This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548091394/0/3130332e3233362e3233322e302f32322d3234203d3e2034313334.roa
File:                     3130332e3233362e3233322e302f32322d3234203d3e2034313334.roa (raw, json)
Hash identifier:          gu2EYGcdi/eQd7pJasfH3CESIvXg92L2V+eXo3f+lmE=
Subject key identifier:   75:93:04:79:17:81:9C:EF:08:0E:F4:27:25:A1:33:9E:5F:2C:89:CA
Certificate issuer:       /CN=76A37FE81BADF4B4BF90B4C81A85E56ACB366710
Certificate serial:       446249C2FC4347BE0024C5742D85FEAAC4E3FC8E
Authority key identifier: 76:A3:7F:E8:1B:AD:F4:B4:BF:90:B4:C8:1A:85:E5:6A:CB:36:67:10
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/3130332e3233362e3233322e302f32322d3234203d3e2034313334.roa
Signing time:             Tue 20 Jan 2026 02:13:05 +0000
ROA not before:           Tue 20 Jan 2026 02:08:05 +0000
ROA not after:            Tue 19 Jan 2027 02:13:05 +0000
asID:                     4134
IP address blocks:        103.236.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:62:49:c2:fc:43:47:be:00:24:c5:74:2d:85:fe:aa:c4:e3:fc:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76A37FE81BADF4B4BF90B4C81A85E56ACB366710
        Validity
            Not Before: Jan 20 02:08:05 2026 GMT
            Not After : Jan 19 02:13:05 2027 GMT
        Subject: CN=7593047917819CEF080EF42725A1339E5F2C89CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:1d:da:1c:9a:ad:a1:d7:c9:7d:bd:6e:34:
                    a1:3a:c0:db:b7:7d:39:69:3f:a8:89:9c:6b:10:bc:
                    a9:b0:77:ef:d4:eb:22:9e:19:94:8a:5d:06:02:c2:
                    2f:db:a9:7e:16:ac:c5:4d:43:c4:aa:62:d2:f4:7e:
                    c1:d7:23:dc:a9:74:91:2f:f6:8e:a9:d3:a5:12:40:
                    d1:8d:1c:63:63:ba:b6:64:a7:f4:48:be:79:d3:e0:
                    85:dd:5b:bc:3e:0c:62:6b:70:17:c3:af:45:a9:9c:
                    d4:15:65:27:3d:a1:39:72:4a:f2:2b:7d:95:d1:e4:
                    54:b3:ea:0f:01:9e:78:d4:0b:2d:f7:65:f5:e5:d1:
                    3e:ea:f2:e3:4c:4b:5e:6f:11:d9:1b:17:bd:de:0e:
                    37:25:6c:35:6b:cd:43:4d:55:4e:e6:77:c5:ed:b0:
                    93:6d:8a:01:21:8b:93:d6:82:82:49:26:5b:ec:eb:
                    91:00:d0:e6:a7:bf:50:16:de:a7:20:7e:ee:20:15:
                    ce:51:a9:6c:20:e8:e4:6f:ac:6d:8f:b1:e9:dd:17:
                    34:42:5f:69:df:92:54:26:39:a9:88:0e:0a:18:98:
                    18:89:2c:31:c2:da:34:56:b6:7e:37:6d:e7:34:7d:
                    6b:95:74:f8:6e:c5:ef:a3:84:83:38:6e:2e:dc:53:
                    08:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:93:04:79:17:81:9C:EF:08:0E:F4:27:25:A1:33:9E:5F:2C:89:CA
            X509v3 Authority Key Identifier:
                keyid:76:A3:7F:E8:1B:AD:F4:B4:BF:90:B4:C8:1A:85:E5:6A:CB:36:67:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/3130332e3233362e3233322e302f32322d3234203d3e2034313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:cf:4d:a7:3c:6f:ae:2e:5d:38:82:90:6a:9d:e9:c7:d2:e3:
         05:33:4c:77:4a:75:d1:4f:31:da:c3:f4:47:78:70:9c:10:7d:
         ff:2f:a6:11:4c:0c:e2:32:ad:42:2c:6a:1c:b3:e9:e6:a4:d5:
         a3:c4:da:73:e3:3c:be:98:91:cf:9f:ba:14:0e:da:53:f3:3d:
         3d:5f:38:a0:d8:07:29:da:21:f8:d4:ec:ef:42:ea:72:b9:17:
         10:99:1b:8d:fa:78:17:eb:a4:70:5d:73:b6:30:b1:3f:2a:33:
         91:0f:59:ef:e9:8a:37:6f:f8:91:2c:cf:50:28:3f:37:c1:02:
         df:43:35:13:2a:18:ab:cd:3f:12:d1:d1:63:66:9b:dc:43:21:
         79:e1:d9:10:e3:60:c0:04:f0:09:34:04:e3:0c:6c:03:e4:fa:
         ae:63:54:4b:f1:a7:23:f0:8b:0b:11:68:0f:9a:63:be:4f:5e:
         8d:49:a3:3b:d7:60:7e:61:8f:86:75:27:04:76:c2:29:50:96:
         c8:b6:a9:02:2e:45:37:f1:ee:ec:6c:9f:ef:90:e6:2d:27:81:
         ef:ae:5e:80:64:70:56:8e:04:e9:84:2a:f4:62:da:49:2c:65:
         ff:50:ce:f3:19:41:5a:2e:19:08:f6:6f:98:40:bc:c1:9e:a4:
         bb:f9:73:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:11:27 2026 by rpki-client