This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34382e302f32322d3234203d3e203535393333.roa
File:                     3130332e3131352e34382e302f32322d3234203d3e203535393333.roa (raw, json)
Hash identifier:          E1vV1148nuLis3wdaNfRohs5R7uJP67OyuSneQV4+Ss=
Subject key identifier:   CE:36:10:DE:5C:30:58:96:9B:E7:93:16:A0:79:EE:B1:D4:77:B6:54
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       2E5E04D5BAE6DB86383DBD8556D9E424834695DA
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34382e302f32322d3234203d3e203535393333.roa
Signing time:             Tue 20 Jan 2026 02:09:39 +0000
ROA not before:           Tue 20 Jan 2026 02:04:39 +0000
ROA not after:            Tue 19 Jan 2027 02:09:39 +0000
asID:                     55933
IP address blocks:        103.115.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5e:04:d5:ba:e6:db:86:38:3d:bd:85:56:d9:e4:24:83:46:95:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:39 2026 GMT
            Not After : Jan 19 02:09:39 2027 GMT
        Subject: CN=CE3610DE5C3058969BE79316A079EEB1D477B654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:3f:59:e3:cf:b0:c4:d3:c6:b8:90:07:10:
                    40:47:9d:cb:df:e3:a4:98:56:37:39:79:4b:98:d4:
                    1c:4e:f0:81:dd:61:61:37:b9:07:bb:06:1f:fb:13:
                    45:14:94:eb:b2:ba:ea:c0:f0:da:67:d6:46:20:92:
                    b0:96:b8:8d:2f:44:8b:b0:f0:ec:b8:b4:50:6c:3c:
                    58:5c:83:17:9b:08:3c:8a:d8:e2:f9:d2:b5:c0:76:
                    fd:e4:b2:21:d4:55:6b:ea:a9:8a:6b:59:16:66:d2:
                    53:16:5a:a3:e7:c2:02:ea:e6:7d:8e:80:84:94:d4:
                    51:8b:ee:d8:90:f4:12:96:85:e5:c2:e5:9f:67:80:
                    db:e2:aa:1d:ac:2d:73:e8:57:4b:2f:83:97:bf:2b:
                    37:f1:69:86:7a:79:de:3d:56:92:27:4d:8c:2a:f2:
                    78:b4:88:28:0f:5d:98:4c:a7:3b:fb:0f:95:6b:b2:
                    64:78:e4:9a:88:53:1d:99:46:c7:fe:26:0d:25:58:
                    c8:f9:07:33:d9:43:54:d8:af:07:13:34:f0:f7:c0:
                    e6:3f:61:f6:de:58:8e:dc:85:cf:8b:b2:9f:77:41:
                    2e:7f:71:d1:de:60:cb:3a:52:8b:83:6c:23:57:c4:
                    fe:38:3a:95:94:ed:d7:e9:22:32:48:47:8f:f6:7e:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:36:10:DE:5C:30:58:96:9B:E7:93:16:A0:79:EE:B1:D4:77:B6:54
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e34382e302f32322d3234203d3e203535393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:a3:75:cf:4a:a0:aa:e8:c1:d8:79:64:fc:2e:9b:67:f0:ce:
         76:c7:4e:a3:d8:14:8c:de:69:fe:00:e4:0b:56:e5:76:75:0f:
         0f:61:1f:6e:6e:3e:b5:8c:86:28:01:c6:1a:58:20:1f:8f:48:
         4f:d0:6e:a8:a1:ce:fe:43:51:6b:47:8a:50:1d:63:9e:91:01:
         74:f3:6e:e6:1a:5b:ca:cb:8b:35:ba:c1:ac:66:2e:fe:ab:b5:
         bd:c8:e8:1e:5d:6c:6e:df:40:42:3c:e5:ce:ba:84:95:5b:11:
         ac:51:eb:bf:6a:e4:66:b8:93:03:ab:7b:eb:db:dc:e8:3d:9d:
         22:18:bd:f7:05:25:ff:ff:4d:be:90:7f:76:c0:13:3b:52:d6:
         82:6d:6e:da:5b:4c:7a:9f:21:ff:2d:4b:a7:b1:af:4c:5f:f1:
         35:b8:9f:59:95:3c:cc:ed:e9:87:54:b7:4f:f5:6c:dd:3c:c7:
         bd:3a:ca:74:fe:d7:47:c8:52:0f:9a:b6:cf:3a:cf:5c:60:f3:
         85:3e:7e:5e:ea:ab:a2:8a:85:85:ed:be:8e:f2:e6:5f:72:1d:
         88:bb:98:a4:de:90:e6:9c:d1:e2:7a:04:b0:5a:c6:4c:5c:4a:
         24:bf:cf:cb:1b:41:c9:ba:6f:e7:bf:69:1b:b4:2a:05:6a:b2:
         79:7d:49:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:21 2026 by rpki-client