This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39352e302f32342d3234203d3e20313334373638.roa
File:                     3130332e3233362e39352e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier:          rCUs2lLW5jslZo2evC1goJLjh5sDaBX8K38XoSI79XY=
Subject key identifier:   6B:8A:37:69:B5:AD:42:31:90:BC:5F:D6:E1:21:B0:E2:C8:F0:30:87
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       2A98047863505B4EEC4BE4BFADE37E4AE233A9A6
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39352e302f32342d3234203d3e20313334373638.roa
Signing time:             Tue 20 Jan 2026 02:21:36 +0000
ROA not before:           Tue 20 Jan 2026 02:16:36 +0000
ROA not after:            Tue 19 Jan 2027 02:21:36 +0000
asID:                     134768
IP address blocks:        103.236.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:98:04:78:63:50:5b:4e:ec:4b:e4:bf:ad:e3:7e:4a:e2:33:a9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: Jan 20 02:16:36 2026 GMT
            Not After : Jan 19 02:21:36 2027 GMT
        Subject: CN=6B8A3769B5AD423190BC5FD6E121B0E2C8F03087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:7f:dd:5a:a5:38:1f:bd:c0:68:9c:e6:61:
                    68:3f:f9:71:39:a8:23:d2:6e:ab:c5:13:b9:66:3d:
                    b8:0f:4d:9e:c8:a4:40:8c:a9:d6:3b:ff:17:da:b5:
                    fc:f5:e7:05:a9:15:91:15:fc:4d:ed:62:8e:58:78:
                    01:27:b4:e9:a4:0c:a2:41:5e:f0:60:1a:13:91:d3:
                    3e:bf:9f:a0:40:21:e4:e2:71:8a:d5:04:ea:f9:98:
                    b1:dd:47:d0:84:4e:2a:82:6d:0a:5d:38:e9:15:79:
                    0d:a3:a4:f6:6a:01:15:bb:43:b9:18:7c:03:1a:ce:
                    be:e5:33:8e:ec:ca:bf:fe:9d:82:bf:16:fd:19:22:
                    98:0b:d6:b8:b3:8e:6b:a7:9f:eb:1e:e0:3c:41:8c:
                    6a:38:27:19:b2:ec:db:16:71:31:56:91:cc:b2:cb:
                    df:53:82:b7:01:69:53:03:d4:ff:41:ca:1c:4f:e9:
                    f0:53:54:26:70:4e:c6:45:52:5a:fd:f1:2e:d6:43:
                    ff:d3:95:3f:6f:3a:f4:9b:44:1d:7f:43:1d:36:ae:
                    d9:d6:62:9f:d7:8d:6f:22:5f:5c:f1:2c:08:4f:75:
                    6a:18:38:00:87:e2:82:12:5f:e9:2f:57:15:3e:9f:
                    4a:d8:35:d0:b3:b9:6d:73:af:8b:97:68:32:c7:fb:
                    58:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8A:37:69:B5:AD:42:31:90:BC:5F:D6:E1:21:B0:E2:C8:F0:30:87
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39352e302f32342d3234203d3e20313334373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d1:cb:54:01:ec:c1:70:d2:1f:27:31:4f:5e:65:33:c6:68:
         93:20:14:07:7f:3b:37:18:0a:28:18:fd:c9:66:49:b4:f8:6e:
         3b:d4:1a:ac:75:68:00:99:20:c4:91:89:d0:e7:74:d5:07:ed:
         75:45:d5:fb:17:c8:23:62:0c:4b:f6:70:04:ef:19:c8:1f:0d:
         31:68:23:81:5d:44:86:0d:b8:1f:c3:26:91:13:42:45:1c:df:
         80:58:38:cc:a8:2b:ba:7c:e3:6a:6d:5e:2a:26:39:8a:71:91:
         e6:da:85:e5:47:3a:46:30:0b:7d:1b:ce:f1:54:f2:10:a8:2f:
         f7:a8:36:fe:e3:e3:8d:0c:97:fb:51:09:34:db:64:be:33:04:
         57:22:66:4f:bb:b1:e8:c3:6a:fa:5d:03:d1:c5:2d:2f:59:94:
         5c:9b:4f:31:25:c9:cd:89:ae:de:23:85:ce:6d:0a:af:60:a1:
         07:fc:df:76:77:36:cf:0f:e7:21:e5:e7:01:d3:ff:30:68:e6:
         06:5f:dc:66:18:3e:f3:32:b0:60:39:fc:2e:e7:e9:fc:8c:23:
         74:2d:7d:ee:0b:50:d8:16:a7:91:b3:a7:84:eb:84:e2:74:49:
         46:06:00:27:da:2c:97:ad:f0:0d:50:da:96:b3:18:aa:09:72:
         b9:1d:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:44 2026 by rpki-client