This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230342e302f32322d3234203d3e20313334383233.roa
File:                     3130332e3131382e3230342e302f32322d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          dbFkgWyjy8X8GncXpxQoBFFPgTPL2kB20+CSBFEFwDM=
Subject key identifier:   F5:1A:07:B7:97:1A:0E:67:D1:95:4E:AC:BB:07:FA:77:F7:DA:0C:00
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       1F0BB53C62601DEC2F07E9F9A1FAC9EA0FBE0B19
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230342e302f32322d3234203d3e20313334383233.roa
Signing time:             Tue 20 Jan 2026 02:09:35 +0000
ROA not before:           Tue 20 Jan 2026 02:04:35 +0000
ROA not after:            Tue 19 Jan 2027 02:09:35 +0000
asID:                     134823
IP address blocks:        103.118.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0b:b5:3c:62:60:1d:ec:2f:07:e9:f9:a1:fa:c9:ea:0f:be:0b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:35 2026 GMT
            Not After : Jan 19 02:09:35 2027 GMT
        Subject: CN=F51A07B7971A0E67D1954EACBB07FA77F7DA0C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:84:9d:cd:fa:69:da:3b:91:18:85:a5:af:a7:
                    29:19:84:a5:09:c4:94:b6:f8:15:d9:eb:c2:ac:96:
                    2c:3e:a6:3c:85:8a:a5:d6:0f:c2:19:8b:4d:fb:e6:
                    9d:b4:74:43:01:62:b7:d9:ef:f7:ed:be:38:6e:0f:
                    1b:5a:d1:58:10:42:00:63:bc:2d:90:81:11:88:d3:
                    e4:ed:cf:55:35:63:26:fa:12:f3:8e:f9:23:61:93:
                    85:16:b4:a8:c4:ff:1b:c6:55:16:a5:44:41:9d:7a:
                    29:22:06:69:5c:c1:e2:a3:66:b8:25:93:01:5a:74:
                    e4:44:8a:07:b2:c0:f5:f5:35:4f:b8:f6:74:c0:19:
                    76:5a:af:d5:58:7d:88:b2:6e:8a:e5:2f:57:31:62:
                    2d:a8:c0:83:c3:2e:e9:a8:e0:6b:f9:04:31:8f:9e:
                    6e:92:e4:31:d1:21:6a:61:80:33:6a:e6:cb:18:c5:
                    ca:6d:ea:88:c7:cd:67:76:dc:a7:16:58:b6:94:be:
                    d9:2c:be:ec:f0:45:3e:53:d6:bf:52:a4:3b:15:7a:
                    ec:ed:47:18:4c:6e:0c:35:63:29:95:84:48:ee:b4:
                    0f:50:d2:97:98:55:08:85:86:a8:dd:df:2a:76:43:
                    e5:cf:8b:5b:1c:13:bf:c2:77:e7:3e:fc:3e:3c:ee:
                    60:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1A:07:B7:97:1A:0E:67:D1:95:4E:AC:BB:07:FA:77:F7:DA:0C:00
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230342e302f32322d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:5a:7d:9a:09:29:cb:bb:83:e7:65:4d:c9:bc:67:b8:20:3d:
         d5:65:0f:18:77:02:34:1d:64:6b:9e:6c:e0:22:03:e2:c7:4b:
         05:4e:ba:00:0a:cc:c9:be:87:fb:d0:fa:92:ef:36:b9:96:4a:
         84:34:97:36:e8:db:e8:ee:81:32:e3:40:ae:90:1b:3f:db:9d:
         b6:e4:20:2d:11:c0:8d:bc:33:ff:8e:8c:9e:f9:c2:26:66:8e:
         f6:e3:4a:0d:a7:61:94:94:3f:fd:13:a6:fc:92:8d:dc:5e:71:
         e2:da:e6:e3:e0:00:d2:83:fc:8f:66:af:3c:70:83:bc:b3:1d:
         47:14:a4:e2:78:76:45:c8:8c:2b:ad:44:6d:95:13:71:82:7a:
         ea:b1:4e:7f:04:49:21:39:6b:a3:f4:4a:76:df:62:09:a9:9a:
         53:8b:ad:36:e1:f9:8d:5c:af:92:44:1f:b9:1d:a1:4e:37:49:
         6a:1e:8b:bd:37:1d:5a:92:a6:f2:db:d6:77:12:07:1d:9a:ff:
         a5:b5:18:50:a9:41:d5:e2:1d:de:ce:12:2f:65:79:cf:fb:21:
         0f:63:22:83:0b:e4:d7:1e:ac:42:20:e7:da:cd:6f:76:7e:0d:
         34:5c:c3:95:cb:82:55:e7:91:48:ff:04:d5:80:01:80:81:83:
         90:5a:eb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:21 2026 by rpki-client