This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e36382e302f32322d3234203d3e203535393333.roa
File:                     3130332e3131322e36382e302f32322d3234203d3e203535393333.roa (raw, json)
Hash identifier:          mAqMAAwcwOU1jlBxmnf9HS1dsdJaZEj6d+8hlOdoa+I=
Subject key identifier:   9E:7E:B7:EC:0E:E7:22:75:80:53:53:9C:6E:F5:0B:6E:34:8A:BE:2E
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       68B48B06743098524CD688605A78DC316FDBD7AA
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e36382e302f32322d3234203d3e203535393333.roa
Signing time:             Tue 20 Jan 2026 02:09:38 +0000
ROA not before:           Tue 20 Jan 2026 02:04:38 +0000
ROA not after:            Tue 19 Jan 2027 02:09:38 +0000
asID:                     55933
IP address blocks:        103.112.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b4:8b:06:74:30:98:52:4c:d6:88:60:5a:78:dc:31:6f:db:d7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:38 2026 GMT
            Not After : Jan 19 02:09:38 2027 GMT
        Subject: CN=9E7EB7EC0EE722758053539C6EF50B6E348ABE2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0d:51:73:2e:6d:b7:a2:8f:51:fd:18:8c:61:
                    c6:90:69:f9:cc:af:a6:bf:ab:3b:3c:37:c5:41:44:
                    d1:19:ff:58:13:89:09:a3:bc:76:e3:5f:3a:13:21:
                    4d:28:4e:88:f5:95:d9:32:af:bd:76:23:a3:70:e8:
                    9e:18:ac:a1:e7:f4:c3:91:89:48:ae:51:80:4d:d8:
                    e5:4c:1b:0b:84:3c:48:07:30:c5:40:6b:c4:28:1d:
                    a8:3c:bd:71:10:23:75:34:49:4c:80:70:e7:03:fb:
                    d7:be:92:d9:42:f6:4e:aa:61:f5:2f:52:04:48:c4:
                    e5:23:61:a9:ae:15:d8:e2:72:0f:3d:70:1b:57:a3:
                    10:a9:55:14:fc:3c:65:6e:f3:99:f7:75:1f:3f:8e:
                    40:05:c6:b7:39:8d:cd:62:dd:cb:f4:ff:2b:3a:3e:
                    64:5c:77:38:f5:39:40:94:0d:9a:8d:4b:3b:32:04:
                    aa:20:a8:54:6e:93:81:2b:31:c9:d2:1b:02:40:de:
                    87:f8:b5:26:ff:bf:b1:0c:61:22:a9:c4:ee:a5:d4:
                    cf:5c:b7:e5:31:8f:59:bc:0f:23:3e:5a:17:73:1b:
                    27:f3:3c:ba:3c:e7:44:3d:0e:41:c5:35:f5:62:01:
                    ba:ae:71:b2:49:68:69:6f:3e:da:1b:2b:90:87:37:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7E:B7:EC:0E:E7:22:75:80:53:53:9C:6E:F5:0B:6E:34:8A:BE:2E
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131322e36382e302f32322d3234203d3e203535393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:31:79:37:83:fb:54:c0:6d:58:c1:50:d6:81:3c:38:99:8f:
         5f:3a:81:9e:1f:3d:c2:df:c6:73:29:3d:65:8b:3a:bc:ff:0b:
         96:f0:30:e4:79:42:1a:62:6f:06:b9:5e:e2:97:bf:b2:4e:63:
         21:4b:25:99:5c:a9:34:9b:e9:fb:99:15:2f:2b:ae:da:6f:49:
         05:fa:ce:48:8d:7e:a5:ca:a9:ee:f4:0a:50:05:e8:e1:32:f6:
         0c:29:1c:c5:bc:73:79:93:0c:0c:f0:77:af:96:72:8d:01:c3:
         ee:35:d2:2f:e8:a3:75:f2:ae:84:e2:18:c7:d2:69:d7:e0:7d:
         3a:18:e8:e3:4e:7a:04:97:57:d9:a7:87:eb:92:71:c8:b9:97:
         36:01:98:93:bf:39:af:53:f8:8d:02:e8:93:85:48:30:cf:f5:
         98:72:9d:f0:f7:cd:85:0f:04:e0:64:c0:f3:2c:e1:90:30:0b:
         af:0f:13:6e:73:3d:47:c2:4b:d4:c9:1f:56:12:85:89:78:8a:
         e0:dc:12:81:58:c6:01:21:8d:0b:ae:32:51:5a:04:8e:8a:8b:
         8a:ed:38:43:8e:08:74:16:7d:41:dd:c5:cb:bb:50:2d:58:6c:
         00:7d:80:e2:a7:05:7b:36:c5:dd:05:4f:21:46:b4:bd:ee:98:
         ef:b9:1d:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:22 2026 by rpki-client