This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e2039343537.roa
File:                     3131322e37332e302e302f31362d3234203d3e2039343537.roa (raw, json)
Hash identifier:          CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=
Subject key identifier:   38:F7:F1:67:3B:E5:F3:25:D3:87:E4:F8:65:7E:F0:02:5F:5F:43:69
Certificate issuer:       /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial:       5B68C397D3B75701B00D0D06E3A3C01014C18963
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e2039343537.roa
Signing time:             Tue 20 Jan 2026 02:22:43 +0000
ROA not before:           Tue 20 Jan 2026 02:17:43 +0000
ROA not after:            Tue 19 Jan 2027 02:22:43 +0000
asID:                     9457
IP address blocks:        112.73.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 15:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:68:c3:97:d3:b7:57:01:b0:0d:0d:06:e3:a3:c0:10:14:c1:89:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Validity
            Not Before: Jan 20 02:17:43 2026 GMT
            Not After : Jan 19 02:22:43 2027 GMT
        Subject: CN=38F7F1673BE5F325D387E4F8657EF0025F5F4369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:89:44:95:ee:1d:08:f7:3f:ad:d3:2e:b1:
                    56:ef:cc:43:b4:f5:f1:80:62:40:8f:76:18:0f:c0:
                    54:ad:29:2f:f9:ec:f8:8a:b4:16:fa:a7:4a:6b:6f:
                    33:f7:9f:f5:66:a2:bc:07:18:75:e2:4f:f3:e3:4c:
                    2c:60:54:ab:e8:b3:ee:4f:60:8b:35:ca:c0:11:5f:
                    ef:4c:06:4e:89:bb:d5:96:ff:21:c3:ac:9f:99:a9:
                    3a:c1:ce:17:d2:a9:2e:5d:82:77:e0:80:a3:c6:7c:
                    b8:85:e1:a1:32:7e:e6:83:7d:2d:15:ea:c9:29:1d:
                    f5:75:64:fb:7c:60:70:ac:5b:f6:6f:3c:ea:33:8a:
                    9f:45:b2:a5:da:79:5a:ca:fc:fe:46:d0:af:46:3b:
                    2c:cc:c7:db:f8:0d:bb:6f:80:a5:19:53:1c:0e:e4:
                    65:1e:10:a0:78:99:f2:30:50:8b:3d:9e:cc:44:ef:
                    1e:f5:42:ed:70:cf:af:3d:ba:74:ff:d8:71:89:0d:
                    5a:41:f7:c5:b0:b4:68:ba:42:2b:5a:69:be:2c:8d:
                    da:83:ce:d2:99:c0:7b:04:12:3d:4e:a3:91:df:7d:
                    90:8d:e7:31:9d:2b:a0:2d:d1:7d:9d:0e:f3:f3:d0:
                    10:58:0c:32:47:ae:9d:16:5b:d0:7d:66:2a:a1:4b:
                    ef:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F7:F1:67:3B:E5:F3:25:D3:87:E4:F8:65:7E:F0:02:5F:5F:43:69
            X509v3 Authority Key Identifier:
                keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e2039343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d2:7e:51:97:c0:f8:a9:15:9c:bf:2c:d0:0a:75:86:53:71:c4:
         ea:70:61:e7:96:46:ac:5c:6f:69:21:50:b9:ca:2a:9f:7a:5e:
         6d:bc:1b:39:7f:05:fc:fb:f9:ca:52:59:17:2e:a7:a9:dd:27:
         04:44:00:83:8c:57:0d:12:18:c7:da:3c:01:4d:86:ae:20:b7:
         81:45:86:5a:5c:1e:9e:b6:a1:91:72:1b:71:80:84:8b:5c:f5:
         ca:d2:9a:9b:90:88:21:e4:a0:31:4b:80:36:4b:73:3a:ad:24:
         b7:44:a1:12:64:c9:03:6c:d1:86:fb:2e:f5:10:de:1e:f4:f5:
         84:d2:f4:de:b7:57:c8:48:dc:1b:04:09:cc:34:24:26:1b:ca:
         12:65:89:f8:60:c2:76:76:67:a6:15:b2:63:26:b7:87:a5:b2:
         da:65:a5:0b:f9:21:bb:79:63:d0:15:15:10:1b:0a:da:83:00:
         e8:46:08:62:6c:37:20:51:3e:54:23:bb:7a:0d:e4:3f:45:b4:
         a4:75:b2:11:0c:29:5b:be:6c:aa:64:95:d6:7d:01:6b:0b:8b:
         cf:2b:a4:90:ec:bd:96:3c:07:ce:69:e3:4a:59:57:b9:df:84:
         d5:9e:d5:59:3c:5c:3d:ef:72:17:b1:6c:20:83:77:48:6e:9d:
         26:c3:c0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:09:22 2026 by rpki-client