This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3139322e302f32322d3234203d3e203535393333.roa
File:                     3130332e3131382e3139322e302f32322d3234203d3e203535393333.roa (raw, json)
Hash identifier:          EB6DsPyg+eQNf2wc7Q1VTupk3Wk3L9ZGwRkdSFnRxz8=
Subject key identifier:   91:C2:11:0C:54:F3:BE:12:8C:43:F9:26:DF:29:A9:26:2D:86:D7:A8
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       7FFC4940EF48E4C8423D6825D7FAD66ABE0F7B16
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3139322e302f32322d3234203d3e203535393333.roa
Signing time:             Tue 20 Jan 2026 02:09:37 +0000
ROA not before:           Tue 20 Jan 2026 02:04:37 +0000
ROA not after:            Tue 19 Jan 2027 02:09:37 +0000
asID:                     55933
IP address blocks:        103.118.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fc:49:40:ef:48:e4:c8:42:3d:68:25:d7:fa:d6:6a:be:0f:7b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:37 2026 GMT
            Not After : Jan 19 02:09:37 2027 GMT
        Subject: CN=91C2110C54F3BE128C43F926DF29A9262D86D7A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:8c:7d:46:7b:c3:5f:8b:4c:9b:fa:56:cf:
                    80:ee:c7:08:ca:f6:8d:64:8d:24:a2:b5:da:bb:91:
                    e8:41:77:03:ee:84:30:1e:7e:89:1c:81:a9:f3:e1:
                    3b:23:c0:b3:1d:fa:86:79:d8:4a:4d:69:18:08:2d:
                    2d:6b:3d:21:af:c3:21:fe:4a:8d:91:45:15:a2:a6:
                    bd:12:53:99:5d:4b:33:12:b3:b7:2d:33:6e:db:64:
                    af:c2:3a:d1:7d:d3:1c:c1:cc:1f:77:9b:29:82:87:
                    8e:72:76:e7:36:1b:68:6d:a8:55:d0:cf:02:6f:aa:
                    77:6d:d4:6d:2d:a8:44:79:d1:2a:20:f6:23:01:4d:
                    96:d5:f0:26:9f:09:60:f7:77:d3:34:ec:c6:bd:df:
                    e3:e3:3a:b5:ac:e1:17:e4:cc:c3:1c:6b:d7:62:8e:
                    bd:eb:90:6d:dd:d8:e2:83:d8:f5:80:d7:00:9c:44:
                    fb:ac:ab:ca:3a:fb:15:7a:c1:f6:ec:e8:d7:57:99:
                    5f:c9:94:63:da:53:f3:ea:14:a5:dd:93:aa:20:38:
                    c0:2f:d1:10:46:df:59:40:b2:ad:b3:59:7c:d1:39:
                    63:1f:4a:ee:c5:38:d2:b6:cd:b9:da:ed:74:d3:ce:
                    2c:8f:9c:c5:5b:09:ce:0e:9f:f0:af:12:be:bb:1c:
                    04:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C2:11:0C:54:F3:BE:12:8C:43:F9:26:DF:29:A9:26:2D:86:D7:A8
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3139322e302f32322d3234203d3e203535393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:b0:b7:8e:33:36:1f:12:a6:4d:69:ef:be:96:99:63:32:e7:
         dd:d7:cc:0d:98:a8:18:83:78:ba:bb:62:e4:fa:c2:0b:d6:c1:
         c7:b6:67:19:3b:c9:85:55:4f:6d:8b:e1:ce:f7:c4:7e:12:51:
         e9:00:cb:41:bc:c2:84:ae:9f:40:3a:29:7b:c9:72:fc:2d:84:
         b2:2a:48:7e:a0:f6:a1:c8:33:9b:46:b3:d5:a4:75:20:bc:bb:
         1f:13:c3:90:01:72:59:13:f0:67:b8:83:fb:9d:4b:c0:e7:ef:
         41:8e:73:1b:80:9c:2b:e9:df:22:b9:a8:d9:c0:ab:3e:c9:80:
         46:db:43:82:29:b7:26:47:7b:2a:d8:e0:1d:ca:ab:26:6f:94:
         06:18:eb:b7:ff:35:ea:da:5e:52:4c:27:eb:c7:bf:76:3c:9b:
         c5:37:22:a5:17:f4:b5:74:21:94:db:72:c8:2d:7a:13:d2:7a:
         52:c7:cc:04:8a:38:b9:4c:d4:a6:f1:f0:9c:3b:2a:a1:6d:db:
         71:2b:9d:05:55:d5:59:8d:21:fc:43:6d:d1:64:63:34:e3:bd:
         74:e8:1d:66:6d:9a:c5:5f:c2:ac:c1:c1:02:9e:b1:9e:f5:40:
         f6:c7:ee:a2:bb:08:9f:51:24:2f:99:6d:a6:1c:e2:95:ef:4d:
         ab:90:bc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:57 2026 by rpki-client