This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e36382e302f32322d3234203d3e20313338393638.roa
File:                     3130332e3131322e36382e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier:          a0+o+DnF/503Xndnt598M8FROjP3W5Eva0lPgLfK9II=
Subject key identifier:   4B:A0:AB:3A:85:CD:09:2B:A6:AA:8B:6D:86:3E:C3:B2:37:DF:91:ED
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       764A8D220EC335DFF17A4FC7569C682D9C600008
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e36382e302f32322d3234203d3e20313338393638.roa
Signing time:             Tue 20 Jan 2026 02:09:39 +0000
ROA not before:           Tue 20 Jan 2026 02:04:39 +0000
ROA not after:            Tue 19 Jan 2027 02:09:39 +0000
asID:                     138968
IP address blocks:        103.112.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4a:8d:22:0e:c3:35:df:f1:7a:4f:c7:56:9c:68:2d:9c:60:00:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:39 2026 GMT
            Not After : Jan 19 02:09:39 2027 GMT
        Subject: CN=4BA0AB3A85CD092BA6AA8B6D863EC3B237DF91ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:32:ef:8c:6f:6b:c5:03:56:a9:11:e4:a4:
                    f4:98:a5:38:fe:f4:ce:42:41:3d:b4:fd:c1:e6:c7:
                    78:56:a6:dc:41:71:4b:7e:d9:da:03:a4:44:da:98:
                    ab:92:b6:d7:75:79:2d:b1:09:65:10:94:4b:8b:c9:
                    20:6a:95:fe:60:05:08:b8:21:72:bc:db:91:d4:58:
                    63:9a:68:b0:45:bf:15:e5:99:6a:89:7b:52:0a:63:
                    76:7c:d9:99:e4:6d:63:a1:62:54:75:f7:a8:d4:fd:
                    68:45:be:88:52:1f:23:60:46:30:08:5a:f2:76:c3:
                    6a:9e:37:62:5b:8b:ec:6c:72:e4:c2:3b:ab:37:c4:
                    a4:4b:5c:94:d3:9a:c0:14:5b:db:f2:cf:f0:16:bc:
                    e0:5c:7b:8f:33:3e:31:32:3d:4f:f1:59:a0:e1:f9:
                    45:a8:d3:a3:9d:b1:09:ad:31:bf:01:84:b0:c5:e7:
                    13:83:bb:92:89:b4:80:29:53:51:be:51:3d:2f:00:
                    4d:4a:38:11:d0:ba:43:cb:c8:19:95:05:7e:db:80:
                    34:76:30:07:13:15:c3:48:c9:be:17:fa:ac:a3:60:
                    ae:f7:53:66:c2:e7:5f:0a:b5:43:f0:f6:8b:af:8c:
                    12:df:be:74:5f:90:c3:81:06:83:81:46:e8:76:d0:
                    64:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A0:AB:3A:85:CD:09:2B:A6:AA:8B:6D:86:3E:C3:B2:37:DF:91:ED
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e36382e302f32322d3234203d3e20313338393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:3f:3e:fa:b8:2a:1e:a8:cb:f8:25:9d:07:46:2d:c4:fb:6b:
         04:d3:f8:ab:6e:ab:5b:49:d9:65:ff:00:b6:73:f3:3d:4c:2c:
         85:cb:3e:f1:ed:c7:87:61:8e:6a:e0:10:e3:9d:6b:4e:83:92:
         ba:86:bc:6f:47:78:14:88:c0:54:49:5a:ac:c5:2f:17:02:5d:
         f3:34:6b:5c:5b:7c:b5:a8:e2:1e:a6:48:92:29:38:b6:ee:7b:
         d4:27:e7:ed:14:26:38:b3:ad:6f:6e:6c:d9:6d:45:a6:17:49:
         1d:c5:49:db:da:3a:c6:03:cd:a8:a6:5d:d8:31:00:54:6e:d2:
         a7:4e:75:bb:ca:cb:49:dd:fe:ce:b1:8c:f9:de:5f:fb:1b:ba:
         2e:f7:75:35:03:51:ca:88:81:76:61:34:c8:21:de:d3:9c:af:
         67:6e:a9:b5:28:c5:11:89:b4:81:ef:0f:4c:9a:31:d0:e2:8f:
         ff:ce:39:6a:ab:b6:4f:85:14:de:ea:f6:62:05:76:cc:9e:42:
         95:0b:ed:3e:c6:10:1d:5e:37:6e:56:3d:95:9d:e3:92:08:79:
         07:00:d0:e7:c8:bf:bf:80:b4:93:87:62:29:9f:5a:85:a1:2b:
         2c:0f:43:d6:c3:1f:91:5e:3d:db:e9:13:eb:0f:60:1a:62:0c:
         08:59:74:8a
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUdkqNIg7DNd/xek/HVpxoLZxgAAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzlaFw0yNzAxMTkwMjA5MzlaMDMxMTAvBgNV
BAMTKDRCQTBBQjNBODVDRDA5MkJBNkFBOEI2RDg2M0VDM0IyMzdERjkxRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMajLvjG9rxQNWqRHkpPSYpTj+
9M5CQT20/cHmx3hWptxBcUt+2doDpETamKuSttd1eS2xCWUQlEuLySBqlf5gBQi4
IXK825HUWGOaaLBFvxXlmWqJe1IKY3Z82ZnkbWOhYlR196jU/WhFvohSHyNgRjAI
WvJ2w2qeN2Jbi+xscuTCO6s3xKRLXJTTmsAUW9vyz/AWvOBce48zPjEyPU/xWaDh
+UWo06OdsQmtMb8BhLDF5xODu5KJtIApU1G+UT0vAE1KOBHQukPLyBmVBX7bgDR2
MAcTFcNIyb4X+qyjYK73U2bC518KtUPw9ouvjBLfvnRfkMOBBoOBRuh20GQ1AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUS6CrOoXNCSumqotthj7Dsjffke0wHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMC8zMTMwMzMyZTMx
MzEzMjJlMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzODM5MzYzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdwRDANBgkqhkiG9w0BAQsFAAOCAQEAwD8++rgqHqjL+CWdB0Yt
xPtrBNP4q26rW0nZZf8AtnPzPUwshcs+8e3Hh2GOauAQ451rToOSuoa8b0d4FIjA
VElarMUvFwJd8zRrXFt8tajiHqZIkik4tu571Cfn7RQmOLOtb25s2W1FphdJHcVJ
29o6xgPNqKZd2DEAVG7Sp051u8rLSd3+zrGM+d5f+xu6Lvd1NQNRyoiBdmE0yCHe
05yvZ26ptSjFEYm0ge8PTJox0OKP/845aqu2T4UU3ur2YgV2zJ5ClQvtPsYQHV43
blY9lZ3jkgh5BwDQ58i/v4C0k4diKZ9ahaErLA9D1sMfkV492+kT6w9gGmIMCFl0
ig==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:56 2026 by rpki-client