This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e3138342e302f32322d3234203d3e20313338393638.roa
File:                     3130332e3131322e3138342e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier:          DkUG+TxJ+foXOReH+jA+/E3JGRAUVPNFdFyG6LrpkK4=
Subject key identifier:   E8:97:75:B7:AF:DE:A6:6B:30:FA:32:3D:91:57:A5:DF:D7:F0:F2:01
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       4FBABDB1CDC84C7AEC089ED0730EE2C8EBB57F7E
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e3138342e302f32322d3234203d3e20313338393638.roa
Signing time:             Tue 20 Jan 2026 02:09:36 +0000
ROA not before:           Tue 20 Jan 2026 02:04:36 +0000
ROA not after:            Tue 19 Jan 2027 02:09:36 +0000
asID:                     138968
IP address blocks:        103.112.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ba:bd:b1:cd:c8:4c:7a:ec:08:9e:d0:73:0e:e2:c8:eb:b5:7f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:36 2026 GMT
            Not After : Jan 19 02:09:36 2027 GMT
        Subject: CN=E89775B7AFDEA66B30FA323D9157A5DFD7F0F201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:1d:05:1d:0b:4a:15:d6:ba:24:9e:8e:f3:
                    46:9d:35:96:d3:a0:1c:aa:60:22:ad:83:e6:1f:db:
                    c3:66:4b:60:88:c9:99:8f:55:ea:c9:09:0e:a0:68:
                    91:f3:8c:91:ac:15:be:27:8b:eb:cf:ed:54:3c:e4:
                    14:b6:ac:b5:0c:9f:42:ee:b4:ad:ff:62:99:b4:6b:
                    52:8e:49:e1:8a:5a:d9:30:e4:4a:4d:b0:1e:4c:de:
                    a7:16:26:a3:d0:89:cf:e7:9b:6b:99:97:29:ea:97:
                    4d:73:e2:9a:aa:50:c5:4f:cf:43:e5:f9:4c:10:b5:
                    cb:6f:f9:e2:b8:a3:9c:6f:71:99:fe:76:c1:c2:28:
                    0f:0b:ce:d1:da:e7:3e:fa:69:05:88:91:57:13:53:
                    e2:e5:15:dc:d0:59:41:7e:4f:09:83:6a:9b:83:1c:
                    ed:0b:0d:c5:e9:3c:09:6b:bf:23:d3:48:80:da:01:
                    1f:28:1c:1b:a8:05:be:70:cd:d2:95:25:02:10:40:
                    22:46:95:d7:16:89:8b:1f:c9:3a:60:c2:03:e4:0f:
                    18:9d:3d:a0:0b:3e:be:e2:e8:ae:f2:33:af:38:8a:
                    74:4b:97:4f:80:05:7b:d8:13:d4:9b:8b:9f:95:3d:
                    f3:c4:44:b2:68:3f:ef:43:ce:1f:e9:99:17:a6:fc:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:97:75:B7:AF:DE:A6:6B:30:FA:32:3D:91:57:A5:DF:D7:F0:F2:01
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e3138342e302f32322d3234203d3e20313338393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:67:02:ab:61:40:f8:a8:c0:dc:8a:64:64:c0:c6:b4:ae:0c:
         0c:86:0b:5c:12:e0:9c:06:29:63:1f:02:c8:28:d0:42:3c:a2:
         07:cf:8c:8c:c7:f2:44:4a:ce:7e:95:57:79:09:47:d7:60:ad:
         51:f1:84:b2:0c:ec:07:3e:40:58:ff:3a:11:75:a2:14:43:bc:
         45:e3:39:60:4a:60:07:f2:ef:f8:03:72:f8:f1:b2:b2:49:ae:
         bc:7e:fa:80:36:d2:7c:e0:eb:b5:9c:07:d4:d1:b2:c2:4e:7b:
         f1:82:8c:d7:41:e3:14:c6:ed:76:e7:81:6b:be:4b:a5:a4:4c:
         6b:f7:48:d6:d3:0b:02:20:82:22:11:73:2d:82:f9:0d:c1:ee:
         3c:4a:d4:ff:28:aa:ef:ac:e8:a9:28:50:9c:ea:df:0d:c1:ef:
         30:12:ff:0f:21:26:6e:c3:0c:72:bc:18:58:56:8e:fa:b2:03:
         d2:7c:a6:ce:59:b6:6c:03:4d:3f:a6:3c:c4:fb:67:fd:63:43:
         09:4a:c5:e5:d2:07:b0:4a:d9:78:27:07:a1:80:43:1e:bb:4e:
         f7:75:88:3b:9b:7d:0d:61:60:b1:26:8f:4d:1f:f1:aa:0c:16:
         61:6c:26:e7:23:63:30:8e:fd:13:67:75:31:bc:eb:d7:a4:1c:
         20:48:27:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:10:12 2026 by rpki-client