This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131382e302f32342d3234203d3e20313339363438.roa
File:                     3130332e3234342e3131382e302f32342d3234203d3e20313339363438.roa (raw, json)
Hash identifier:          cMto+/deLkvx5grjE+PxN8iUdPur4mxiek2iVW6VnUE=
Subject key identifier:   46:D9:89:D8:A4:AC:5F:B5:64:A8:4A:26:BB:EB:52:19:50:FC:6B:69
Certificate issuer:       /CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8
Certificate serial:       049791BC675E677A1BBA9DDC3C1529C882BBF1C8
Authority key identifier: 9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131382e302f32342d3234203d3e20313339363438.roa
Signing time:             Tue 20 Jan 2026 02:08:20 +0000
ROA not before:           Tue 20 Jan 2026 02:03:20 +0000
ROA not after:            Tue 19 Jan 2027 02:08:20 +0000
asID:                     139648
IP address blocks:        103.244.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 13:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:97:91:bc:67:5e:67:7a:1b:ba:9d:dc:3c:15:29:c8:82:bb:f1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7BEB810233369A47D42D81A7F5084338DBC5C8
        Validity
            Not Before: Jan 20 02:03:20 2026 GMT
            Not After : Jan 19 02:08:20 2027 GMT
        Subject: CN=46D989D8A4AC5FB564A84A26BBEB521950FC6B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2f:24:8d:8d:b4:83:14:cf:54:66:c0:34:22:
                    08:db:96:bb:06:6c:3f:d7:21:dc:4d:be:1e:5b:87:
                    33:2e:8b:9c:70:c2:52:6c:c6:b6:12:10:59:2a:53:
                    81:d8:c4:1f:91:ee:cb:ee:e3:90:06:a2:17:21:37:
                    3b:43:2c:86:0f:70:0c:39:30:bf:55:3f:b6:b0:70:
                    d4:7e:ed:7b:37:54:e0:55:a6:56:b8:f1:60:b8:a8:
                    6d:6f:34:5a:5e:3e:0a:0a:ee:5b:53:8f:45:a7:0b:
                    b3:e6:0f:12:ed:96:27:31:a4:dc:5b:e6:fd:d2:9c:
                    f2:12:12:25:40:e5:06:c9:e2:61:07:3b:29:c3:e0:
                    70:12:79:e6:73:7b:82:31:30:0f:80:33:ce:69:9f:
                    24:d6:26:65:a8:6a:2c:d9:96:df:fe:9c:f7:da:92:
                    9b:66:9f:e6:fa:75:06:a2:05:7a:8d:ba:6c:3a:e2:
                    89:4a:35:a0:39:c2:5f:bc:43:ef:f6:13:54:1f:96:
                    cf:c7:9b:80:20:df:e1:b5:30:ea:96:b1:7b:a5:eb:
                    9d:96:54:c9:40:3d:a7:14:3c:31:c9:58:bf:c1:15:
                    df:65:ea:8d:49:9c:ce:8c:ef:29:1c:64:c6:c2:ee:
                    e3:f6:64:ac:a8:f5:be:e9:05:dd:84:2f:48:75:08:
                    3c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D9:89:D8:A4:AC:5F:B5:64:A8:4A:26:BB:EB:52:19:50:FC:6B:69
            X509v3 Authority Key Identifier:
                keyid:9E:7B:EB:81:02:33:36:9A:47:D4:2D:81:A7:F5:08:43:38:DB:C5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/9E7BEB810233369A47D42D81A7F5084338DBC5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E7BEB810233369A47D42D81A7F5084338DBC5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121821698/0/3130332e3234342e3131382e302f32342d3234203d3e20313339363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:16:31:54:82:40:4c:1f:a6:c6:06:21:6b:8c:ef:c7:e4:30:
         d7:94:72:62:be:6e:7d:9a:59:e5:d7:b6:e2:be:c2:6d:f4:db:
         f2:b7:70:34:d0:b4:c0:90:5d:54:36:77:7d:35:5b:0a:88:9a:
         79:03:0b:6e:d1:99:27:ba:ce:00:9c:e0:2d:5f:51:a5:81:3f:
         0b:b0:03:f5:82:98:ea:fc:34:1b:f6:4d:88:dd:e2:47:0b:5f:
         eb:d4:21:7f:a2:77:7b:40:11:a9:30:3a:f8:86:d0:cc:1d:84:
         bb:ed:a9:a7:e7:dc:8c:c3:64:98:e1:3d:20:be:aa:95:4d:b9:
         c4:7a:80:1a:e9:34:6f:99:4b:8a:19:34:6f:4a:e6:d6:15:19:
         84:c2:e3:e3:6c:90:86:fb:64:97:3b:69:d3:0b:1a:8b:29:93:
         15:c8:12:24:12:ce:a5:84:83:4c:61:eb:09:b7:5d:bc:4d:eb:
         0d:7e:b0:9a:90:30:77:26:a5:fc:2f:b4:56:fb:ff:23:aa:54:
         62:76:d6:fd:fb:9d:80:b2:55:4c:6f:79:96:8b:45:b8:f8:6c:
         47:ff:aa:b4:b8:07:42:71:8f:2c:20:be:78:10:e6:25:4a:44:
         ac:2e:09:30:a1:48:b0:a3:1e:90:e3:13:22:32:d8:56:58:b1:
         1d:dc:55:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 23:35:11 2026 by rpki-client