This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38312e302f32342d3234203d3e20313334373638.roa
File:                     3130332e3233362e38312e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier:          v4L6MVNN7zWKHT5rJABAfa16bDRi0c7Mah1EJLLnTkc=
Subject key identifier:   A2:95:E0:79:4F:56:4A:04:BB:2B:37:B9:5D:4B:DD:33:61:79:09:84
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       586974A89A13EFF21B2C80246E648E8B4B42705B
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38312e302f32342d3234203d3e20313334373638.roa
Signing time:             Tue 20 Jan 2026 02:21:35 +0000
ROA not before:           Tue 20 Jan 2026 02:16:35 +0000
ROA not after:            Tue 19 Jan 2027 02:21:35 +0000
asID:                     134768
IP address blocks:        103.236.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:69:74:a8:9a:13:ef:f2:1b:2c:80:24:6e:64:8e:8b:4b:42:70:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: Jan 20 02:16:35 2026 GMT
            Not After : Jan 19 02:21:35 2027 GMT
        Subject: CN=A295E0794F564A04BB2B37B95D4BDD3361790984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:f8:e9:59:b3:79:69:65:90:37:11:ec:5c:
                    fe:2d:9b:2a:54:72:a9:1b:a4:f4:91:a0:1a:82:3a:
                    bd:3b:8a:66:f7:d0:d2:31:51:7d:ba:64:b9:4f:4d:
                    87:47:7d:83:38:3f:df:4d:24:ec:b8:61:27:e4:33:
                    2c:bc:d3:d4:6e:28:f4:27:fe:9c:2a:f5:2e:4b:ad:
                    f0:1f:97:6f:f2:f9:f8:d0:95:f9:e8:1f:d4:bb:d5:
                    b2:e8:e5:75:a9:0c:7b:df:c0:6a:31:66:2a:0e:08:
                    91:7a:3a:f2:66:7d:2a:11:c5:7f:d6:81:57:81:94:
                    60:3f:26:c4:6a:12:6d:d5:bb:d9:31:b3:75:82:be:
                    58:42:3b:5e:ff:38:41:44:69:c2:83:0e:11:6b:0e:
                    66:16:6f:74:90:7f:16:b7:2a:a6:67:b3:f8:39:f5:
                    f9:03:2e:58:2c:5a:5c:f9:ad:9c:d1:b7:06:3c:bd:
                    16:0b:62:50:0e:c5:e7:de:73:e2:40:74:f2:69:fa:
                    35:f4:dc:9f:88:b5:5a:9b:1a:41:91:a8:e6:a3:be:
                    e9:74:a4:d7:72:d5:2b:ba:e2:59:cc:01:d7:1c:9b:
                    fe:42:19:f4:cc:32:7c:44:8f:a7:da:83:73:4b:ad:
                    39:4c:89:ef:ae:57:d5:82:b0:5c:f5:1e:6f:e6:e2:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:95:E0:79:4F:56:4A:04:BB:2B:37:B9:5D:4B:DD:33:61:79:09:84
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38312e302f32342d3234203d3e20313334373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:81:f3:ef:66:d0:70:04:db:b0:8b:aa:c3:09:29:a9:37:1a:
         ec:83:7a:47:41:6d:64:a2:e1:00:ea:4b:d5:71:97:24:bf:70:
         9a:48:44:0c:20:56:c5:1a:1b:65:9f:0a:10:93:69:13:bb:12:
         a7:59:03:0a:71:76:4a:be:e0:d5:db:b0:43:52:df:e5:63:8f:
         cb:eb:90:db:b3:37:57:00:df:92:dc:f2:d0:4e:3b:70:57:67:
         6d:6d:6c:fc:af:36:08:c5:d3:d4:cd:33:c0:09:16:68:f0:24:
         44:b5:27:a8:14:f3:2c:34:30:1d:00:ee:1a:47:dc:bb:b6:61:
         dc:19:1b:ca:ee:59:93:54:9d:5a:7c:53:51:85:ec:d2:e0:cc:
         a1:4d:ad:38:65:d5:b8:89:f9:7b:e2:43:af:e0:5e:76:2f:64:
         59:35:6d:5c:e4:78:3d:94:f4:24:a0:88:74:7c:8f:3a:ae:23:
         e5:b6:36:55:7b:7f:d4:4b:aa:fb:97:64:e8:43:d8:5c:48:62:
         30:02:ae:a8:df:79:23:1c:74:36:1c:17:21:c0:39:1b:14:69:
         c1:25:12:25:db:7e:3d:4f:3f:69:49:df:13:87:5b:cb:ee:82:
         3f:32:3e:dc:b9:d3:e3:d4:a0:b7:82:95:18:d6:1b:09:94:7f:
         6d:fb:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:34 2026 by rpki-client