This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230342e302f32322d3234203d3e20313338393638.roa
File:                     3130332e3131382e3230342e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier:          nJvnNAaQ/71/29Bjwq9dIaw15S2iAyhZ9ToSVlBIYDI=
Subject key identifier:   D3:E5:46:B3:90:C2:1D:46:80:77:F9:31:8C:77:39:8D:FA:ED:27:87
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       774B8905D22C798B2AA16B2A99CEFB882CD1809E
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230342e302f32322d3234203d3e20313338393638.roa
Signing time:             Tue 20 Jan 2026 02:09:40 +0000
ROA not before:           Tue 20 Jan 2026 02:04:40 +0000
ROA not after:            Tue 19 Jan 2027 02:09:40 +0000
asID:                     138968
IP address blocks:        103.118.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4b:89:05:d2:2c:79:8b:2a:a1:6b:2a:99:ce:fb:88:2c:d1:80:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:40 2026 GMT
            Not After : Jan 19 02:09:40 2027 GMT
        Subject: CN=D3E546B390C21D468077F9318C77398DFAED2787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:90:db:4c:7d:55:06:fb:e9:27:77:66:d7:86:
                    dc:8b:df:ba:c6:2b:3e:90:69:34:49:24:65:74:b6:
                    32:e7:7e:16:93:ab:ad:3b:ae:43:90:1d:18:6c:26:
                    7a:eb:74:06:7f:f8:1d:fb:da:4d:c1:03:5b:7e:0d:
                    42:9f:eb:0d:b2:d0:e0:57:a4:89:aa:cd:7b:f6:d5:
                    44:81:88:9f:ad:47:10:22:94:e9:88:6e:57:c5:39:
                    af:a3:ae:fc:a8:17:bd:a7:8c:09:4d:3a:ed:7a:55:
                    f8:87:dc:bb:ac:46:fb:3e:34:cf:ab:b4:db:55:8a:
                    09:c7:b2:5f:c6:9e:75:5a:8c:1c:9f:ee:eb:f5:ff:
                    0e:0f:5d:d6:97:e7:1f:97:4d:76:53:89:9f:77:e1:
                    5b:6e:33:bf:b8:64:a9:4c:be:b9:dc:05:85:5a:0b:
                    13:fa:3a:c1:7e:96:fe:1e:a3:86:4c:ad:e1:ec:47:
                    4f:a2:05:6b:6a:b7:f1:42:60:64:d6:08:4c:f7:6c:
                    37:9f:1a:ea:bb:30:71:d6:63:91:02:5b:dd:e0:18:
                    e2:eb:cd:85:19:90:21:6b:27:27:37:a7:83:f7:7e:
                    a7:2d:1a:66:15:f5:6d:9d:f0:a3:ae:90:62:11:b0:
                    ae:b8:e7:33:05:08:db:b5:dd:1e:ca:e1:94:b9:2a:
                    9d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E5:46:B3:90:C2:1D:46:80:77:F9:31:8C:77:39:8D:FA:ED:27:87
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230342e302f32322d3234203d3e20313338393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:af:24:53:59:c9:b9:51:f7:3d:80:cf:be:91:23:e6:f9:c5:
         15:5c:d6:7c:54:b8:4b:9a:b6:78:14:e8:cc:e0:53:30:0c:ae:
         a3:c1:06:fc:d1:40:f5:f5:b3:e9:49:f8:79:5d:3a:ee:b7:35:
         7e:f8:92:1c:ca:07:0d:79:30:5d:5d:cd:ed:04:82:64:9c:0a:
         25:a3:e5:18:88:e4:32:ae:ab:51:74:30:57:af:9d:8c:95:f1:
         21:da:69:4b:15:ef:22:1d:a8:41:1a:a7:51:ca:e2:cc:1d:39:
         bc:1b:5b:91:99:7c:75:20:29:31:ac:e0:78:3d:fa:15:4d:74:
         c5:69:f7:e2:6e:8a:65:b0:f9:f5:b7:2d:1e:96:8d:b3:72:09:
         30:8c:81:a0:4b:3e:c4:43:4a:cc:73:14:d6:70:e9:02:ea:d4:
         e2:d0:51:8a:07:03:dc:00:cb:f3:f4:bb:42:25:fa:cc:b8:32:
         32:7a:9a:27:11:90:3e:90:a3:b6:a7:dc:c0:ca:08:9c:5b:eb:
         ed:af:5b:d3:9a:42:31:8e:b5:88:bf:b1:63:33:1b:45:e8:6f:
         1d:34:3c:00:24:d3:73:7a:98:d1:93:db:96:2f:a1:da:ec:c1:
         a4:cf:11:3d:de:c9:1a:66:2a:92:82:66:b0:3e:44:29:59:0c:
         03:9c:fd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:56 2026 by rpki-client