This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e20333938373034.roa
File:                     3131322e37332e302e302f31362d3234203d3e20333938373034.roa (raw, json)
Hash identifier:          UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=
Subject key identifier:   36:BF:A9:C4:EA:0A:AA:38:31:2E:59:17:B1:85:56:1F:8A:94:E2:7B
Certificate issuer:       /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial:       19CAF33D7934A6FC9DD10CBDE1B98CAE83E444A1
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e20333938373034.roa
Signing time:             Tue 20 Jan 2026 02:22:43 +0000
ROA not before:           Tue 20 Jan 2026 02:17:43 +0000
ROA not after:            Tue 19 Jan 2027 02:22:43 +0000
asID:                     398704
IP address blocks:        112.73.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 15:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ca:f3:3d:79:34:a6:fc:9d:d1:0c:bd:e1:b9:8c:ae:83:e4:44:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Validity
            Not Before: Jan 20 02:17:43 2026 GMT
            Not After : Jan 19 02:22:43 2027 GMT
        Subject: CN=36BFA9C4EA0AAA38312E5917B185561F8A94E27B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:b2:6a:0d:8f:2e:e9:61:f3:86:f1:22:2b:
                    5e:9f:51:ba:ae:a1:31:b2:f0:be:91:8c:84:51:10:
                    3a:bb:28:bb:e5:2c:7e:68:f9:25:a7:94:b6:da:f7:
                    98:7c:a7:9c:8c:10:d7:35:0d:11:1f:a9:a6:64:cd:
                    66:13:82:1e:8b:69:fc:9a:3c:18:38:1f:8a:86:96:
                    d6:48:ad:09:4a:ee:0e:74:cd:3b:63:2d:fd:32:f1:
                    62:26:36:c1:1a:3d:21:a5:e1:3e:07:8a:55:13:22:
                    98:58:14:33:6f:44:63:a3:3f:03:5f:f1:9d:a0:1f:
                    1a:27:5f:a9:15:de:f8:fb:9d:fe:59:36:cb:53:a3:
                    93:4a:ec:8a:6c:78:84:2c:e2:05:f9:ea:12:4c:a6:
                    d5:c9:25:86:89:8e:d1:7e:7a:88:b7:c5:1c:c8:d4:
                    a6:81:de:de:30:f7:22:f8:38:8c:9a:6f:18:e9:cc:
                    28:8d:7c:62:df:ea:44:5a:0f:92:7d:02:5f:14:8a:
                    a9:b0:01:25:af:73:c8:4a:f0:7a:2e:c1:d2:f0:ed:
                    44:ff:6b:f2:5c:eb:8c:36:19:f5:a1:be:1b:1f:08:
                    3b:7d:1d:51:9b:08:0b:59:bd:a7:bc:76:cf:0e:19:
                    13:36:03:be:e8:90:b2:c3:ca:eb:28:18:1d:ef:d6:
                    61:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BF:A9:C4:EA:0A:AA:38:31:2E:59:17:B1:85:56:1F:8A:94:E2:7B
            X509v3 Authority Key Identifier:
                keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e20333938373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c4:c4:a2:4a:2c:da:d3:16:38:83:7e:68:49:27:15:a5:c8:d9:
         49:3a:b0:c5:22:a2:ac:b7:59:17:8d:42:3c:c1:9d:37:ac:b4:
         61:1b:6c:1c:1d:40:ab:b8:60:ad:63:e7:27:0c:f8:7e:d4:33:
         e7:04:76:e1:30:6f:fe:34:46:e1:ff:44:e1:79:a2:c4:fa:dd:
         8e:dc:3a:fd:76:bb:4e:51:32:a6:fb:9b:99:3c:70:d9:64:ef:
         04:63:a4:fc:4d:68:b0:87:1c:1d:00:04:79:c6:1b:d5:c7:8f:
         73:a0:bc:e0:f3:f1:52:bc:ef:33:24:f9:39:fc:f9:41:78:c9:
         b5:d3:61:a9:a5:a2:f2:c2:d3:3b:d2:cf:28:1f:42:ab:bb:27:
         d6:bb:ad:41:56:9e:5e:31:39:7a:74:6f:7f:bb:3c:b3:55:e9:
         94:ef:5e:63:86:cd:61:8f:d9:96:65:bd:d2:18:cf:9a:e5:ba:
         69:01:bc:2b:c0:d3:ec:f4:3d:e2:d9:69:7e:87:df:0d:b5:8f:
         b4:19:ea:15:e2:d6:4d:df:e6:0c:ea:80:30:e6:33:57:40:b3:
         3f:3d:48:7c:f3:fe:1c:52:b2:c1:c0:b0:b9:fb:45:be:54:e2:
         a2:bd:f8:1f:8c:eb:a4:2c:52:2f:ce:67:76:bd:29:fd:ad:a5:
         0e:7c:76:56
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUGcrzPXk0pvyd0Qy94bmMroPkRKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy
QjAzQjBCRDAeFw0yNjAxMjAwMjE3NDNaFw0yNzAxMTkwMjIyNDNaMDMxMTAvBgNV
BAMTKDM2QkZBOUM0RUEwQUFBMzgzMTJFNTkxN0IxODU1NjFGOEE5NEUyN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1LJqDY8u6WHzhvEiK16fUbqu
oTGy8L6RjIRREDq7KLvlLH5o+SWnlLba95h8p5yMENc1DREfqaZkzWYTgh6Lafya
PBg4H4qGltZIrQlK7g50zTtjLf0y8WImNsEaPSGl4T4HilUTIphYFDNvRGOjPwNf
8Z2gHxonX6kV3vj7nf5ZNstTo5NK7IpseIQs4gX56hJMptXJJYaJjtF+eoi3xRzI
1KaB3t4w9yL4OIyabxjpzCiNfGLf6kRaD5J9Al8UiqmwASWvc8hK8HouwdLw7UT/
a/Jc64w2GfWhvhsfCDt9HVGbCAtZvae8ds8OGRM2A77okLLDyusoGB3v1mFnAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUNr+pxOoKqjgxLlkXsYVWH4qU4nswHwYDVR0j
BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD
MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTg2MTc5LzAvMzEzMTMyMmUzNzMz
MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMzMzkzODM3MzAzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAHBJMA0GCSqGSIb3DQEBCwUAA4IBAQDExKJKLNrTFjiDfmhJJxWlyNlJOrDF
IqKst1kXjUI8wZ03rLRhG2wcHUCruGCtY+cnDPh+1DPnBHbhMG/+NEbh/0TheaLE
+t2O3Dr9drtOUTKm+5uZPHDZZO8EY6T8TWiwhxwdAAR5xhvVx49zoLzg8/FSvO8z
JPk5/PlBeMm102GppaLywtM70s8oH0KruyfWu61BVp5eMTl6dG9/uzyzVemU715j
hs1hj9mWZb3SGM+a5bppAbwrwNPs9D3i2Wl+h98NtY+0GeoV4tZN3+YM6oAw5jNX
QLM/PUh88/4cUrLBwLC5+0W+VOKivfgfjOukLFIvzmd2vSn9raUOfHZW
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:09:21 2026 by rpki-client