This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36322e302f32342d3234203d3e20313334383233.roa
File:                     3130332e3131352e36322e302f32342d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          ciRgJg0drPC/pTR+S7Ij8BoJZUoBfLOC1Yv7jsWz3yg=
Subject key identifier:   F2:6F:33:B9:90:25:4A:33:23:B5:74:7A:92:5F:B5:99:B4:E0:72:A7
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       3BB5EA00AF940F0533A1BE236D05CDA45B84933D
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36322e302f32342d3234203d3e20313334383233.roa
Signing time:             Tue 20 Jan 2026 02:09:39 +0000
ROA not before:           Tue 20 Jan 2026 02:04:39 +0000
ROA not after:            Tue 19 Jan 2027 02:09:39 +0000
asID:                     134823
IP address blocks:        103.115.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b5:ea:00:af:94:0f:05:33:a1:be:23:6d:05:cd:a4:5b:84:93:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:39 2026 GMT
            Not After : Jan 19 02:09:39 2027 GMT
        Subject: CN=F26F33B990254A3323B5747A925FB599B4E072A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:c1:77:3d:5c:b5:03:38:b9:e1:2d:9e:2f:
                    68:61:9a:32:c6:bd:76:c9:ae:6c:6e:7e:1f:cf:23:
                    36:2d:79:2e:98:36:71:68:04:5e:08:64:f9:24:1f:
                    87:4a:d2:35:de:52:6b:a3:8e:7a:78:ef:0a:68:95:
                    2d:d1:42:e7:52:29:3f:c7:53:55:b5:41:2c:6e:8b:
                    e9:2b:eb:48:25:50:57:b4:fc:78:08:ba:fc:2d:35:
                    10:19:db:58:56:14:d1:58:fa:d9:5d:df:5f:d7:3b:
                    df:cc:c4:fc:68:74:97:ce:0a:de:0b:56:68:95:74:
                    b7:f7:ba:4e:a1:e2:01:4b:f0:27:ad:2f:37:9c:74:
                    6c:2d:fa:a8:06:c9:33:c7:34:4f:36:80:ca:81:87:
                    4a:f1:f7:fa:5d:64:e6:cf:19:99:d2:f8:19:75:c7:
                    30:82:ed:d0:8e:8e:a1:4f:4a:5d:8a:98:70:1f:26:
                    b3:ba:89:a2:85:6c:1b:0c:65:5d:69:56:df:f5:40:
                    3d:11:a3:0e:2f:b9:19:41:4c:44:1d:ff:59:8c:cc:
                    ab:76:50:ee:d5:70:95:d3:05:be:ad:7e:a9:92:c5:
                    04:44:e4:33:66:24:cc:c1:7c:6c:96:6e:45:27:88:
                    eb:6b:b3:e9:09:cb:71:73:34:da:4f:39:c1:11:ec:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6F:33:B9:90:25:4A:33:23:B5:74:7A:92:5F:B5:99:B4:E0:72:A7
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36322e302f32342d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:e8:fe:a7:6f:8f:aa:9b:88:f5:7f:ea:d8:ec:29:04:69:36:
         e9:c6:62:76:fc:92:a9:02:14:71:e5:80:52:7c:7a:e5:65:13:
         3d:08:e2:d7:ea:65:35:3f:87:12:0b:e4:16:1f:37:df:ba:63:
         cc:ff:a9:fd:72:44:02:bf:7e:e5:43:75:1c:b9:cd:f0:38:11:
         96:63:47:16:0e:a7:8d:4b:47:47:5b:ca:91:ad:c3:3a:2c:45:
         dc:5a:90:5d:4e:3a:6a:1c:5b:bd:41:2f:71:ba:88:ea:d8:0d:
         41:64:57:93:4d:21:3a:86:10:fa:32:13:d1:63:90:3b:58:80:
         cf:06:94:6f:9d:6f:d7:29:ee:e0:b4:68:c6:aa:3b:b5:64:1d:
         43:41:ff:6c:93:0f:7b:56:e8:be:d2:7f:e6:da:fb:34:1e:e8:
         6d:52:5a:39:c8:aa:25:73:87:82:48:4a:f0:f2:a2:b8:dc:4a:
         bc:f9:08:a6:08:55:a3:c2:e0:a7:24:da:4e:52:17:c1:40:68:
         d4:0a:cb:26:b0:28:2e:ab:f9:a5:a4:fd:3c:ce:c8:6d:f6:8c:
         36:88:e1:e5:bd:f0:0f:25:20:55:bf:c3:11:31:ac:76:7f:d8:
         0f:ed:c1:f6:07:a7:a5:61:c6:7c:16:c1:1a:f3:ce:4b:41:4f:
         ef:d5:76:4c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUO7XqAK+UDwUzob4jbQXNpFuEkz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzlaFw0yNzAxMTkwMjA5MzlaMDMxMTAvBgNV
BAMTKEYyNkYzM0I5OTAyNTRBMzMyM0I1NzQ3QTkyNUZCNTk5QjRFMDcyQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa1cF3PVy1Azi54S2eL2hhmjLG
vXbJrmxufh/PIzYteS6YNnFoBF4IZPkkH4dK0jXeUmujjnp47wpolS3RQudSKT/H
U1W1QSxui+kr60glUFe0/HgIuvwtNRAZ21hWFNFY+tld31/XO9/MxPxodJfOCt4L
VmiVdLf3uk6h4gFL8CetLzecdGwt+qgGyTPHNE82gMqBh0rx9/pdZObPGZnS+Bl1
xzCC7dCOjqFPSl2KmHAfJrO6iaKFbBsMZV1pVt/1QD0Row4vuRlBTEQd/1mMzKt2
UO7VcJXTBb6tfqmSxQRE5DNmJMzBfGyWbkUniOtrs+kJy3FzNNpPOcER7EHRAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU8m8zuZAlSjMjtXR6kl+1mbTgcqcwHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMC8zMTMwMzMyZTMx
MzEzNTJlMzYzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM4MzIzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGdzPjANBgkqhkiG9w0BAQsFAAOCAQEAUuj+p2+PqpuI9X/q2Owp
BGk26cZidvySqQIUceWAUnx65WUTPQji1+plNT+HEgvkFh8337pjzP+p/XJEAr9+
5UN1HLnN8DgRlmNHFg6njUtHR1vKka3DOixF3FqQXU46ahxbvUEvcbqI6tgNQWRX
k00hOoYQ+jIT0WOQO1iAzwaUb51v1ynu4LRoxqo7tWQdQ0H/bJMPe1bovtJ/5tr7
NB7obVJaOciqJXOHgkhK8PKiuNxKvPkIpghVo8LgpyTaTlIXwUBo1ArLJrAoLqv5
paT9PM7IbfaMNojh5b3wDyUgVb/DETGsdn/YD+3B9genpWHGfBbBGvPOS0FP79V2
TA==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:22 2026 by rpki-client