This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37382e302f32342d3234203d3e20313334373638.roa
File:                     3130332e3233362e37382e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier:          FkzLMzt8SWaeH9S7eea7qILrP2eR+MMPyAuf35pjJDs=
Subject key identifier:   9C:8D:87:C0:E3:10:57:9D:B0:5E:31:D9:D9:68:34:59:F9:0F:9E:B0
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       5446F763F3E105CE0EA8FCB7E1DEF59E0631B621
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37382e302f32342d3234203d3e20313334373638.roa
Signing time:             Tue 20 Jan 2026 02:21:34 +0000
ROA not before:           Tue 20 Jan 2026 02:16:34 +0000
ROA not after:            Tue 19 Jan 2027 02:21:34 +0000
asID:                     134768
IP address blocks:        103.236.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:46:f7:63:f3:e1:05:ce:0e:a8:fc:b7:e1:de:f5:9e:06:31:b6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: Jan 20 02:16:34 2026 GMT
            Not After : Jan 19 02:21:34 2027 GMT
        Subject: CN=9C8D87C0E310579DB05E31D9D9683459F90F9EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:19:1f:23:4e:3e:c6:d9:c4:37:5c:80:cd:
                    77:cd:93:01:52:77:0a:00:c8:ae:f9:28:ec:c0:1e:
                    58:55:91:f5:1e:bf:99:df:77:63:dd:2a:7f:b6:bd:
                    85:e6:24:50:64:59:67:80:43:38:65:46:42:f8:aa:
                    e2:d4:e5:19:a1:b2:3b:41:88:a4:2b:2d:94:c3:27:
                    9e:d5:79:00:04:b1:17:70:0f:97:75:96:d5:da:ee:
                    9a:9d:23:ba:ca:b1:c5:48:c4:1d:5d:18:36:06:54:
                    65:8c:b4:2d:cd:ac:43:c9:9c:0d:0e:14:61:0a:25:
                    51:85:26:bd:a1:55:52:0a:07:03:2f:98:4c:ec:7d:
                    3e:8d:68:8a:29:ef:37:85:9a:cf:24:6f:48:98:57:
                    fe:5b:7b:3d:2f:5b:e8:1d:eb:3c:4b:6a:7a:e5:bd:
                    f7:da:a1:36:ea:06:7c:03:44:c2:5c:01:df:25:bc:
                    b4:10:99:66:e0:42:8d:2a:c7:95:95:67:e7:6d:56:
                    15:28:39:a2:43:5a:cc:a9:42:26:5d:55:ff:00:c5:
                    ab:6f:cb:ac:ef:ef:41:96:03:18:95:26:dc:06:b5:
                    0b:08:fb:c6:82:79:ca:34:03:19:9b:ba:3f:ed:39:
                    1e:a1:6e:30:75:df:af:5a:21:c4:1c:3a:17:b8:40:
                    c9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8D:87:C0:E3:10:57:9D:B0:5E:31:D9:D9:68:34:59:F9:0F:9E:B0
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37382e302f32342d3234203d3e20313334373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:1b:96:92:d5:21:bb:9c:8f:93:7c:a9:7e:4d:52:37:76:d7:
         e1:2d:2f:8e:2f:ab:d3:51:a1:99:53:52:90:7d:77:ce:1e:e3:
         d7:db:d2:ab:f6:8a:4b:22:28:1f:2a:54:ea:70:4c:5d:6f:0e:
         fc:5f:9a:2d:bb:31:e0:12:20:ab:3d:d5:40:e1:26:3a:bf:0f:
         1f:f3:51:f1:32:a0:e4:b0:f1:4a:39:f4:88:69:94:1d:fd:8f:
         09:3d:a1:d6:39:bc:67:ec:06:04:52:d3:99:80:5a:a9:da:06:
         37:50:d9:ca:92:ad:a8:ff:43:ea:f6:34:61:98:5d:35:df:63:
         0b:6e:5d:69:fd:e1:fb:54:d2:36:fb:f4:23:67:2c:7b:6d:5a:
         93:85:98:80:09:41:25:2d:ee:3d:1e:b4:d0:5d:eb:ca:03:e2:
         e3:d2:88:e2:cf:c0:31:5f:27:46:16:e2:ef:31:1a:9d:75:53:
         1e:9a:bd:5e:4b:f9:ab:6a:5b:97:ba:b6:e5:5a:07:3a:48:ea:
         b0:59:9c:eb:7e:dc:45:25:ec:49:e3:9e:e2:03:64:e2:eb:f0:
         4f:61:22:8a:cc:95:6d:03:8f:8b:65:e1:49:00:72:81:a1:8f:
         2e:cf:a3:ac:8c:9e:02:56:b9:65:28:9c:26:34:fe:3d:5a:d7:
         96:24:d6:40
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUVEb3Y/PhBc4OqPy34d71ngYxtiEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3
NkVBQUExNTAeFw0yNjAxMjAwMjE2MzRaFw0yNzAxMTkwMjIxMzRaMDMxMTAvBgNV
BAMTKDlDOEQ4N0MwRTMxMDU3OURCMDVFMzFEOUQ5NjgzNDU5RjkwRjlFQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzChkfI04+xtnEN1yAzXfNkwFS
dwoAyK75KOzAHlhVkfUev5nfd2PdKn+2vYXmJFBkWWeAQzhlRkL4quLU5RmhsjtB
iKQrLZTDJ57VeQAEsRdwD5d1ltXa7pqdI7rKscVIxB1dGDYGVGWMtC3NrEPJnA0O
FGEKJVGFJr2hVVIKBwMvmEzsfT6NaIop7zeFms8kb0iYV/5bez0vW+gd6zxLanrl
vffaoTbqBnwDRMJcAd8lvLQQmWbgQo0qx5WVZ+dtVhUoOaJDWsypQiZdVf8Axatv
y6zv70GWAxiVJtwGtQsI+8aCeco0Axmbuj/tOR6hbjB1369aIcQcOhe4QMnpAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUnI2HwOMQV52wXjHZ2Wg0WfkPnrAwHwYDVR0j
BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4
RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy
MzMzNjJlMzczODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfsTjANBgkqhkiG9w0BAQsFAAOCAQEALhuWktUhu5yPk3ypfk1S
N3bX4S0vji+r01GhmVNSkH13zh7j19vSq/aKSyIoHypU6nBMXW8O/F+aLbsx4BIg
qz3VQOEmOr8PH/NR8TKg5LDxSjn0iGmUHf2PCT2h1jm8Z+wGBFLTmYBaqdoGN1DZ
ypKtqP9D6vY0YZhdNd9jC25daf3h+1TSNvv0I2cse21ak4WYgAlBJS3uPR600F3r
ygPi49KI4s/AMV8nRhbi7zEanXVTHpq9Xkv5q2pbl7q25VoHOkjqsFmc637cRSXs
SeOe4gNk4uvwT2EiisyVbQOPi2XhSQBygaGPLs+jrIyeAla5ZSicJjT+PVrXliTW
QA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:39 2026 by rpki-client