This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230382e302f32322d3234203d3e20313334383233.roa
File:                     3130332e3131382e3230382e302f32322d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          YuP+a/iEFwMOaDgMA0gKVHJj9Z2ovi1ycAiFseuZz7Y=
Subject key identifier:   9C:AF:32:A8:19:93:28:57:65:9D:2A:7D:B0:82:03:24:2B:F5:53:A2
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       6C9EBEA755971EEBED4253FC3E9961465B397D0E
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230382e302f32322d3234203d3e20313334383233.roa
Signing time:             Tue 20 Jan 2026 02:09:38 +0000
ROA not before:           Tue 20 Jan 2026 02:04:38 +0000
ROA not after:            Tue 19 Jan 2027 02:09:38 +0000
asID:                     134823
IP address blocks:        103.118.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9e:be:a7:55:97:1e:eb:ed:42:53:fc:3e:99:61:46:5b:39:7d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:38 2026 GMT
            Not After : Jan 19 02:09:38 2027 GMT
        Subject: CN=9CAF32A819932857659D2A7DB08203242BF553A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9e:b5:20:43:f6:60:fd:f2:50:af:78:5a:70:
                    36:7e:74:2d:16:c9:5a:20:ab:5b:0f:a6:5d:1d:fb:
                    45:29:e9:c4:96:18:7a:4a:24:3f:9e:25:d5:e9:d7:
                    a2:69:39:3a:62:da:26:a0:63:ee:64:db:2a:dc:a4:
                    63:0f:53:d9:33:9e:60:e7:52:df:8f:aa:5e:ca:31:
                    d7:3c:28:f0:39:9f:c5:3f:be:93:eb:84:42:ce:d7:
                    90:20:2c:5e:58:86:81:c9:9c:04:d6:ac:88:22:12:
                    50:96:0b:bb:f9:16:9e:69:fc:49:58:cc:4a:f4:bf:
                    80:e6:b0:7f:be:9c:db:5f:fb:28:dc:70:20:c2:5d:
                    7f:1a:0f:c1:95:6f:0d:e4:1f:c8:66:6f:3b:56:5a:
                    ee:a9:2e:6f:8f:ec:d2:94:84:f6:1a:24:7e:91:f1:
                    8c:29:b0:f6:7b:4f:1a:c4:06:85:1e:00:c7:7f:96:
                    5c:01:ef:fc:ce:1c:da:ea:5f:5a:42:11:c2:a9:bb:
                    7f:ce:88:b6:8e:6f:51:d6:10:02:fc:62:70:d1:97:
                    9b:51:e7:5e:7b:7a:5e:94:82:19:c6:a1:c2:ec:ed:
                    c6:0a:e4:a4:79:e8:97:51:3a:39:94:0d:95:c4:38:
                    e8:b6:7e:e6:38:37:90:a2:c5:a6:e9:a1:ec:fa:74:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AF:32:A8:19:93:28:57:65:9D:2A:7D:B0:82:03:24:2B:F5:53:A2
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3230382e302f32322d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:a8:71:34:32:38:91:4d:2e:47:c0:88:e4:5c:4d:47:e7:41:
         5a:bf:4e:74:15:98:9a:81:72:fb:50:a3:4f:9b:ac:ac:af:51:
         5c:00:20:26:ee:e9:42:9c:17:cd:8c:a2:22:c1:61:3f:ac:0d:
         19:1f:fd:da:3a:c1:58:c8:55:4b:79:0b:63:27:6f:0d:f1:46:
         bf:60:45:56:04:cf:ed:39:e7:05:e9:0f:9c:68:7b:29:d8:75:
         91:a6:7d:70:44:17:cc:24:a2:b6:f1:c5:54:23:93:f2:a4:30:
         2d:79:9c:88:f6:43:50:07:ba:a6:b5:f4:f1:61:e2:6b:90:6d:
         19:e8:a6:ae:19:f1:df:83:a1:e0:a6:90:14:af:96:8a:be:5b:
         2e:54:10:38:a1:ee:5f:bc:52:48:61:4d:86:6d:ff:9d:78:57:
         fa:62:d2:47:3f:e4:48:e1:36:0c:e0:22:18:12:dd:c8:19:f5:
         41:64:5e:45:1e:1c:74:af:c0:2f:d7:a3:de:9c:a9:b7:11:67:
         03:9c:b7:0b:a9:00:6f:74:26:48:b2:71:f7:6d:5d:9b:f3:eb:
         97:2d:a5:ee:e3:d9:37:3c:1a:86:2f:ea:54:4e:3e:2e:0e:12:
         9e:96:8e:58:bd:44:c6:7f:c6:c7:b6:82:6a:49:28:ac:6c:61:
         0b:d4:b8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:55 2026 by rpki-client