This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39332e302f32342d3234203d3e20313334373638.roa
File:                     3130332e3233362e39332e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier:          MDxbHcS5sV7LgMjxezYpWzkTU2c4SlceUJR9gDAY9Ds=
Subject key identifier:   A7:FA:7F:F2:6B:99:33:29:33:CC:C2:FC:47:E0:E8:ED:45:2C:B6:35
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       4DF6623AB01407290B75FB3F342BE1366C25412C
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39332e302f32342d3234203d3e20313334373638.roa
Signing time:             Tue 20 Jan 2026 02:21:35 +0000
ROA not before:           Tue 20 Jan 2026 02:16:35 +0000
ROA not after:            Tue 19 Jan 2027 02:21:35 +0000
asID:                     134768
IP address blocks:        103.236.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f6:62:3a:b0:14:07:29:0b:75:fb:3f:34:2b:e1:36:6c:25:41:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: Jan 20 02:16:35 2026 GMT
            Not After : Jan 19 02:21:35 2027 GMT
        Subject: CN=A7FA7FF26B99332933CCC2FC47E0E8ED452CB635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:89:6d:af:17:50:22:9c:e5:80:3e:72:f3:bd:
                    90:61:9d:ca:b2:bb:d2:b2:ba:4f:52:7e:e1:7c:12:
                    6d:db:d3:fe:11:96:ab:22:35:bc:9f:01:16:90:65:
                    c4:31:ee:21:8c:11:a8:f7:ac:16:b8:27:2e:8d:44:
                    4c:80:3e:0f:1e:17:d9:16:40:a0:57:e0:84:ac:c2:
                    51:e3:a3:06:19:0a:1d:d1:49:4d:05:93:d3:d7:f4:
                    28:40:55:15:d4:4c:1e:54:01:2a:fe:7a:21:d0:73:
                    ed:84:97:24:78:9c:fb:92:f5:d1:f3:d5:4b:5d:ae:
                    b4:6d:97:38:91:b4:8e:9e:69:66:0c:cf:e2:34:6f:
                    44:6c:b1:e5:c3:ca:ad:7c:ce:3b:cb:8f:a0:7f:ee:
                    5f:04:c4:5b:c2:c1:66:72:ed:5c:85:06:96:75:ea:
                    24:9a:15:f8:7c:8f:5c:8d:a1:8f:56:f1:ec:d8:45:
                    a3:6a:7f:63:06:34:7d:19:de:0d:a3:c6:32:f2:9a:
                    0d:57:12:94:65:a5:a5:7a:8b:78:3d:16:19:d2:79:
                    38:2b:c1:a5:ed:a8:8c:62:5c:ad:b4:ba:20:4c:c2:
                    bd:c5:80:ec:08:15:05:45:87:88:d8:85:8d:77:bc:
                    fb:01:f1:bc:04:08:88:e8:65:8b:80:11:aa:cf:19:
                    84:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FA:7F:F2:6B:99:33:29:33:CC:C2:FC:47:E0:E8:ED:45:2C:B6:35
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39332e302f32342d3234203d3e20313334373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:b6:d5:3f:e3:a9:80:29:5d:5a:4a:bd:4a:10:4b:52:cf:53:
         07:5d:03:80:54:15:5d:be:24:f4:d0:d5:15:ab:b3:50:bd:c7:
         23:88:79:43:08:d0:2a:0d:fe:59:b7:4d:64:25:b0:3a:a3:5b:
         a3:16:ae:ac:ca:01:d7:75:fc:2d:85:32:bd:ed:b9:1f:22:d9:
         a1:5a:b9:dc:59:c9:d4:42:c5:e9:0c:3b:41:f3:b9:41:0f:b5:
         79:e1:1c:97:9a:12:cb:88:88:07:5b:4d:16:e2:89:69:f0:bc:
         1b:a0:e6:03:6a:de:50:cc:49:1d:85:8a:bc:f3:dd:21:b3:6e:
         1d:9e:64:bd:bc:e9:22:57:9e:79:6e:95:4e:74:1e:f0:5b:ec:
         90:42:2e:51:dc:3c:3b:49:bd:b8:6b:7b:f4:a8:18:ba:e6:38:
         27:76:ce:29:0f:40:6c:8f:18:27:77:00:27:79:ae:2e:29:08:
         e5:ec:d0:c3:c4:5c:63:22:b3:6c:ea:a4:38:81:c7:7c:73:f6:
         67:54:72:f0:28:e1:c8:7f:18:c6:86:b7:b3:15:56:17:f4:49:
         2d:a7:8e:c7:9d:4f:5f:e5:c0:69:51:c1:dd:94:31:92:a4:04:
         4a:e0:b0:64:23:62:ca:53:c7:cd:d7:ab:9f:b2:de:ee:73:89:
         03:90:54:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:42 2026 by rpki-client