This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36372e302f32342d3234203d3e20313334313736.roa
File:                     3130332e3131352e36372e302f32342d3234203d3e20313334313736.roa (raw, json)
Hash identifier:          QOGAjYZb3pQFcdhzvnj7Ed1/bo+RgAdBi/bfVZ/nYLQ=
Subject key identifier:   BD:1C:9E:0E:0F:55:9C:BF:08:33:A4:85:95:C5:1A:63:0C:F9:C5:6E
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       6EF7B2ED4A3087F1482D88A8DAD557A18AE8E4E0
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36372e302f32342d3234203d3e20313334313736.roa
Signing time:             Tue 20 Jan 2026 02:09:33 +0000
ROA not before:           Tue 20 Jan 2026 02:04:33 +0000
ROA not after:            Tue 19 Jan 2027 02:09:33 +0000
asID:                     134176
IP address blocks:        103.115.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f7:b2:ed:4a:30:87:f1:48:2d:88:a8:da:d5:57:a1:8a:e8:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:33 2026 GMT
            Not After : Jan 19 02:09:33 2027 GMT
        Subject: CN=BD1C9E0E0F559CBF0833A48595C51A630CF9C56E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:31:e8:18:a8:18:ed:02:3f:72:d2:9c:0f:
                    0f:79:1f:56:c5:84:6b:ec:b9:fc:ec:2d:42:25:37:
                    06:dc:1b:1b:62:7c:f0:c6:f9:de:cd:16:b0:24:55:
                    2a:9d:a7:ce:7c:c0:54:e2:7b:6f:06:25:e9:39:6c:
                    9c:a1:6e:02:5e:57:6f:74:25:0b:6d:ba:d3:fc:c5:
                    a6:c8:e8:5b:3b:03:69:5c:70:6d:84:09:50:b4:a4:
                    62:ac:3e:a8:bf:e0:ca:18:58:c2:54:ed:11:57:7c:
                    c8:d5:41:27:2d:6f:ab:f8:80:b5:ec:8c:f1:e9:31:
                    d7:d1:99:56:21:84:ac:64:c9:43:a6:77:81:08:f3:
                    82:34:6f:7c:f0:af:88:7b:ea:7e:10:c3:de:56:80:
                    e9:cb:f3:95:78:6b:77:06:5e:d4:3e:97:93:bc:24:
                    46:a5:aa:53:92:78:cf:39:0a:ab:55:05:21:90:5b:
                    69:ca:ba:36:19:aa:11:95:87:d7:3c:ba:29:fc:b5:
                    d6:f9:47:fe:1a:0f:96:a4:ee:02:fd:9f:92:0e:9b:
                    a9:e5:81:60:1d:d2:f1:2f:82:98:77:0f:6c:fd:60:
                    26:c8:7c:9c:d2:3d:d3:30:68:77:71:41:54:32:30:
                    bd:75:18:f5:04:61:a8:3a:4a:f8:d0:27:88:61:72:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1C:9E:0E:0F:55:9C:BF:08:33:A4:85:95:C5:1A:63:0C:F9:C5:6E
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131352e36372e302f32342d3234203d3e20313334313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:dc:10:a4:a5:2a:19:e1:ba:f5:c5:e8:73:06:69:2a:cf:c6:
         ab:07:39:c6:9a:b9:d1:d6:d7:8c:45:87:d2:20:f7:5f:5d:c1:
         b8:a7:61:72:81:0c:92:f1:45:8e:b4:6e:3b:de:a7:df:6f:35:
         7b:e0:86:92:8b:d4:a1:f0:ac:cf:d5:cc:4b:d7:cb:c7:8c:39:
         38:77:b7:de:99:1c:aa:48:37:10:50:78:43:a3:23:6c:0d:33:
         96:4c:9e:ba:7c:32:e0:94:1d:0c:7c:2d:76:93:83:3b:9e:6f:
         3b:40:58:23:ac:6b:72:d6:ef:04:9f:e0:82:35:6b:f7:b1:7e:
         1e:ba:41:77:88:60:e1:54:d1:71:ae:f1:90:48:e3:73:b2:7c:
         d8:e0:57:96:c4:2e:91:14:ff:f1:00:3e:79:b1:9a:fe:08:3f:
         0d:ce:8c:e9:be:da:5a:c0:3c:18:2f:5a:4b:07:83:83:32:ce:
         dc:71:d3:50:92:9c:69:18:d4:07:11:dd:e8:36:e4:bb:08:fb:
         79:53:f3:0d:a0:df:d0:4f:3d:89:9f:ee:e6:5d:fa:c8:f3:bf:
         00:03:e8:91:ad:b5:19:ed:72:19:d0:d3:0b:da:d8:9c:3a:d4:
         78:05:92:66:94:2d:e9:da:5f:4f:62:d3:3c:e5:b2:b5:68:ba:
         1b:cd:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:22 2026 by rpki-client