This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e35362e302f32322d3234203d3e20313338393638.roa
File:                     3130332e3131352e35362e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier:          uUWawlZKpEWgM9Nt+RsWXHZSNi+fca6X7Uk1VquoINY=
Subject key identifier:   55:32:10:57:04:C0:F5:60:02:46:FF:5C:3B:7F:FA:40:24:5F:EE:0F
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       31392EA9CF569FDBF5F16AC106C83835B3823366
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e35362e302f32322d3234203d3e20313338393638.roa
Signing time:             Tue 20 Jan 2026 02:09:38 +0000
ROA not before:           Tue 20 Jan 2026 02:04:38 +0000
ROA not after:            Tue 19 Jan 2027 02:09:38 +0000
asID:                     138968
IP address blocks:        103.115.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:39:2e:a9:cf:56:9f:db:f5:f1:6a:c1:06:c8:38:35:b3:82:33:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:38 2026 GMT
            Not After : Jan 19 02:09:38 2027 GMT
        Subject: CN=5532105704C0F5600246FF5C3B7FFA40245FEE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a4:93:c0:79:0b:34:75:41:93:f4:dc:25:56:
                    27:ad:29:35:09:06:4a:d2:fa:58:66:2b:ab:41:39:
                    fd:5a:af:1b:79:a2:77:cc:3e:50:68:fb:05:93:fa:
                    03:f7:09:7b:42:9b:b8:22:e2:30:be:9a:5b:75:0e:
                    2d:18:2d:de:b1:e5:75:3c:82:1c:d6:2b:16:16:46:
                    ec:c6:b8:5b:39:da:53:7e:0e:64:cd:d3:69:b4:c8:
                    76:e2:c6:19:e9:ed:5b:58:2c:da:06:c4:a7:7d:46:
                    e5:92:77:24:b0:19:eb:14:db:56:60:01:ff:e7:10:
                    59:fd:7c:4b:71:11:80:b3:e0:25:f7:06:cb:5d:d2:
                    82:3a:1f:16:06:93:29:b9:16:25:2a:fb:91:08:97:
                    d5:e0:e2:7a:9e:2d:85:6d:8f:56:e8:56:53:b1:3f:
                    43:45:c8:c9:4e:ff:e6:a9:86:c3:1a:39:f0:5a:c5:
                    c4:ec:a2:b5:76:ea:08:0d:4c:b6:c0:60:c7:7c:b3:
                    0f:12:3a:87:f4:eb:34:93:97:0c:1f:e9:32:d1:c5:
                    6c:3d:0b:47:76:e7:d4:15:72:35:54:d4:ef:0f:f8:
                    33:00:ac:a3:61:d4:ac:a1:d5:7b:0d:a3:70:ff:13:
                    b1:0e:f2:8e:a0:7c:65:63:05:37:e8:47:30:be:7f:
                    13:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:32:10:57:04:C0:F5:60:02:46:FF:5C:3B:7F:FA:40:24:5F:EE:0F
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e35362e302f32322d3234203d3e20313338393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:28:84:86:c9:c2:e5:17:9b:c7:d5:35:58:6f:31:7f:28:36:
         29:d1:c8:84:d3:19:fe:28:e8:e8:38:82:49:25:e5:56:c9:d7:
         92:27:ba:8d:78:f0:fa:84:dd:95:9d:0b:b5:3c:81:cd:fd:54:
         86:aa:d1:c5:0f:54:31:3c:20:36:46:3e:28:a1:fa:73:44:82:
         9f:4f:65:8c:7f:29:b1:9e:bd:43:e4:62:19:d9:21:03:1f:86:
         76:03:1e:7e:de:23:0a:33:f4:c4:c7:87:ab:6a:36:e6:a8:61:
         dd:d4:c6:f9:0d:ff:39:c7:28:be:fd:d7:de:95:19:03:93:a2:
         12:76:07:5c:59:d9:19:95:0d:d1:17:88:ae:0a:a2:1d:c1:af:
         46:72:3f:75:63:c3:a6:c6:08:96:ba:fd:95:62:98:1b:a2:f9:
         83:f8:b1:4d:df:3e:31:ba:69:83:c3:03:81:af:95:42:54:bf:
         67:59:cc:7c:26:2c:1c:19:3f:2c:75:42:5e:35:2d:83:74:82:
         fb:6b:6f:bb:31:93:c1:77:8c:a6:d8:af:63:16:73:2b:31:48:
         78:b2:ac:04:3b:fd:74:d0:b3:a7:46:15:0e:eb:29:e4:2c:c0:
         6c:35:d2:24:47:59:b7:30:8c:67:9c:ca:a5:f6:7d:2b:8b:e6:
         44:9b:63:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:56 2026 by rpki-client