This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38342e302f32342d3234203d3e20313334373638.roa
File:                     3130332e3233362e38342e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier:          McHzjJ5wVLbdTRiTrqD8KvankR4b3nkLfEKzU/ygr+w=
Subject key identifier:   43:0B:A5:18:CC:36:98:14:B4:14:CF:2B:29:C7:23:73:6E:EC:06:AA
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       2CA8BA4BCD4DE9F189D9137BC1D65F715F85954D
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38342e302f32342d3234203d3e20313334373638.roa
Signing time:             Tue 20 Jan 2026 02:21:34 +0000
ROA not before:           Tue 20 Jan 2026 02:16:34 +0000
ROA not after:            Tue 19 Jan 2027 02:21:34 +0000
asID:                     134768
IP address blocks:        103.236.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a8:ba:4b:cd:4d:e9:f1:89:d9:13:7b:c1:d6:5f:71:5f:85:95:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: Jan 20 02:16:34 2026 GMT
            Not After : Jan 19 02:21:34 2027 GMT
        Subject: CN=430BA518CC369814B414CF2B29C723736EEC06AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:56:03:7c:94:e9:b6:17:eb:68:76:29:d5:1d:
                    78:10:67:44:7c:f6:53:84:a5:5f:7f:2d:3a:dc:4d:
                    0c:e0:a9:8d:f0:3c:fc:d6:b8:32:54:db:91:9c:58:
                    d3:a6:70:e3:77:a4:e4:b3:0b:a0:98:85:77:9c:bb:
                    b6:1a:39:f6:b8:84:b3:ca:61:85:7a:86:c8:5b:1a:
                    d3:fa:99:f9:ee:c4:3f:65:de:22:ff:f8:e4:41:d8:
                    2c:f3:4e:81:04:02:96:e0:a1:d5:39:b0:ca:c6:74:
                    fa:af:18:2c:cd:00:ad:cf:a0:af:ad:a5:ee:8e:04:
                    2b:d1:b9:91:31:3b:97:75:92:9b:f8:80:d9:8f:e6:
                    c7:4d:e0:c7:8d:60:f2:48:b8:b9:fc:80:40:08:ee:
                    5b:4a:86:89:f1:45:ba:6e:59:fa:cf:40:48:b5:4b:
                    be:8e:91:5f:d0:87:6d:28:3b:57:49:34:2f:d4:a4:
                    fd:a3:41:cc:89:6b:c7:83:f5:2d:30:96:db:a8:a8:
                    02:26:e9:bb:f3:e5:25:82:b0:da:ea:8c:04:7f:78:
                    82:84:49:ba:5c:50:01:61:e9:4b:7a:a0:08:99:88:
                    e1:74:e0:0e:6d:9e:ad:c5:49:ae:ab:ae:a3:fb:80:
                    69:88:5d:e3:ee:3b:c2:1c:6f:2f:93:89:ef:4f:e9:
                    fd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0B:A5:18:CC:36:98:14:B4:14:CF:2B:29:C7:23:73:6E:EC:06:AA
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38342e302f32342d3234203d3e20313334373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:a2:40:23:aa:a4:b1:97:e6:f2:85:2f:9a:23:27:b7:c8:4e:
         ee:c5:1d:21:62:b7:6a:4e:33:4c:b3:08:bd:29:a4:62:0a:34:
         f1:06:dd:b2:dc:c0:98:1e:53:8a:b3:0a:d4:5e:67:55:5a:be:
         07:f8:83:58:8b:5a:7e:a5:8d:d2:3f:d2:57:51:65:f0:a0:0a:
         a8:5b:e2:0a:73:b6:0c:a1:99:f2:a5:ce:7b:b9:03:b3:9e:3f:
         e4:ac:b5:2f:d7:94:0a:0e:4d:7c:16:8b:8b:ed:8e:ec:6d:73:
         64:c8:1f:cb:92:79:4a:62:76:e5:37:5e:a1:aa:49:8f:43:9b:
         3a:5e:1e:3c:96:de:1c:b3:f7:d5:eb:4c:d7:f6:8c:56:91:89:
         33:9e:93:37:24:b1:5a:e9:f7:69:a7:5f:87:1c:9a:9e:b6:eb:
         2f:d7:62:12:40:e4:aa:e2:10:9b:d0:e3:4b:28:6e:14:b9:5c:
         8a:c8:8f:ba:ba:c9:90:ac:90:92:0a:81:8b:89:63:dd:c9:cc:
         5e:a7:dc:44:f5:34:d1:3b:e3:a5:29:06:6b:75:82:5f:cc:a9:
         d2:dc:97:de:17:65:7a:e5:9c:ce:f0:70:2a:1f:36:70:46:e1:
         97:6b:6f:9a:9b:e9:bf:ab:92:ef:b8:a2:12:18:15:55:8d:5f:
         d8:80:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:43 2026 by rpki-client