This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e2039333138.roa
File:                     3131322e37332e302e302f31362d3234203d3e2039333138.roa (raw, json)
Hash identifier:          ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=
Subject key identifier:   89:6C:CC:7B:D6:49:48:78:E4:9B:17:37:84:2A:A4:FD:07:C0:A3:E3
Certificate issuer:       /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial:       786650A09B63681558402692C61C77E8CDC37840
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e2039333138.roa
Signing time:             Tue 20 Jan 2026 02:22:43 +0000
ROA not before:           Tue 20 Jan 2026 02:17:43 +0000
ROA not after:            Tue 19 Jan 2027 02:22:43 +0000
asID:                     9318
IP address blocks:        112.73.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 15:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:66:50:a0:9b:63:68:15:58:40:26:92:c6:1c:77:e8:cd:c3:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Validity
            Not Before: Jan 20 02:17:43 2026 GMT
            Not After : Jan 19 02:22:43 2027 GMT
        Subject: CN=896CCC7BD6494878E49B1737842AA4FD07C0A3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:df:c2:e1:6c:2f:eb:74:ca:22:bc:96:cd:3b:
                    dd:d4:0c:16:ba:bc:38:f2:1b:80:6f:b4:5e:0f:ad:
                    3d:3d:53:9e:28:30:1a:1f:b3:82:2f:7b:ad:97:68:
                    de:58:a4:c8:c8:e0:4d:2d:d0:0e:a1:bc:1d:43:c4:
                    a5:8b:ad:d9:dc:76:99:49:e8:1b:24:cc:02:50:5b:
                    a9:f2:77:cf:3f:ef:9e:be:07:5a:ec:34:e8:2b:f5:
                    9d:0b:40:63:8f:43:9c:e6:a6:30:9a:6b:c3:22:72:
                    03:10:fd:d1:90:a6:2c:83:9f:c2:14:54:88:86:4d:
                    b2:c3:79:64:75:28:71:fc:44:e2:36:9c:6d:c1:15:
                    d3:08:62:b8:e3:52:02:ca:73:a8:f6:5a:8d:27:ee:
                    be:34:14:d6:f0:62:96:36:b4:ff:1b:e8:63:16:4e:
                    84:03:50:f8:e2:74:0a:75:2d:d6:f9:ed:3c:08:64:
                    05:88:de:c1:6b:f4:3b:c5:05:be:a8:38:f1:93:5e:
                    54:24:88:64:a1:be:24:a1:1a:cf:8a:21:b1:6e:f4:
                    c9:65:9e:b4:ec:22:71:34:93:29:b6:15:6f:f3:45:
                    b6:ae:df:25:3e:24:b7:82:0a:28:94:07:cd:1c:6f:
                    cd:fc:87:95:24:ae:02:27:ea:69:e4:90:d2:7d:7c:
                    16:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6C:CC:7B:D6:49:48:78:E4:9B:17:37:84:2A:A4:FD:07:C0:A3:E3
            X509v3 Authority Key Identifier:
                keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e2039333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:e4:24:bb:12:ea:86:f5:62:e0:dd:c8:fb:8d:eb:f5:2b:f6:
         86:af:07:cb:38:27:2a:b9:7f:24:41:f1:41:f8:35:ad:6e:81:
         df:3c:fa:18:28:c0:b8:8d:85:e1:01:87:1b:15:14:e7:b6:69:
         ac:2b:09:8c:5a:b1:95:db:49:7b:20:5b:68:c9:1a:08:12:cf:
         40:ac:57:8d:3f:93:87:a6:d7:03:3e:23:f8:59:25:a0:51:1f:
         1e:9d:0b:c6:23:a3:b5:8c:2c:a3:f6:50:12:85:a5:83:a4:2a:
         b8:f3:b2:7e:13:ed:82:be:cb:b1:87:35:04:3f:23:b6:41:35:
         68:92:40:6a:54:5b:13:a0:ee:7c:e6:36:36:a4:3d:fa:2b:b0:
         13:55:c2:9b:de:8f:c3:1f:b5:74:96:d4:b6:d7:25:5e:7f:3a:
         21:44:9d:5b:7e:e5:83:76:86:cb:41:c8:68:35:77:30:f5:aa:
         a3:d8:d5:2b:f7:37:76:ee:11:ed:23:73:81:99:eb:f7:cb:b2:
         b4:2c:9b:a9:f7:49:8d:53:12:a0:5b:9e:13:4b:27:c6:3b:c2:
         d8:18:1b:95:c2:39:f9:73:bf:69:ea:a3:64:12:70:2b:00:e2:
         d0:d7:9e:e9:e3:62:5e:55:a7:d7:b0:aa:b0:69:c3:7a:c1:d1:
         a5:59:9e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:09:21 2026 by rpki-client