This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230302e302f32322d3234203d3e20313338393638.roa
File:                     3130332e3131382e3230302e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier:          M0yQw7hxpZMHGmsZRp58ORjna16g6Nw53eupOYTwaCI=
Subject key identifier:   56:AE:67:8C:FB:50:40:43:34:C4:F7:83:3A:22:30:0D:43:72:4C:6E
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       184D5C6D996E5BED324C7248D02CA5BE66A8817F
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230302e302f32322d3234203d3e20313338393638.roa
Signing time:             Tue 20 Jan 2026 02:09:33 +0000
ROA not before:           Tue 20 Jan 2026 02:04:33 +0000
ROA not after:            Tue 19 Jan 2027 02:09:33 +0000
asID:                     138968
IP address blocks:        103.118.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4d:5c:6d:99:6e:5b:ed:32:4c:72:48:d0:2c:a5:be:66:a8:81:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:33 2026 GMT
            Not After : Jan 19 02:09:33 2027 GMT
        Subject: CN=56AE678CFB50404334C4F7833A22300D43724C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:b5:37:9f:7c:ab:af:c7:fe:33:b2:b6:e6:
                    a8:d6:1b:02:75:6f:29:52:b1:e5:c0:63:c4:af:0c:
                    ba:30:86:37:fb:9e:b7:51:5e:aa:25:bb:80:d9:b2:
                    4d:3a:a2:4f:d5:70:7a:dc:87:96:47:40:ee:86:65:
                    dc:ca:7d:24:96:2c:05:f6:81:90:27:15:13:48:6e:
                    cd:7b:99:f2:0e:6b:70:86:96:26:55:e4:e1:43:9c:
                    55:1a:79:73:35:0d:71:7d:0d:6e:91:d7:0f:1b:92:
                    f3:71:a7:27:d5:b6:5b:e5:52:db:5b:34:0e:e8:2f:
                    d2:02:fa:f1:ac:35:66:4d:15:7a:31:ad:b2:ab:e9:
                    ed:fb:74:e1:7e:58:a5:22:4d:f3:fb:fd:ac:89:76:
                    1d:ef:8b:54:c9:01:e7:84:df:2b:d3:b3:c0:b1:6f:
                    8d:10:c9:d6:4a:84:89:7a:75:11:88:55:e6:0e:84:
                    52:48:f5:0e:23:55:53:fc:cd:e2:a4:36:a7:df:38:
                    f0:d9:07:d7:46:3c:c1:de:a5:fa:d0:ed:cd:d4:5c:
                    34:49:69:59:f7:3e:75:74:6b:70:0e:08:e5:a9:85:
                    df:21:8f:c4:c9:6e:25:9a:9e:f7:68:ec:e0:17:8a:
                    83:96:25:6f:06:8b:c3:cd:9b:77:94:16:a6:e3:a0:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AE:67:8C:FB:50:40:43:34:C4:F7:83:3A:22:30:0D:43:72:4C:6E
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230302e302f32322d3234203d3e20313338393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:15:e5:9b:aa:c3:f1:8e:42:6a:2b:6e:5c:97:b4:7d:6f:fe:
         a9:62:70:90:f7:83:9b:e7:fb:13:6f:6d:a7:0a:12:fd:b5:3e:
         22:b1:a8:0c:fe:b2:ab:d6:c2:15:af:7e:8a:67:91:6e:4a:23:
         42:d9:f2:8f:79:c1:d8:fa:03:ef:d1:65:c7:68:74:e6:ff:26:
         c8:13:23:a1:c2:5a:76:73:1d:a4:03:51:c0:cf:34:a7:53:8e:
         b9:8f:a8:f3:b8:16:b6:46:22:46:45:4f:ba:86:00:96:e0:03:
         b3:9b:eb:54:cd:e8:c4:08:4d:12:cd:db:eb:cf:48:43:e9:71:
         a7:e6:58:b1:cd:54:97:cb:f0:dc:b9:5f:83:ac:e3:49:1e:92:
         f9:d5:66:f1:0d:3f:3d:d0:ce:11:19:8c:cc:b1:d9:47:f3:09:
         dc:a8:7b:36:df:43:9c:e1:bd:ff:ff:24:d9:1c:2e:b7:8e:0c:
         d5:19:ad:31:99:8b:48:43:19:a8:44:f9:e2:80:2d:a7:f8:0d:
         c5:7a:b2:d9:d2:43:cf:a1:aa:97:1d:22:c4:0b:da:75:4b:fe:
         f0:38:7b:eb:56:d7:91:66:c2:a4:f7:d0:c9:0e:44:51:c8:81:
         51:48:00:13:19:6c:58:90:6b:b3:1a:d9:82:5d:8a:3f:a2:15:
         3b:1f:26:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:57 2026 by rpki-client