This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36302e302f32322d3234203d3e203535393333.roa
File:                     3130332e3131352e36302e302f32322d3234203d3e203535393333.roa (raw, json)
Hash identifier:          WtZguyEWOrSJo9+JKKwVxfL5QCVDjKutnhlb7G760Ms=
Subject key identifier:   B7:B5:CB:40:3D:4D:53:44:47:09:F9:A4:ED:DA:7A:9F:7B:03:04:26
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       722B2167F90E35DABB8F87315820D19FC3AEEC4F
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36302e302f32322d3234203d3e203535393333.roa
Signing time:             Tue 20 Jan 2026 02:09:38 +0000
ROA not before:           Tue 20 Jan 2026 02:04:38 +0000
ROA not after:            Tue 19 Jan 2027 02:09:38 +0000
asID:                     55933
IP address blocks:        103.115.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2b:21:67:f9:0e:35:da:bb:8f:87:31:58:20:d1:9f:c3:ae:ec:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:38 2026 GMT
            Not After : Jan 19 02:09:38 2027 GMT
        Subject: CN=B7B5CB403D4D53444709F9A4EDDA7A9F7B030426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:68:f5:10:97:5c:6f:18:c1:5f:61:b3:12:aa:
                    d2:95:62:73:68:73:66:2d:6d:ee:0e:41:9c:34:6f:
                    57:d0:c7:f7:8a:85:a2:62:d4:23:cc:b6:3e:20:42:
                    df:62:ce:53:1e:c4:1d:3d:a2:ae:00:4b:58:99:1a:
                    fb:21:84:fc:b1:e2:e1:2a:e1:17:c1:db:b5:f1:23:
                    a3:f4:58:12:17:2e:51:0d:7e:78:79:d2:79:85:be:
                    c4:90:71:57:b4:1e:f5:0a:22:a1:3a:c9:1d:3f:ba:
                    1a:97:6b:f7:3c:6f:80:00:42:cd:77:1d:b7:1c:29:
                    64:7f:24:65:fc:56:3d:48:6a:6a:4a:d2:d6:42:35:
                    40:00:34:69:60:d8:f9:d4:0f:cf:40:3a:bb:91:72:
                    30:d2:9b:6e:c4:4a:a5:a0:26:e4:b5:e8:2c:c3:e3:
                    dd:d4:e8:26:da:8e:4e:74:0c:ea:1b:71:fc:6b:91:
                    7b:50:66:a9:3f:ed:c2:b6:71:e6:6d:0e:f2:5f:d9:
                    b5:60:90:4e:cf:2f:b2:ee:67:7d:89:91:73:94:18:
                    f0:6f:f0:76:bf:f8:ba:b2:08:d7:15:1f:cf:1e:e2:
                    cc:bc:5a:db:ec:6a:08:57:ac:56:fe:84:30:55:51:
                    f6:a6:a3:32:4f:3b:17:53:fd:9d:ec:4c:37:70:5b:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B5:CB:40:3D:4D:53:44:47:09:F9:A4:ED:DA:7A:9F:7B:03:04:26
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36302e302f32322d3234203d3e203535393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:59:47:72:e4:fd:46:98:45:de:6c:b1:d0:67:2d:40:6b:52:
         d8:b2:20:c2:fe:ea:d7:a3:5d:2a:3c:4d:a7:e3:00:98:d2:ea:
         45:3b:72:1e:54:6b:ea:a8:c9:44:0c:5a:79:45:55:c4:6e:6f:
         ca:cf:a8:40:3a:d8:9e:5d:12:4f:ad:ee:07:13:45:e6:c4:d1:
         8e:33:63:5c:bd:74:12:95:fe:ae:f7:bf:cb:6a:eb:44:22:1e:
         38:36:75:b8:5a:ea:70:45:a2:46:d8:63:61:35:e8:3c:b9:ba:
         de:f1:d4:47:81:0a:39:c4:e4:d9:0d:fa:7e:26:af:b1:03:92:
         77:c1:85:b0:5d:70:3e:9a:38:78:90:a4:26:f6:67:d9:51:dc:
         0f:d2:05:e9:73:73:94:7a:98:eb:58:83:74:f6:49:61:74:97:
         66:49:5a:ce:36:a3:d4:07:d2:27:66:dd:e5:eb:97:3d:64:31:
         f0:7e:f6:f6:1b:b2:e4:ea:16:4c:33:f8:c4:84:ec:0b:91:1b:
         3e:af:eb:8b:e3:9b:c6:4a:a1:ad:92:16:64:34:83:0b:f6:df:
         d3:a1:20:05:52:3b:0c:4d:38:c3:01:38:ad:9e:bc:ad:0c:1d:
         4e:4f:5f:98:36:53:36:5d:2c:83:7d:65:44:39:08:c0:ef:f8:
         98:80:ad:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:07:44 2026 by rpki-client