This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS9808.roa
File:                     AS9808.roa (raw, json)
Hash identifier:          E/6QOHAzgXf03QFXs8qc4cA7hdE0GEiziY0xLK1ClFM=
Subject key identifier:   82:B8:04:1C:A0:C6:A1:93:0D:F5:33:C9:21:CD:71:E5:D1:81:B4:DC
Certificate issuer:       /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial:       3E637279B496338D9F288BA816E36CE3279F33D3
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS9808.roa
Signing time:             Tue 20 Jan 2026 02:18:01 +0000
ROA not before:           Tue 20 Jan 2026 02:13:01 +0000
ROA not after:            Tue 19 Jan 2027 02:18:01 +0000
asID:                     9808
IP address blocks:        240a:4021:883a::/48 maxlen: 48
                          240a:40b0:683a::/48 maxlen: 48
                          240a:40c1::/44 maxlen: 48
                          240a:40c1:10::/44 maxlen: 48
                          240a:40c1:e000::/44 maxlen: 48
                          240a:40c1:e010::/44 maxlen: 48
                          240a:40c2::/44 maxlen: 48
                          240a:40c2:10::/44 maxlen: 48
                          240a:40c2:2000::/44 maxlen: 48
                          240a:40c2:2010::/44 maxlen: 48
                          240a:40c2:8000::/44 maxlen: 48
                          240a:40c2:8010::/44 maxlen: 48
                          240a:40c2:e000::/44 maxlen: 48
                          240a:40c2:e010::/44 maxlen: 48
                          240a:40c3::/44 maxlen: 48
                          240a:40c3:10::/44 maxlen: 48
                          240a:40c3:2000::/44 maxlen: 48
                          240a:40c3:2010::/44 maxlen: 48
                          240a:40c3:4000::/44 maxlen: 48
                          240a:40c3:4010::/44 maxlen: 48
                          240a:40c3:6000::/44 maxlen: 48
                          240a:40c3:6010::/44 maxlen: 48
                          240a:40c3:8000::/44 maxlen: 48
                          240a:40c3:8010::/44 maxlen: 48
                          240a:40c3:a000::/44 maxlen: 48
                          240a:40c3:a010::/44 maxlen: 48
                          240a:40c3:c000::/44 maxlen: 48
                          240a:40c3:c010::/44 maxlen: 48
                          240a:40c3:e000::/44 maxlen: 48
                          240a:40c3:e010::/44 maxlen: 48
                          240a:40c4::/44 maxlen: 48
                          240a:40c4:10::/44 maxlen: 48
                          240a:40c4:2000::/44 maxlen: 48
                          240a:40c4:2010::/44 maxlen: 48
                          240a:40c4:4010::/44 maxlen: 48
                          240a:428e::/31 maxlen: 31
                          240a:4292::/31 maxlen: 31
                          240a:42ac::/31 maxlen: 31
                          240a:42ae::/31 maxlen: 31
                          240a:42b0::/31 maxlen: 31
                          240a:42b2::/31 maxlen: 31
                          240a:42b4::/31 maxlen: 31
                          240a:42b6::/31 maxlen: 31
                          240a:42c0::/31 maxlen: 31
                          240a:42c4::/31 maxlen: 31
                          240a:42ca::/31 maxlen: 31
                          240a:42ce::/31 maxlen: 31
                          240a:42d0::/31 maxlen: 31
                          240a:42d2::/31 maxlen: 31
                          240a:42d4::/31 maxlen: 31
                          240a:42d6::/31 maxlen: 31
                          240a:42d8::/31 maxlen: 31
                          240a:42da::/31 maxlen: 31
                          240a:42dc::/31 maxlen: 31
                          240a:42de::/31 maxlen: 31
                          240a:42e0::/31 maxlen: 31
                          240a:42e2::/31 maxlen: 31
                          240a:42e4::/31 maxlen: 31
                          240a:42e6::/31 maxlen: 31
                          240a:42e8::/31 maxlen: 31
                          240a:42ea::/31 maxlen: 31
                          240a:42ec::/31 maxlen: 31
                          240a:42ee::/31 maxlen: 31
                          240a:42f0::/31 maxlen: 31
