This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139076.roa
File:                     AS139076.roa (raw, json)
Hash identifier:          4hb5Gao9BASgg0FHiSjmmXy58KRA0R7rDGX4EJ/JsLI=
Subject key identifier:   99:A9:BC:BE:1B:0B:30:03:09:F3:17:47:E8:DA:72:EF:49:E8:F6:91
Certificate issuer:       /CN=1FFF263C64163BC58514B539C10375CCB553D75E
Certificate serial:       77C3E27EC8F6F56FF8111F8B7950B847AAAC256C
Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139076.roa
Signing time:             Tue 20 Jan 2026 02:15:27 +0000
ROA not before:           Tue 20 Jan 2026 02:10:27 +0000
ROA not after:            Tue 19 Jan 2027 02:15:27 +0000
asID:                     139076
IP address blocks:        103.221.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 20:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c3:e2:7e:c8:f6:f5:6f:f8:11:1f:8b:79:50:b8:47:aa:ac:25:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E
        Validity
            Not Before: Jan 20 02:10:27 2026 GMT
            Not After : Jan 19 02:15:27 2027 GMT
        Subject: CN=99A9BCBE1B0B300309F31747E8DA72EF49E8F691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:56:74:d9:5b:4f:dc:15:36:29:cd:9c:a4:8f:
                    e8:37:39:42:06:6b:ea:b2:37:c0:52:d5:db:be:1a:
                    da:11:00:23:c9:68:66:b1:df:87:20:48:2b:c2:5f:
                    23:6e:0b:31:cc:93:34:6c:62:d5:27:1f:50:0c:19:
                    5c:f2:49:c8:73:5c:38:1c:6d:21:76:93:be:68:00:
                    c8:ed:b2:ab:a3:11:79:df:f7:21:8a:fd:f6:5e:1b:
                    ff:7c:da:bc:5b:3b:d1:53:ce:7e:0c:01:54:5c:f2:
                    10:d2:e5:1c:5c:9d:e9:c2:be:ab:1d:dd:a5:e6:fa:
                    54:4e:16:e2:cc:80:b4:e9:16:0b:f3:e8:a7:bc:7f:
                    55:8b:0e:35:05:08:87:20:d9:3f:88:7b:d3:fa:8a:
                    4c:12:29:7b:54:f8:2b:12:bc:10:22:8b:77:35:31:
                    a5:e6:2c:a6:72:20:a2:e2:52:82:61:5c:5c:01:a7:
                    3a:1f:cd:b3:e9:75:c5:8d:f1:d2:e6:6d:57:65:70:
                    f0:43:e3:e8:27:a0:20:1d:41:86:74:7e:65:1b:61:
                    d8:f5:38:a6:5f:fb:06:64:be:b2:f7:2a:bf:66:bd:
                    20:11:3b:b5:47:54:df:a9:56:91:24:3a:89:af:80:
                    3f:1f:78:d5:13:28:05:25:24:87:da:29:9c:1b:f1:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A9:BC:BE:1B:0B:30:03:09:F3:17:47:E8:DA:72:EF:49:E8:F6:91
            X509v3 Authority Key Identifier:
                keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS139076.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.221.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b3:a9:aa:87:8a:8c:3c:e2:3f:db:74:aa:bd:d3:47:35:ab:
         7e:f2:d5:b2:2f:14:e0:90:c4:1e:13:5e:f6:0f:3a:32:88:63:
         ac:a3:59:1d:c0:e1:cd:01:9a:04:8a:cc:00:8e:96:e4:62:81:
         be:4b:34:d8:34:a2:a0:48:38:dd:f4:56:ee:8b:5b:52:00:c5:
         d2:89:fd:22:6e:9b:c0:bc:e3:93:5d:12:16:f6:d3:65:4d:c3:
         0f:e6:32:bc:12:10:87:e4:ab:c6:c5:76:3f:2c:b7:59:fb:ea:
         9c:9f:fb:7f:97:94:b6:49:66:bb:b8:f1:e7:83:85:9c:52:e3:
         8c:2b:52:0d:97:22:88:41:32:f4:92:ab:6e:5d:96:a3:2a:10:
         95:93:84:0d:a8:82:ac:63:f5:25:65:9d:5f:f5:7b:8f:d8:5f:
         98:59:cc:7a:8b:87:21:5e:ae:24:95:05:90:28:16:b6:c3:c8:
         86:a6:b1:56:0b:af:e3:86:ca:7e:b2:7c:ac:eb:d5:32:c6:c5:
         c5:9a:49:ab:2b:d0:7f:41:e7:69:17:fe:29:17:3b:a9:43:68:
         01:1b:af:04:bb:56:98:2d:23:c9:7d:70:90:fc:ba:8b:5a:65:
         69:15:50:9e:0f:50:26:b5:0a:5c:ea:0d:89:0f:4c:e7:4b:44:
         2f:2e:e3:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 12:29:09 2026 by rpki-client