This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34342e302f32322d3234203d3e20313338393638.roa
File:                     3130332e3131352e34342e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier:          5BPblhPcbwm0q8kGbueq7aHenq96IreFFz8rPYpc1+E=
Subject key identifier:   74:86:79:C4:75:13:A1:5D:5D:27:6A:97:23:E4:F3:37:02:E1:08:D4
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       3413A33C9EFD54041D1B28F1D2BFF98EE046C26D
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34342e302f32322d3234203d3e20313338393638.roa
Signing time:             Tue 20 Jan 2026 02:09:38 +0000
ROA not before:           Tue 20 Jan 2026 02:04:38 +0000
ROA not after:            Tue 19 Jan 2027 02:09:38 +0000
asID:                     138968
IP address blocks:        103.115.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:13:a3:3c:9e:fd:54:04:1d:1b:28:f1:d2:bf:f9:8e:e0:46:c2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:38 2026 GMT
            Not After : Jan 19 02:09:38 2027 GMT
        Subject: CN=748679C47513A15D5D276A9723E4F33702E108D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:94:7b:05:7a:c8:67:ce:79:5e:1a:4c:10:
                    a6:38:c2:3d:be:41:3f:b3:61:e3:17:b4:04:01:e5:
                    e8:b3:04:12:4e:82:f8:dc:e5:91:18:8f:94:c3:6c:
                    db:bf:5a:86:81:4f:d3:b2:f7:60:1d:e3:f1:8d:84:
                    94:c3:56:7b:f0:20:58:77:4e:6f:19:a1:07:13:d3:
                    a6:96:57:54:98:fb:60:0d:14:1f:40:31:34:e0:d5:
                    27:21:36:f8:df:41:bb:c6:33:b0:fb:a9:41:66:05:
                    27:3a:9e:2e:f9:f8:7e:8e:7c:b2:25:e3:ba:8a:fe:
                    86:e0:2c:dd:f3:7b:2a:4e:4d:4a:59:c1:39:fc:09:
                    62:17:30:a1:e7:ab:3e:2a:0d:a4:09:27:08:f4:64:
                    aa:a3:f9:b3:a9:66:82:1e:86:d5:0f:4b:ec:d2:e1:
                    5e:0a:45:90:8a:13:e3:b7:d6:8e:b2:55:cb:cf:b4:
                    5c:56:1c:34:3b:80:ad:11:24:d2:88:76:06:ff:f3:
                    aa:15:84:41:4b:05:e1:56:f4:0b:f6:9f:29:78:08:
                    b8:9a:50:2d:07:bb:ab:64:36:7d:19:18:52:4e:25:
                    99:f6:75:a8:39:99:15:4a:ff:40:8a:05:8b:80:92:
                    5e:39:59:b9:71:d1:7b:62:0c:68:36:96:8f:0d:99:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:86:79:C4:75:13:A1:5D:5D:27:6A:97:23:E4:F3:37:02:E1:08:D4
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34342e302f32322d3234203d3e20313338393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:42:da:71:f2:08:8d:6b:b6:8b:89:cd:67:96:69:4d:f7:c0:
         14:f6:4a:7d:ae:74:a9:18:e6:4b:9f:a3:45:ac:8e:50:ae:f1:
         6e:dc:87:9c:a4:7e:58:98:56:0e:fa:62:d3:49:c5:b6:04:c3:
         54:7c:cc:c4:51:91:2b:98:bf:70:22:b5:49:34:ae:0c:01:ee:
         9a:b2:2d:1d:e2:2c:6b:88:31:5d:56:c1:43:c0:b5:39:b3:5b:
         ba:18:28:40:fb:72:e5:ec:c5:77:aa:20:72:5d:79:cd:b7:f3:
         3f:c2:5f:80:e8:fe:cb:b1:78:f5:b8:ef:0e:b3:91:cd:a4:27:
         2c:7a:90:f3:a7:3c:fb:1a:8b:7c:2a:1c:39:c7:36:43:45:e2:
         97:89:93:4c:98:69:4c:c6:08:a7:05:73:3d:9f:be:11:01:de:
         d1:49:1f:ee:2f:30:19:09:8a:7d:9b:22:c1:2c:be:a6:9c:81:
         4c:6d:28:d5:49:13:0f:61:81:11:a8:29:03:65:34:e1:1e:9b:
         e4:b8:63:21:69:11:a1:94:cf:c9:87:65:93:11:44:a5:86:29:
         06:ac:92:28:78:60:04:d2:29:fc:17:b7:d0:9c:38:19:53:14:
         ad:a5:e8:08:d4:b8:39:91:2f:88:f3:c7:6a:c1:e5:ee:8d:e9:
         bd:29:7b:82
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUNBOjPJ79VAQdGyjx0r/5juBGwm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzhaFw0yNzAxMTkwMjA5MzhaMDMxMTAvBgNV
BAMTKDc0ODY3OUM0NzUxM0ExNUQ1RDI3NkE5NzIzRTRGMzM3MDJFMTA4RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW9JR7BXrIZ855XhpMEKY4wj2+
QT+zYeMXtAQB5eizBBJOgvjc5ZEYj5TDbNu/WoaBT9Oy92Ad4/GNhJTDVnvwIFh3
Tm8ZoQcT06aWV1SY+2ANFB9AMTTg1SchNvjfQbvGM7D7qUFmBSc6ni75+H6OfLIl
47qK/obgLN3zeypOTUpZwTn8CWIXMKHnqz4qDaQJJwj0ZKqj+bOpZoIehtUPS+zS
4V4KRZCKE+O31o6yVcvPtFxWHDQ7gK0RJNKIdgb/86oVhEFLBeFW9Av2nyl4CLia
UC0Hu6tkNn0ZGFJOJZn2dag5mRVK/0CKBYuAkl45Wblx0XtiDGg2lo8NmcrlAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUdIZ5xHUToV1dJ2qXI+TzNwLhCNQwHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMC8zMTMwMzMyZTMx
MzEzNTJlMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzODM5MzYzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdzLDANBgkqhkiG9w0BAQsFAAOCAQEAMELacfIIjWu2i4nNZ5Zp
TffAFPZKfa50qRjmS5+jRayOUK7xbtyHnKR+WJhWDvpi00nFtgTDVHzMxFGRK5i/
cCK1STSuDAHumrItHeIsa4gxXVbBQ8C1ObNbuhgoQPty5ezFd6ogcl15zbfzP8Jf
gOj+y7F49bjvDrORzaQnLHqQ86c8+xqLfCocOcc2Q0Xil4mTTJhpTMYIpwVzPZ++
EQHe0Ukf7i8wGQmKfZsiwSy+ppyBTG0o1UkTD2GBEagpA2U04R6b5LhjIWkRoZTP
yYdlkxFEpYYpBqySKHhgBNIp/Be30Jw4GVMUraXoCNS4OZEviPPHasHl7o3pvSl7
gg==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:57 2026 by rpki-client