This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38322e302f32342d3234203d3e20313334373638.roa
File:                     3130332e3233362e38322e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier:          91JSZIqxgNUX5yA9Pe7tcmtaOT+w9UHMr1nIwJGZSx0=
Subject key identifier:   8A:67:71:37:30:F3:E0:B4:2F:16:69:66:03:E4:BC:0C:FB:E4:74:95
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       3F267CB52B88CB8CF83DE65C9AB9281E90AFDDF5
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38322e302f32342d3234203d3e20313334373638.roa
Signing time:             Tue 20 Jan 2026 02:21:36 +0000
ROA not before:           Tue 20 Jan 2026 02:16:36 +0000
ROA not after:            Tue 19 Jan 2027 02:21:36 +0000
asID:                     134768
IP address blocks:        103.236.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:26:7c:b5:2b:88:cb:8c:f8:3d:e6:5c:9a:b9:28:1e:90:af:dd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: Jan 20 02:16:36 2026 GMT
            Not After : Jan 19 02:21:36 2027 GMT
        Subject: CN=8A67713730F3E0B42F16696603E4BC0CFBE47495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5f:11:fd:8b:b3:80:de:28:63:b2:ae:94:11:
                    1d:f4:5c:1c:b5:0b:26:72:99:a8:0b:72:2d:d1:37:
                    a5:0c:d9:d8:5c:66:f4:d2:b3:19:83:89:09:be:26:
                    bb:ce:f9:56:44:65:98:c8:dc:c2:77:84:06:ec:c3:
                    bf:22:71:74:93:14:d6:6c:f1:6d:8e:74:a5:34:5d:
                    b8:38:61:80:7d:2c:d1:7e:a8:a7:b5:1a:29:f3:65:
                    e7:03:69:a6:fd:e9:d0:7c:b3:2d:07:4f:21:dd:4a:
                    8d:23:28:95:63:57:08:93:c8:f5:c2:29:36:43:ca:
                    35:9e:58:ba:06:b9:c9:d4:e9:6d:22:16:ae:8a:2a:
                    71:44:15:71:41:b0:69:4a:f1:b8:6a:8a:db:0a:60:
                    0b:cc:40:b7:29:01:77:01:96:28:16:eb:7d:46:4f:
                    08:98:9a:ed:2c:3f:0e:bd:77:b2:44:17:85:20:f6:
                    b9:36:75:89:5b:39:13:3e:51:d2:06:f4:33:74:62:
                    f5:74:21:52:26:be:b9:9b:0d:32:ab:73:d1:33:a7:
                    b3:c6:7b:12:9b:ca:fd:35:62:30:ea:9c:8c:ee:05:
                    57:5c:c1:0c:f3:4b:fc:2c:53:4c:81:ee:20:0d:78:
                    55:25:ac:f2:40:17:f9:60:ca:74:06:dc:fb:67:88:
                    4b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:67:71:37:30:F3:E0:B4:2F:16:69:66:03:E4:BC:0C:FB:E4:74:95
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38322e302f32342d3234203d3e20313334373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:c8:99:93:d1:23:b6:b2:13:9d:d3:a8:31:8b:e6:c8:c3:37:
         93:6e:71:18:e9:2b:d9:22:18:72:c8:d4:4c:42:5e:ac:be:98:
         b2:63:b3:09:1b:ab:7e:9d:ab:28:54:7d:36:ee:9d:00:52:b2:
         2d:6c:97:3a:8c:d2:51:3f:33:1e:49:a1:03:25:e1:68:9e:26:
         55:75:d6:70:69:cd:92:ae:f2:16:dc:54:f6:b8:85:3f:04:9a:
         a7:c3:90:dc:8e:fd:3f:16:e7:fc:aa:ce:92:07:30:82:93:b5:
         66:04:56:5f:d6:0c:57:ea:2b:e8:32:5b:ab:eb:fa:19:d0:e1:
         7d:6d:22:66:3f:6f:89:d7:b1:3d:fc:05:2b:da:69:6b:17:c7:
         86:ca:0f:36:92:fe:72:50:40:51:e8:31:1a:3b:6b:e7:cb:3f:
         5f:2f:a5:27:e7:76:1a:10:b5:49:f1:bc:ef:1a:b9:5c:66:f2:
         35:44:9c:02:45:d6:50:1f:66:f9:87:d6:9c:48:a8:a1:7b:0c:
         c1:9c:d3:46:9a:87:9c:45:a8:80:a4:fd:b9:3c:a0:7d:3b:e5:
         5e:06:6a:ee:19:c1:3f:e3:5b:b4:8e:c1:a1:12:6c:14:ff:c9:
         76:bc:18:fe:90:2f:22:e6:bf:a3:2c:8d:de:cd:f2:0c:57:1b:
         22:35:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:04:42 2026 by rpki-client