                          240a:42f2::/31 maxlen: 31
                          240a:42f4::/31 maxlen: 31
                          240a:42f6::/31 maxlen: 31
                          240a:42f8::/31 maxlen: 31
                          240a:42fa::/31 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 11:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:63:72:79:b4:96:33:8d:9f:28:8b:a8:16:e3:6c:e3:27:9f:33:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
        Validity
            Not Before: Jan 20 02:13:01 2026 GMT
            Not After : Jan 19 02:18:01 2027 GMT
        Subject: CN=82B8041CA0C6A1930DF533C921CD71E5D181B4DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ae:ab:4b:a2:48:7b:b2:be:2a:f8:8f:5a:41:
                    ef:e8:c6:33:18:c7:a3:e3:15:ab:ea:76:88:96:98:
                    e7:1a:ca:1d:fc:53:04:89:7a:ad:1f:6e:86:38:d3:
                    0e:7a:e3:10:db:90:4d:10:26:fe:ee:37:4b:22:d0:
                    90:c9:79:ab:eb:47:b7:23:14:ac:f6:75:cb:26:d2:
                    4a:eb:2e:d9:64:cc:f2:88:bd:d6:1e:d7:fe:5f:dc:
                    89:e1:8d:04:fb:a7:a0:83:fd:12:ea:9f:13:3a:9a:
                    90:16:29:59:ad:55:05:cc:e4:a6:7b:22:5b:9a:e2:
                    47:a7:1e:e1:a4:78:52:fe:37:63:1c:a1:b6:ba:de:
                    e6:7f:3c:07:03:5e:c5:d0:a9:57:3d:a9:ba:48:f6:
                    ba:ac:92:bf:75:30:f7:51:56:59:a8:7b:ef:ff:3e:
                    de:62:8b:4b:10:56:59:da:3b:c4:f1:76:2a:fb:53:
                    37:2b:92:c9:bb:ee:f6:47:a8:65:cd:59:c3:c5:10:
                    f1:0a:3f:90:8a:ef:06:52:e1:86:0c:d3:ca:b9:a4:
                    24:ac:ec:17:d8:96:d8:3b:6b:37:59:02:1f:60:66:
                    45:2a:60:ab:11:83:f0:dd:af:c4:fa:a7:5c:46:2a:
                    d3:28:f4:62:7c:b4:b1:31:7f:ae:2f:27:cf:d4:3d:
                    2d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B8:04:1C:A0:C6:A1:93:0D:F5:33:C9:21:CD:71:E5:D1:81:B4:DC
            X509v3 Authority Key Identifier:
                keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS9808.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:4021:883a::/48
                  240a:40b0:683a::/48
                  240a:40c1::/43
                  240a:40c1:e000::/43
                  240a:40c2::/43
                  240a:40c2:2000::/43
                  240a:40c2:8000::/43
                  240a:40c2:e000::/43
                  240a:40c3::/43
                  240a:40c3:2000::/43
                  240a:40c3:4000::/43
                  240a:40c3:6000::/43
                  240a:40c3:8000::/43
                  240a:40c3:a000::/43
                  240a:40c3:c000::/43
                  240a:40c3:e000::/43
                  240a:40c4::/43
                  240a:40c4:2000::/43
                  240a:40c4:4010::/44
                  240a:428e::/31
                  240a:4292::/31
                  240a:42ac::-240a:42b7:ffff:ffff:ffff:ffff:ffff:ffff
                  240a:42c0::/31
                  240a:42c4::/31
                  240a:42ca::/31
                  240a:42ce::-240a:42fb:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         b3:ef:23:3e:72:4a:e0:e4:b4:63:22:2c:0b:30:a6:40:49:f7:
         1d:88:75:a6:06:ae:b5:4a:18:ce:26:2f:e4:a7:92:ab:8d:11:
         85:f0:f1:65:b9:58:c1:48:de:fe:4a:91:df:56:04:89:6c:47:
         b9:e9:3e:fe:c0:eb:70:3e:70:25:f5:11:5b:dc:22:26:57:cc:
         b4:21:25:66:0d:42:c1:99:50:37:6e:f2:a2:ae:c6:fe:4f:26:
         61:7d:be:dc:57:db:82:60:51:69:a9:f8:20:c0:f2:d5:b3:28:
         41:31:7d:ec:c0:68:8f:e5:c4:0c:ff:b4:fb:34:bc:cf:b9:35:
         eb:0a:09:3e:60:fc:59:bc:9c:8f:fd:02:b3:0b:5e:a8:ef:a5:
         c4:71:27:f9:96:30:de:25:19:ea:4c:40:24:7b:10:a6:f3:13:
         12:2e:ad:63:cd:0c:32:49:85:11:bb:2f:d9:7a:7d:a2:bd:4b:
         fc:9c:20:74:79:a5:b0:be:c8:7b:23:ec:91:09:27:32:51:dd:
         b1:d6:27:64:fb:58:b3:62:37:dd:4b:8a:87:37:21:a7:6f:36:
         68:13:83:98:0e:c2:cd:66:dc:9c:26:f9:f7:e5:0d:35:1a:52:
         f0:29:aa:0f:1a:af:3c:cf:04:55:9d:d7:a0:60:2e:1f:fa:72:
         50:98:a6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:05:34 2026 by rpki-client