This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39362e302f32342d3234203d3e20313334373638.roa
File:                     3130332e3233362e39362e302f32342d3234203d3e20313334373638.roa (raw, json)
Hash identifier:          bdxQji4c7gv6JNDR0sqz3K+lQQXvvtM/xZdUO5mGvQQ=
Subject key identifier:   81:57:40:C7:37:0E:E0:90:C0:A5:F4:9E:C8:BD:5D:CA:D5:7F:D0:3B
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       21B02DFA5F096B3CA1276BDDD835C5E1F7C1AF23
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39362e302f32342d3234203d3e20313334373638.roa
Signing time:             Tue 20 Jan 2026 02:21:36 +0000
ROA not before:           Tue 20 Jan 2026 02:16:36 +0000
ROA not after:            Tue 19 Jan 2027 02:21:36 +0000
asID:                     134768
IP address blocks:        103.236.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 10:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b0:2d:fa:5f:09:6b:3c:a1:27:6b:dd:d8:35:c5:e1:f7:c1:af:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: Jan 20 02:16:36 2026 GMT
            Not After : Jan 19 02:21:36 2027 GMT
        Subject: CN=815740C7370EE090C0A5F49EC8BD5DCAD57FD03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:3e:38:04:f0:3a:b6:4f:29:73:53:5f:79:
                    bd:07:71:21:bb:60:e1:15:63:36:a8:25:1f:13:a0:
                    0d:b8:c4:77:ee:f6:61:5a:be:40:ec:8a:39:27:6d:
                    69:e7:20:a3:a2:c0:8f:03:5a:19:05:63:4f:78:a8:
                    33:48:73:61:c7:04:9c:e8:43:0b:1c:61:33:be:30:
                    27:88:0b:8d:8a:4f:37:3a:6f:00:4b:c2:a1:e3:9a:
                    63:a2:d7:a5:ba:e8:98:15:c8:ae:e7:ea:72:c1:74:
                    9a:cd:69:4a:d2:47:8b:e0:1c:b6:43:17:39:02:3c:
                    dc:e4:ec:07:2c:d8:4b:61:e2:18:12:95:3d:b2:af:
                    49:1d:74:52:b0:b5:ad:2d:81:6e:2b:fa:31:d3:a5:
                    da:65:31:00:fb:c3:f7:15:92:2c:bc:87:82:5c:c4:
                    ae:61:d0:c7:ad:0f:86:05:50:03:a5:34:24:e9:13:
                    10:57:59:21:2e:fe:5a:78:9c:bf:11:ad:70:ea:d3:
                    8e:d9:17:37:5b:17:af:6b:7b:ab:c5:e8:7c:5c:30:
                    1a:22:3b:1e:8a:56:d2:5c:92:7b:68:69:3a:f5:54:
                    1c:09:14:f2:92:56:6d:7f:10:62:ab:c4:97:ad:98:
                    4e:21:78:0b:48:66:c9:93:cb:c0:6e:45:d0:22:c3:
                    85:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:57:40:C7:37:0E:E0:90:C0:A5:F4:9E:C8:BD:5D:CA:D5:7F:D0:3B
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39362e302f32342d3234203d3e20313334373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:1e:ff:3c:ed:b3:ef:f7:ce:4c:e1:0d:eb:93:d2:8f:ea:86:
         35:dc:5d:8e:8c:8b:47:7d:7c:10:aa:3b:ab:59:54:b1:41:75:
         bf:36:41:6f:86:c4:9e:98:b3:30:2f:f8:15:fc:38:6f:c0:a2:
         40:e8:61:ea:33:76:2f:f5:85:b1:41:d4:f6:51:8b:73:e3:11:
         ac:99:b0:05:8a:a4:08:c7:a2:14:e6:98:f7:3c:29:a6:5e:f4:
         4d:49:52:d4:d4:f0:4e:bf:16:56:f3:92:88:35:d6:d0:84:18:
         6a:c6:ca:69:84:23:6b:e0:98:c2:d5:49:5c:fe:1a:ac:1f:4a:
         0b:97:3e:91:8c:18:98:e7:0e:e1:2a:31:c3:be:8f:cd:4f:dd:
         ea:1d:5c:32:9a:59:11:19:cc:ff:f1:e9:fa:84:37:09:b7:94:
         11:41:ea:08:60:3e:62:b2:a2:de:a7:38:4a:67:51:c8:be:a0:
         23:ac:07:f8:3e:97:97:b3:44:8e:ae:33:56:39:55:3f:a9:ee:
         0c:11:99:2e:b1:1c:87:3c:07:9b:c2:47:d8:9d:27:d2:67:04:
         76:31:ba:7f:ef:5a:5a:c5:70:a8:80:0c:f4:cd:01:85:d6:2e:
         80:4c:a1:f7:4f:04:b1:95:f1:0f:0d:10:c9:a4:04:8b:d6:d9:
         8a:1d:89:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:39 2026 by rpki-client