This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34302e302f32322d3234203d3e203535393333.roa
File:                     3130332e3131352e34302e302f32322d3234203d3e203535393333.roa (raw, json)
Hash identifier:          A2nQAmTjji6tiCw27dE1Teq+ZGKR2r0zX4g0SpqZgKE=
Subject key identifier:   10:9C:E5:D7:42:4A:81:CC:14:2E:9C:28:D3:1C:BA:6B:AD:59:37:01
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       2690066689D1550793CBDFE0C16959C6C7AF5340
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34302e302f32322d3234203d3e203535393333.roa
Signing time:             Tue 20 Jan 2026 02:09:37 +0000
ROA not before:           Tue 20 Jan 2026 02:04:37 +0000
ROA not after:            Tue 19 Jan 2027 02:09:37 +0000
asID:                     55933
IP address blocks:        103.115.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:90:06:66:89:d1:55:07:93:cb:df:e0:c1:69:59:c6:c7:af:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:37 2026 GMT
            Not After : Jan 19 02:09:37 2027 GMT
        Subject: CN=109CE5D7424A81CC142E9C28D31CBA6BAD593701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ad:36:45:ef:0a:a5:35:d4:dd:4d:ca:ee:f0:
                    51:01:98:33:52:62:5b:e8:be:a3:79:be:20:fe:29:
                    38:f8:79:72:8b:83:10:c2:a1:c2:22:4c:63:04:a0:
                    cf:6a:cd:73:0a:c6:a3:34:92:14:7d:cf:f4:1e:10:
                    ef:35:4c:e4:e8:d7:81:69:6c:a1:bc:ac:5e:67:1f:
                    f0:b5:ff:f3:a6:8d:98:8d:ac:88:e8:f2:40:d6:c7:
                    ea:3b:91:a1:d7:ce:8f:43:49:d9:5b:30:97:fe:27:
                    bb:11:b2:d7:c9:e1:ee:b5:95:56:94:d3:cb:b2:30:
                    c3:da:f3:b7:60:5a:49:cc:99:b1:23:7c:91:a3:84:
                    ec:a3:99:54:23:df:70:a8:2b:a3:ec:4c:dd:a8:6f:
                    2c:b5:d5:38:cb:7f:fe:72:15:0d:d7:18:9e:a4:0f:
                    2a:0f:e2:f1:71:3a:09:c1:1b:1b:3e:6f:6f:c3:7f:
                    df:7a:0f:10:5c:3f:66:43:9e:bf:e3:05:4f:ab:56:
                    bf:41:95:67:9c:bc:32:61:cf:a5:27:d6:7b:e4:e3:
                    c0:ce:03:15:9e:dd:94:c9:d0:1e:37:91:00:d0:ff:
                    94:4c:fd:d5:68:99:95:93:dc:65:7c:98:c3:74:e9:
                    42:cd:57:9e:9f:40:19:37:b0:f9:42:07:64:6d:51:
                    a9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9C:E5:D7:42:4A:81:CC:14:2E:9C:28:D3:1C:BA:6B:AD:59:37:01
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34302e302f32322d3234203d3e203535393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:51:c9:59:00:f8:0d:c5:88:c7:ea:95:78:8e:fd:df:0b:ff:
         91:6d:95:6c:99:33:6b:50:09:6e:ff:52:30:d2:e3:be:20:40:
         17:50:da:f1:30:bb:2d:79:67:7b:be:9e:d6:15:af:8c:f6:00:
         79:fb:08:b6:0e:1c:96:dd:71:a5:21:b4:62:07:39:10:73:7b:
         4e:aa:5d:a0:20:7b:20:77:f9:d4:6d:92:19:1c:4a:01:20:f0:
         c1:48:d5:a9:a1:a0:27:4f:9a:ba:b8:1f:07:56:29:d2:05:29:
         b9:b8:57:da:2a:cd:b9:cd:ad:13:cc:05:8e:9c:bd:6e:ce:d0:
         ad:5a:ac:ac:36:26:7b:00:6a:f8:fa:de:49:04:30:9f:6d:5d:
         39:a8:48:16:38:ad:3f:4a:d1:b7:e2:6a:31:30:37:00:32:21:
         a5:f6:60:8f:a8:c2:e3:b2:80:cc:ef:2e:77:00:b6:b3:44:26:
         15:2d:8e:9e:d1:52:d5:ec:01:90:8d:db:ac:07:d6:31:7f:d7:
         3f:e7:b8:2e:45:79:26:a1:c8:cb:53:28:c1:eb:21:2f:61:66:
         36:e7:bd:06:68:23:6d:2d:fa:62:50:9f:7e:df:fc:40:26:1d:
         9f:93:6d:d9:71:62:57:40:f8:ed:51:32:49:fc:12:8c:63:aa:
         cc:90:b8:5e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUJpAGZonRVQeTy9/gwWlZxsevU0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzdaFw0yNzAxMTkwMjA5MzdaMDMxMTAvBgNV
BAMTKDEwOUNFNUQ3NDI0QTgxQ0MxNDJFOUMyOEQzMUNCQTZCQUQ1OTM3MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMrTZF7wqlNdTdTcru8FEBmDNS
YlvovqN5viD+KTj4eXKLgxDCocIiTGMEoM9qzXMKxqM0khR9z/QeEO81TOTo14Fp
bKG8rF5nH/C1//OmjZiNrIjo8kDWx+o7kaHXzo9DSdlbMJf+J7sRstfJ4e61lVaU
08uyMMPa87dgWknMmbEjfJGjhOyjmVQj33CoK6PsTN2obyy11TjLf/5yFQ3XGJ6k
DyoP4vFxOgnBGxs+b2/Df996DxBcP2ZDnr/jBU+rVr9BlWecvDJhz6Un1nvk48DO
AxWe3ZTJ0B43kQDQ/5RM/dVomZWT3GV8mMN06ULNV56fQBk3sPlCB2RtUalpAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUEJzl10JKgcwULpwo0xy6a61ZNwEwHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODYxNTY4Mi8wLzMxMzAzMzJlMzEz
MTM1MmUzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNTM5MzMzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmdzKDANBgkqhkiG9w0BAQsFAAOCAQEAp1HJWQD4DcWIx+qVeI793wv/
kW2VbJkza1AJbv9SMNLjviBAF1Da8TC7LXlne76e1hWvjPYAefsItg4clt1xpSG0
Ygc5EHN7TqpdoCB7IHf51G2SGRxKASDwwUjVqaGgJ0+aurgfB1Yp0gUpubhX2irN
uc2tE8wFjpy9bs7QrVqsrDYmewBq+PreSQQwn21dOahIFjitP0rRt+JqMTA3ADIh
pfZgj6jC47KAzO8udwC2s0QmFS2OntFS1ewBkI3brAfWMX/XP+e4LkV5JqHIy1Mo
weshL2FmNue9BmgjbS36YlCfft/8QCYdn5Nt2XFiV0D47VEySfwSjGOqzJC4Xg==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:23 2026 by rpki-client