This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34302e302f32322d3234203d3e20313338393638.roa
File:                     3130332e3131352e34302e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier:          JVWF9LVDK+m23sMYeazFP6nBweUfk6NVImhFYC5admo=
Subject key identifier:   BC:E6:FF:25:7C:F0:07:29:9B:15:33:4D:2F:B1:DB:08:B9:CA:AD:81
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       6844B9C036D5BFB39D6248DBF105749B979A9061
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34302e302f32322d3234203d3e20313338393638.roa
Signing time:             Tue 20 Jan 2026 02:09:32 +0000
ROA not before:           Tue 20 Jan 2026 02:04:32 +0000
ROA not after:            Tue 19 Jan 2027 02:09:32 +0000
asID:                     138968
IP address blocks:        103.115.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:44:b9:c0:36:d5:bf:b3:9d:62:48:db:f1:05:74:9b:97:9a:90:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:32 2026 GMT
            Not After : Jan 19 02:09:32 2027 GMT
        Subject: CN=BCE6FF257CF007299B15334D2FB1DB08B9CAAD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:42:15:16:92:0e:0c:2d:4d:54:ba:1a:34:c0:
                    fe:f4:fa:e4:61:47:e9:64:b2:22:3d:63:1f:b6:72:
                    2c:e4:c7:34:42:a6:b6:e5:9a:2b:cb:7c:60:1a:69:
                    00:89:d4:c1:57:12:d6:e3:b9:e6:e1:d6:d1:92:4c:
                    9f:56:a2:a4:b5:47:76:8d:bd:85:67:a4:01:d3:e7:
                    f9:03:bd:aa:ef:66:07:1a:58:09:ad:ed:5b:f8:39:
                    66:c7:07:19:10:90:79:4d:53:bf:a7:3e:25:06:44:
                    ef:a8:18:54:8f:68:77:89:c5:aa:63:4e:03:87:b0:
                    8b:5c:0f:2c:32:9f:d8:b3:29:3b:ac:5e:62:47:90:
                    6c:19:2f:ef:9a:09:a9:0f:33:4e:fc:94:51:0c:b6:
                    19:dc:95:e7:f5:80:77:eb:b8:67:cf:d4:1e:12:72:
                    ac:11:dd:a1:ce:76:49:1d:7e:cb:03:26:e0:af:f9:
                    d8:fe:9e:8d:1a:e0:9d:10:1f:f3:d7:ea:ab:85:9c:
                    f3:1b:16:83:b2:9a:e8:59:f6:f4:18:47:9f:d7:c9:
                    ef:93:f3:c0:e8:ae:e0:0a:49:9f:fb:9d:a1:01:4f:
                    e1:24:85:ad:12:88:23:ae:65:55:e7:c3:ee:fc:d0:
                    ab:df:2b:ae:f8:a7:c1:f0:9d:32:d2:47:fc:d7:58:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E6:FF:25:7C:F0:07:29:9B:15:33:4D:2F:B1:DB:08:B9:CA:AD:81
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34302e302f32322d3234203d3e20313338393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:4f:43:52:e7:02:bd:64:08:ef:1a:c4:18:91:09:44:ac:12:
         3b:6d:70:2b:f0:5e:d5:aa:d5:17:8c:03:93:d3:4f:a1:a5:63:
         ed:74:76:a1:21:ae:ce:99:6e:4b:f6:e7:88:0c:27:41:4b:db:
         13:03:e3:d2:6c:cf:1c:ef:c6:76:e1:41:bc:f2:ea:04:e5:da:
         a6:e1:ae:29:96:f9:ab:bd:b6:64:e1:18:39:b0:16:7d:86:90:
         68:52:d5:6f:f5:b0:df:48:13:25:f4:a4:7a:a0:2a:e0:3d:10:
         58:50:f5:51:5d:ea:f7:4b:88:32:69:77:1b:6f:6c:71:c4:e7:
         6e:84:9d:45:1a:39:5e:ca:f8:c8:58:b8:5e:11:8c:02:95:6c:
         ca:26:77:da:9c:ca:58:c0:8f:19:ee:cb:a3:33:e4:01:79:f7:
         0a:a9:04:1d:98:07:fa:76:34:53:d1:84:9b:5a:95:c9:ce:d1:
         bb:28:f0:bb:2c:d9:c6:43:2c:8b:d3:1b:fc:c0:1f:1d:0f:76:
         50:4b:66:6c:77:b3:aa:bb:b8:2a:a0:cb:2f:87:ba:40:0f:0d:
         1f:30:14:31:dd:b0:2d:d3:75:0c:66:b3:19:83:f2:7e:21:e8:
         05:24:ed:d1:f2:0d:0e:b1:b0:0f:67:bb:b3:29:29:65:ad:c6:
         f1:91:1b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:20 2026 by rpki-client