This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36342e302f32322d3234203d3e20313338393638.roa
File:                     3130332e3131352e36342e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier:          WRj67fEkddLlovRUoG5V6RH4PNYceY+jAOFFpZBhOpw=
Subject key identifier:   7C:D9:53:30:42:51:4D:46:AF:82:47:BA:20:24:4C:54:B7:D8:90:DC
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       2A2627243BE30DB97AADFA8FF341B16712EE0B1E
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36342e302f32322d3234203d3e20313338393638.roa
Signing time:             Tue 20 Jan 2026 02:09:34 +0000
ROA not before:           Tue 20 Jan 2026 02:04:34 +0000
ROA not after:            Tue 19 Jan 2027 02:09:34 +0000
asID:                     138968
IP address blocks:        103.115.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:26:27:24:3b:e3:0d:b9:7a:ad:fa:8f:f3:41:b1:67:12:ee:0b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:34 2026 GMT
            Not After : Jan 19 02:09:34 2027 GMT
        Subject: CN=7CD9533042514D46AF8247BA20244C54B7D890DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:2c:0c:b1:33:96:13:1d:f6:d9:a2:19:ff:
                    aa:2b:56:a0:fc:be:fe:a5:78:f0:fe:b8:ee:85:35:
                    fa:60:92:7d:3e:8e:cb:2c:ea:20:12:12:e2:08:64:
                    9d:20:01:18:bf:aa:37:e1:e4:af:e5:f9:d4:a5:70:
                    04:1a:22:0f:c5:32:fe:de:61:84:bd:b4:51:55:65:
                    01:c4:38:71:26:b2:fd:2c:22:37:06:19:ca:4e:57:
                    d9:fd:8f:90:c5:0a:0d:c9:cf:30:1c:c5:5f:28:d5:
                    6d:92:45:c4:37:91:50:77:4d:cc:b0:3f:df:f6:29:
                    60:6c:61:e1:fe:63:94:0c:86:22:fb:97:ce:fc:2c:
                    3a:0c:af:e3:3f:4d:a7:a5:88:d5:79:5d:e5:ae:94:
                    17:d7:9c:90:33:e0:96:88:c7:c1:a0:d0:af:d0:c2:
                    6c:68:31:21:a6:89:c2:d4:70:e2:22:b5:7e:6c:f9:
                    45:8d:b9:45:2d:54:d2:39:65:62:3f:8a:40:2e:da:
                    a3:42:e7:c2:58:57:b0:41:e7:1f:00:a6:0c:b1:05:
                    09:90:78:51:6e:c6:88:aa:55:36:f4:14:a5:9c:df:
                    5b:be:9e:3e:f7:0e:ba:7c:72:a8:7f:59:44:30:6b:
                    a1:e7:0a:ef:a7:20:7f:56:f5:fb:ee:54:65:21:ba:
                    54:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D9:53:30:42:51:4D:46:AF:82:47:BA:20:24:4C:54:B7:D8:90:DC
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36342e302f32322d3234203d3e20313338393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:da:a3:56:4d:fa:55:24:07:46:e9:81:5f:4a:7b:ff:c3:c0:
         fa:35:9e:9c:66:31:80:2e:65:e8:a7:2d:9e:61:87:4b:1d:c6:
         26:21:fb:6e:e5:e0:b1:1b:44:35:fd:48:0b:34:e6:60:97:03:
         74:70:07:cf:f9:7d:a3:39:8c:29:4b:7b:dd:30:aa:96:1c:41:
         0f:8a:33:53:46:10:7c:32:43:6b:fe:b5:3b:4b:db:8a:66:c8:
         c3:cc:07:27:00:0c:98:6a:17:05:7f:70:a1:df:49:2a:0c:56:
         04:d9:da:24:3e:9e:1a:a6:3c:31:40:35:6c:5e:3a:3f:2e:2e:
         27:cd:fe:d4:c7:43:4b:9a:fe:0f:f2:63:60:38:e1:b8:f9:a2:
         d6:03:65:20:99:b3:b5:8c:47:73:a9:f5:43:d0:a1:d0:c7:4e:
         9f:83:50:f9:74:ce:d2:e4:cb:9f:21:28:0c:e8:57:14:09:19:
         8a:df:46:a0:be:5e:98:b3:01:fe:f6:d2:96:1a:04:ee:77:0b:
         70:68:e0:d0:7e:56:a7:c2:37:09:31:f0:7f:b3:60:a0:b8:6c:
         60:45:8f:a6:7f:29:85:d8:d1:53:17:2f:64:f1:dc:93:5c:1b:
         6e:48:93:10:e6:48:46:0b:f0:2f:9e:7e:42:d9:d6:d4:5b:2c:
         42:76:b8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:20 2026 by rpki-client