This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37362e302f32342d3234203d3e20313334373638.roa
File:                     3130332e3233362e37362e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier:          TzO/zy79ASeWmiOo9txThISZ8Xaa+w8OueWQLuf3YxI=
Subject key identifier:   38:A6:DF:48:93:C7:2F:59:9E:A3:0A:F7:C6:B5:5C:8F:0C:AF:DE:DC
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       03CD562F06B19865D379C1AB91084FE52839BFB9
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37362e302f32342d3234203d3e20313334373638.roa
Signing time:             Tue 20 Jan 2026 02:21:35 +0000
ROA not before:           Tue 20 Jan 2026 02:16:35 +0000
ROA not after:            Tue 19 Jan 2027 02:21:35 +0000
asID:                     134768
IP address blocks:        103.236.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cd:56:2f:06:b1:98:65:d3:79:c1:ab:91:08:4f:e5:28:39:bf:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: Jan 20 02:16:35 2026 GMT
            Not After : Jan 19 02:21:35 2027 GMT
        Subject: CN=38A6DF4893C72F599EA30AF7C6B55C8F0CAFDEDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8f:e0:37:13:38:ec:2b:0f:24:26:1f:79:a9:
                    95:38:be:92:29:5e:ea:50:d3:d8:6f:10:04:2b:59:
                    30:6e:b1:85:f8:26:4f:0f:83:9e:83:49:13:a4:91:
                    94:73:ed:b0:86:7e:bc:a7:16:5f:23:14:fa:3a:49:
                    dd:26:03:55:19:37:79:4a:0e:d5:3e:ac:e7:40:1a:
                    bd:e6:ae:11:b7:57:78:b3:a4:70:9f:b0:bd:a2:36:
                    4f:f9:8b:d8:b5:5b:b7:df:c0:79:36:c7:93:ff:31:
                    9e:a0:7d:ca:ca:ce:ab:1d:b3:02:b0:a2:e8:f2:4d:
                    00:bf:24:cb:3e:95:c8:7c:6e:3c:0f:a2:d7:79:85:
                    4f:b2:8c:e7:ea:af:5e:b4:8e:67:dd:55:4a:8d:8e:
                    ea:b4:88:fa:59:5f:1b:03:c0:94:00:d7:df:af:56:
                    78:60:8b:3d:b4:0a:dc:c4:3d:2c:eb:8a:ef:65:70:
                    30:2b:17:aa:9f:5b:8d:bf:4d:2b:4f:f2:73:a4:11:
                    20:48:67:f5:74:73:57:56:e6:8a:bb:72:16:67:b4:
                    d5:e9:60:70:26:79:a5:11:40:b0:65:74:4d:f3:e5:
                    90:d6:47:82:49:6f:44:15:78:a5:97:63:92:2a:ad:
                    ff:4a:44:ff:c1:0c:c4:6d:13:27:f9:d5:b1:0c:2b:
                    91:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A6:DF:48:93:C7:2F:59:9E:A3:0A:F7:C6:B5:5C:8F:0C:AF:DE:DC
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37362e302f32342d3234203d3e20313334373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:0e:4e:53:34:59:48:42:ca:8b:46:6c:80:54:32:d7:2e:e0:
         a5:79:60:0f:a4:7d:e0:37:c5:10:64:c6:2b:5b:04:39:14:6a:
         48:94:49:31:31:59:b8:77:a2:a7:ff:58:9d:ab:46:cb:45:4a:
         2f:f3:cc:3f:2b:04:c4:e0:96:b0:42:28:f9:83:33:d0:34:96:
         9d:e1:ff:58:82:97:60:b2:ed:ed:ea:be:d1:94:94:ee:28:d4:
         dd:d8:f1:46:21:9d:7e:e4:5f:17:d4:fb:56:c3:4f:9c:82:da:
         de:4a:84:01:1a:f3:22:47:aa:5a:36:91:b9:d1:3a:0c:ee:5c:
         c0:e6:bf:33:3d:c2:79:cc:ad:38:7b:6b:b8:a9:34:72:10:b2:
         b3:1f:35:93:49:16:ad:a3:d8:c4:c4:1e:c2:35:6c:bb:3c:97:
         3e:04:63:67:c4:37:d7:6b:f6:2a:35:ef:41:aa:33:4f:dc:7f:
         c9:f7:3a:30:68:2e:38:95:17:c1:a2:f8:71:17:01:98:a5:c1:
         0e:89:5c:75:85:70:f9:96:b4:16:e5:ec:be:e3:3a:18:2c:8e:
         cd:f7:40:46:73:e1:bc:7e:e5:8d:4c:72:09:63:2e:c2:0b:8a:
         28:8d:a3:3f:5c:89:31:a8:43:16:ce:64:31:2b:80:10:ee:03:
         98:1e:a6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:50 2026 by rpki-client