:5f:e9:15:69:8b:
                    de:7a:1d:aa:68:8e:96:e6:28:55:fc:f6:82:e5:8f:
                    1b:ca:7d:b2:e6:8f:a7:cd:dd:f0:28:39:c1:04:8e:
                    b3:62:97:4e:73:f4:2b:d3:5b:97:88:b3:37:16:ca:
                    c2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DE:72:36:96:87:1C:9E:D5:4F:60:CC:44:81:47:A5:32:28:31:EF
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37332e302f32342d3234203d3e20313334373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:79:2b:6f:54:33:d8:38:41:f7:07:ed:f6:e3:f6:72:40:fe:
         8d:91:71:47:97:d7:9f:ef:9f:74:94:af:f1:67:3c:3d:22:09:
         36:a8:0b:a4:4d:d4:71:cd:6e:e5:64:4c:47:67:94:3d:39:ab:
         e7:70:e6:05:83:34:2d:b7:52:55:61:e8:03:d8:b6:1a:ee:71:
         ad:a5:f3:aa:89:bd:77:d2:fa:c8:80:f0:0a:f0:e6:8b:65:34:
         79:22:e3:e4:83:ff:c9:8c:e4:53:03:68:c6:41:06:92:cd:23:
         25:bf:86:d4:91:86:14:d7:7d:3f:9b:29:23:78:1f:bb:35:5a:
         5c:85:70:cb:82:8c:6a:94:5b:0f:b2:93:b5:60:30:ac:80:fd:
         01:04:28:c0:fd:b8:16:f0:94:d3:82:c3:f5:7f:7b:f9:a8:92:
         eb:d9:3d:b7:ce:25:3c:62:e7:ad:da:78:b5:b3:5d:be:a1:8a:
         4f:fb:a2:b7:92:13:17:5b:02:b7:bf:10:c0:44:dc:c6:00:83:
         72:c3:d7:f4:8b:ec:2d:d8:cd:9f:82:77:d1:a6:13:9a:26:72:
         52:ee:be:8b:e0:a1:14:ed:4e:04:6c:1b:9b:11:c3:29:46:db:
         e0:c9:57:09:dc:2a:42:70:43:a0:ef:05:90:f5:a5:de:fa:91:
         1f:2d:f8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:55 2026 by rpki-client