This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e3137322e302f32322d3234203d3e203535393333.roa
File:                     3130332e3131322e3137322e302f32322d3234203d3e203535393333.roa (raw, json)
Hash identifier:          QIUYRNkKSJ4DA+SdNG4DT+LaFUcBxT3TqLnQBPjwHGI=
Subject key identifier:   B1:B1:C1:C0:21:12:FF:D9:50:A7:EF:84:12:50:1C:E8:6E:56:53:89
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       706BC19EAF92416A12B1FADBA93BEABD8DCAF73D
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e3137322e302f32322d3234203d3e203535393333.roa
Signing time:             Tue 20 Jan 2026 02:09:32 +0000
ROA not before:           Tue 20 Jan 2026 02:04:32 +0000
ROA not after:            Tue 19 Jan 2027 02:09:32 +0000
asID:                     55933
IP address blocks:        103.112.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6b:c1:9e:af:92:41:6a:12:b1:fa:db:a9:3b:ea:bd:8d:ca:f7:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:32 2026 GMT
            Not After : Jan 19 02:09:32 2027 GMT
        Subject: CN=B1B1C1C02112FFD950A7EF8412501CE86E565389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e6:99:4b:1a:b3:0f:e9:b2:78:41:3a:2f:54:
                    d1:eb:c4:b7:98:b1:b7:c0:9d:4c:ba:bb:f0:07:fa:
                    0d:aa:c8:4e:6e:c0:93:cf:fd:bc:3a:9d:bd:ed:95:
                    79:9f:c8:cf:f7:83:e3:88:00:82:a0:4d:ee:f8:8e:
                    ba:5f:8e:e4:d6:a2:dd:82:b4:96:b1:e9:c6:9c:6c:
                    52:79:8e:dd:25:64:71:ff:04:00:e8:8f:bf:e8:dc:
                    db:03:83:fd:d1:99:2a:e5:57:e5:98:3e:e1:bd:63:
                    dd:48:32:c6:cc:f8:02:f9:8d:cd:fc:5b:f5:bd:8f:
                    a8:14:72:b7:45:18:0e:47:63:6a:72:6f:34:64:29:
                    bc:17:a4:7d:16:8c:7a:df:38:e6:58:f0:d7:ff:30:
                    1b:f1:4c:93:f6:34:54:aa:db:ed:60:b9:e8:c8:12:
                    23:7d:04:1d:7f:78:5c:f3:3f:fe:f8:16:d6:b1:67:
                    58:2e:96:d8:c6:2b:6d:1f:4e:69:d4:35:d1:35:60:
                    4c:75:bd:1a:34:5b:b9:5f:93:5b:ea:50:ce:5d:15:
                    e6:b5:f2:75:92:13:ae:6b:08:6d:d9:45:11:3b:0a:
                    21:1f:d0:6d:59:22:2e:8b:88:e1:fa:8c:e8:9d:70:
                    e8:fb:0a:5a:15:6c:9e:89:58:b2:30:54:0a:f6:fd:
                    74:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B1:C1:C0:21:12:FF:D9:50:A7:EF:84:12:50:1C:E8:6E:56:53:89
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e3137322e302f32322d3234203d3e203535393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:a9:d6:be:be:de:f0:e3:f4:85:b8:c1:63:f8:f9:ce:1c:bd:
         a2:03:ae:4c:80:87:2d:b7:04:84:a2:e6:94:d4:bf:c9:52:e9:
         be:4f:76:e1:01:62:c9:c0:c3:53:a0:2b:6a:0e:15:3e:3b:c4:
         cc:90:a2:1f:60:e9:de:ec:3d:e5:5e:35:b3:af:3d:06:30:43:
         4f:b0:1b:74:2d:5d:c3:fd:44:66:b0:28:8e:a0:31:01:44:66:
         2d:be:52:d6:b8:00:d5:c3:12:da:1d:86:06:2e:bc:ff:40:9f:
         d5:ea:83:de:99:41:fb:bb:36:dc:26:1b:57:f2:32:c6:fb:b7:
         6c:70:f8:27:a8:80:2c:ed:1e:4a:93:18:de:13:a6:8d:59:4d:
         b4:ad:cd:42:e0:36:2d:ef:68:68:15:66:e7:51:a2:7f:1c:68:
         aa:35:e8:d5:06:7c:37:7c:14:90:c7:ba:12:05:40:c4:83:ee:
         05:e3:35:46:42:62:71:c7:d2:03:61:bd:1b:34:69:0c:67:4b:
         2a:be:89:c3:b5:06:31:1e:6b:28:0e:39:cd:13:16:9d:d4:50:
         da:0c:c5:d1:ad:23:7e:5e:79:ec:50:90:5d:6b:0f:21:a9:63:
         4d:38:b4:c3:03:15:c0:fb:7f:05:53:37:b4:71:8b:d4:fc:54:
         e7:3d:d7:8c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUcGvBnq+SQWoSsfrbqTvqvY3K9z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzJaFw0yNzAxMTkwMjA5MzJaMDMxMTAvBgNV
BAMTKEIxQjFDMUMwMjExMkZGRDk1MEE3RUY4NDEyNTAxQ0U4NkU1NjUzODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR5plLGrMP6bJ4QTovVNHrxLeY
sbfAnUy6u/AH+g2qyE5uwJPP/bw6nb3tlXmfyM/3g+OIAIKgTe74jrpfjuTWot2C
tJax6cacbFJ5jt0lZHH/BADoj7/o3NsDg/3RmSrlV+WYPuG9Y91IMsbM+AL5jc38
W/W9j6gUcrdFGA5HY2pybzRkKbwXpH0WjHrfOOZY8Nf/MBvxTJP2NFSq2+1guejI
EiN9BB1/eFzzP/74FtaxZ1gultjGK20fTmnUNdE1YEx1vRo0W7lfk1vqUM5dFea1
8nWSE65rCG3ZRRE7CiEf0G1ZIi6LiOH6jOidcOj7CloVbJ6JWLIwVAr2/XSDAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUsbHBwCES/9lQp++EElAc6G5WU4kwHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMC8zMTMwMzMyZTMx
MzEzMjJlMzEzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNTM5MzMzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdwrDANBgkqhkiG9w0BAQsFAAOCAQEAa6nWvr7e8OP0hbjBY/j5
zhy9ogOuTICHLbcEhKLmlNS/yVLpvk924QFiycDDU6Arag4VPjvEzJCiH2Dp3uw9
5V41s689BjBDT7AbdC1dw/1EZrAojqAxAURmLb5S1rgA1cMS2h2GBi68/0Cf1eqD
3plB+7s23CYbV/Iyxvu3bHD4J6iALO0eSpMY3hOmjVlNtK3NQuA2Le9oaBVm51Gi
fxxoqjXo1QZ8N3wUkMe6EgVAxIPuBeM1RkJiccfSA2G9GzRpDGdLKr6Jw7UGMR5r
KA45zRMWndRQ2gzF0a0jfl557FCQXWsPIaljTTi0wwMVwPt/BVM3tHGL1PxU5z3X
jA==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:57 2026 by rpki-client