This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e2032393134.roa
File:                     3131322e37332e302e302f31362d3234203d3e2032393134.roa (raw, json)
Hash identifier:          GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=
Subject key identifier:   55:EC:5B:E8:F9:E9:4E:F5:60:E3:7D:58:5A:D8:99:27:17:9D:91:CF
Certificate issuer:       /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial:       38A63A2168B1627390E183EDB726A2C80017058A
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e2032393134.roa
Signing time:             Tue 20 Jan 2026 02:22:43 +0000
ROA not before:           Tue 20 Jan 2026 02:17:43 +0000
ROA not after:            Tue 19 Jan 2027 02:22:43 +0000
asID:                     2914
IP address blocks:        112.73.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 15:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a6:3a:21:68:b1:62:73:90:e1:83:ed:b7:26:a2:c8:00:17:05:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Validity
            Not Before: Jan 20 02:17:43 2026 GMT
            Not After : Jan 19 02:22:43 2027 GMT
        Subject: CN=55EC5BE8F9E94EF560E37D585AD89927179D91CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:4b:3e:b3:c9:9d:b8:73:04:2b:80:b1:58:
                    67:6c:70:69:94:ec:48:1d:d9:f6:eb:63:ba:88:86:
                    76:85:b4:a8:90:41:12:cf:48:db:d4:f3:cd:d0:04:
                    d2:4f:54:af:ac:d8:9f:ae:f6:12:1a:b6:ff:9c:40:
                    1a:1d:a6:27:8f:73:ee:d8:41:c9:de:58:35:8d:6f:
                    0f:d5:e2:f7:17:5b:7c:af:11:24:f2:bd:00:fa:32:
                    53:01:1c:0e:aa:7d:e2:78:62:15:3c:0d:7b:90:d1:
                    d4:27:97:2a:4d:82:84:e1:2f:23:a3:06:0a:41:91:
                    a0:fd:37:53:f6:ac:62:7a:44:9e:96:3f:22:4c:df:
                    b5:6b:e8:18:df:54:d2:60:b1:3a:ea:77:bf:27:82:
                    56:b9:3f:23:4d:6c:62:82:9f:e7:fb:4a:3e:aa:1a:
                    19:32:99:5c:84:c7:e9:75:ff:7d:fa:85:94:68:c9:
                    c6:dc:07:dc:0d:a9:a8:1f:6d:4f:29:17:27:51:14:
                    40:be:7f:ce:69:da:65:5d:40:58:51:f9:bb:83:29:
                    c0:a3:f2:95:a0:ab:17:2a:65:22:72:19:43:fc:ef:
                    36:da:1b:42:4d:a6:d0:9c:88:77:9d:e6:d5:87:44:
                    ea:10:5e:98:6f:c1:5a:38:08:44:ed:56:0b:7e:15:
                    e0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EC:5B:E8:F9:E9:4E:F5:60:E3:7D:58:5A:D8:99:27:17:9D:91:CF
            X509v3 Authority Key Identifier:
                keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:f2:ca:82:f5:32:60:5f:d4:03:4d:d8:3f:72:16:a0:c9:70:
         c6:08:e7:4e:81:49:9e:31:2f:ab:20:5f:e1:cf:b8:a1:ec:88:
         b8:de:41:a6:6a:df:c5:7d:0d:a9:88:29:12:3b:cc:fc:19:4e:
         4a:1f:23:eb:33:ed:de:08:e6:4a:27:b5:1b:3c:a1:02:54:7c:
         7b:bc:0f:91:cc:c9:65:31:a1:10:54:50:07:e1:32:e7:c9:08:
         a1:d7:3c:f0:2e:93:91:fc:de:9c:b2:9c:6b:fd:5a:ce:aa:a9:
         ad:99:8a:07:d9:f2:7d:eb:28:3c:7b:ab:68:9e:a9:0c:40:c8:
         1d:8f:e8:d8:0a:73:a3:60:b2:64:6d:d1:93:8d:31:e4:63:6b:
         5e:e4:27:68:48:07:d0:ac:76:ec:72:b4:25:79:7d:f5:f8:52:
         af:5b:22:d8:25:95:f7:02:93:94:ef:47:50:b6:8d:38:c0:5c:
         f0:34:52:07:78:f9:7f:95:2f:da:d9:8d:b3:8b:80:02:0d:45:
         c8:36:95:9a:13:d6:f2:2f:76:41:c8:b5:44:41:65:d3:87:9a:
         e6:40:67:e3:2f:33:2c:53:85:32:0a:66:dc:c4:c2:c7:7a:fc:
         93:e9:3e:13:f4:69:bd:80:c4:cf:c7:fc:7c:f4:50:66:0d:5b:
         98:4c:6f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:58:57 2026 by rpki-client