This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3139362e302f32322d3234203d3e20313338393638.roa
File:                     3130332e3131382e3139362e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier:          9cR5P54DRTFd1ptWINkIumWBcpgxQv4//bxGAY3jbH4=
Subject key identifier:   9F:6C:A3:09:49:82:80:F5:E2:54:EB:6F:BB:1B:EF:C4:39:1B:D3:68
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       614A61BD8EFEFCF73F59B99B445CFF37AF88106E
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3139362e302f32322d3234203d3e20313338393638.roa
Signing time:             Tue 20 Jan 2026 02:09:35 +0000
ROA not before:           Tue 20 Jan 2026 02:04:35 +0000
ROA not after:            Tue 19 Jan 2027 02:09:35 +0000
asID:                     138968
IP address blocks:        103.118.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4a:61:bd:8e:fe:fc:f7:3f:59:b9:9b:44:5c:ff:37:af:88:10:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:35 2026 GMT
            Not After : Jan 19 02:09:35 2027 GMT
        Subject: CN=9F6CA309498280F5E254EB6FBB1BEFC4391BD368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:0f:ce:0a:f8:c4:ba:1d:7c:23:59:ef:92:
                    dc:0f:f7:a4:7b:c9:f5:ed:60:34:9a:f1:1a:bd:ef:
                    a6:28:4d:6e:76:63:0c:aa:53:d0:4e:60:60:49:2b:
                    36:93:27:1a:fc:e9:17:7f:00:18:c9:87:45:b6:d1:
                    35:89:3f:92:e4:e2:f0:c0:47:ca:a2:a4:f0:f7:75:
                    31:53:ba:30:6c:95:f2:b0:c0:f7:df:86:32:45:ea:
                    52:92:b3:c8:c0:ae:f1:66:1a:69:ac:66:a2:74:17:
                    59:73:6c:5f:10:79:34:e1:db:7e:8e:34:0f:ec:07:
                    65:6f:e7:85:d9:e0:14:c1:44:e7:a7:78:3d:c2:ee:
                    59:02:7a:75:2a:4c:04:32:57:c1:a4:a3:d1:78:65:
                    e3:68:ee:d1:70:e9:15:64:e4:21:94:a6:39:5a:47:
                    3d:8a:ca:7d:ab:bf:79:3b:1a:95:c2:72:1c:31:5e:
                    c8:74:d0:f1:51:66:e3:64:7d:bf:f6:09:f2:7f:01:
                    39:d7:ce:57:de:7e:7f:02:a2:68:85:b3:ca:5e:b6:
                    9e:b3:cb:6d:03:4d:c1:6a:6b:ee:1a:ca:8a:d6:8e:
                    c8:7e:d1:2a:6f:1a:04:d4:aa:e4:7e:5a:4d:42:b0:
                    8e:06:5e:47:ab:51:7a:06:ba:6b:24:6e:e1:3d:c8:
                    65:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6C:A3:09:49:82:80:F5:E2:54:EB:6F:BB:1B:EF:C4:39:1B:D3:68
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3139362e302f32322d3234203d3e20313338393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:c0:2c:90:37:f1:c8:87:c2:41:70:f9:2d:ed:9d:07:df:f4:
         94:09:19:47:c7:12:0c:fd:51:78:d7:c1:82:cd:8f:12:48:ac:
         1a:cb:2a:29:b0:9b:48:98:56:16:fc:7e:d0:39:8d:b1:e8:18:
         23:1f:fe:af:b7:d7:ee:92:c7:5e:b6:b9:92:3d:5f:49:61:49:
         80:10:5c:2f:ef:7f:ef:54:a4:f3:7a:f3:c5:8e:50:2c:c0:93:
         d9:9c:17:23:d6:21:e7:a7:5d:17:e9:75:e3:36:e5:59:06:6b:
         77:f4:43:d6:8e:ae:d1:e6:c0:0d:e8:2f:f2:41:28:00:57:dc:
         5e:d1:d9:98:d9:d7:06:54:78:be:cc:7d:af:ac:bb:f6:ee:af:
         ab:de:2d:3c:b9:b5:fb:e9:ee:4a:af:53:04:6f:70:e7:2f:62:
         6f:71:bb:d3:ff:af:60:cc:4a:43:90:1d:c7:88:37:78:78:04:
         6d:9c:ce:e8:38:62:13:35:3c:d7:8f:f4:8f:7b:de:19:71:8f:
         02:10:69:fd:7c:f8:4d:79:77:ff:53:87:b5:15:5c:4e:b4:b4:
         d5:91:26:ec:ba:2e:86:50:0c:e7:40:e4:21:90:fe:39:34:fb:
         1f:5d:b0:52:55:3c:68:90:a7:ae:f9:2d:e8:90:ed:36:bd:4e:
         8e:ef:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:10:12 2026 by rpki-client