This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313334313231.roa
File:                     3130332e3131382e3231322e302f32322d3234203d3e20313334313231.roa (raw, json)
Hash identifier:          EHIi4NXlLritT9DxD6InI0XfLdpY0y/0PZpC2NBgpX0=
Subject key identifier:   AB:2F:6D:8B:1E:8F:6F:8A:5A:76:4C:CD:35:53:A6:5E:07:68:FD:26
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       7E7256EAEBDAE1FACCBF44C39AE815CF1030E6F8
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313334313231.roa
Signing time:             Tue 20 Jan 2026 02:09:39 +0000
ROA not before:           Tue 20 Jan 2026 02:04:39 +0000
ROA not after:            Tue 19 Jan 2027 02:09:39 +0000
asID:                     134121
IP address blocks:        103.118.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:72:56:ea:eb:da:e1:fa:cc:bf:44:c3:9a:e8:15:cf:10:30:e6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:39 2026 GMT
            Not After : Jan 19 02:09:39 2027 GMT
        Subject: CN=AB2F6D8B1E8F6F8A5A764CCD3553A65E0768FD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:7a:3b:2c:7c:46:d4:46:b6:dc:41:c2:74:
                    b1:db:1d:24:f2:2d:99:58:2d:34:7c:db:5f:59:0a:
                    a6:fe:53:71:cf:0c:04:29:15:94:1d:d1:b5:b1:6f:
                    8d:5c:0f:2f:70:7c:8d:d0:ee:d6:97:a2:b5:db:8a:
                    f9:de:d3:b6:f9:2a:5f:87:2f:fd:7f:a4:fb:3f:a0:
                    54:d0:8f:0d:43:c9:18:78:76:66:9a:24:56:10:37:
                    d1:7c:42:bd:5f:b3:84:1c:2f:4f:60:92:23:d8:e0:
                    69:aa:2c:fe:5f:df:2d:51:ce:09:36:bb:f0:b5:d3:
                    01:f4:a3:08:fc:b4:1a:d8:a6:a0:ba:c0:00:92:e1:
                    b4:43:06:db:f6:73:a7:c4:e8:86:20:b7:36:09:4e:
                    a4:5d:b7:ba:87:a9:ee:3a:4a:0a:52:a1:2b:35:b2:
                    5e:1a:0d:ad:5c:13:71:28:b2:67:dd:7f:92:7a:6a:
                    fd:04:39:48:bd:e3:31:3b:d3:78:97:65:fb:21:fa:
                    8b:f8:5f:84:bd:0a:5f:bd:5c:9f:f3:dc:ae:96:d5:
                    1c:c7:81:f6:dd:99:f6:e5:42:0e:34:cc:14:dc:0b:
                    01:06:7b:30:37:89:92:f3:8e:0c:89:d7:89:4e:eb:
                    b7:53:fc:d7:5d:c5:b4:08:c2:b4:fa:02:4b:58:cb:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2F:6D:8B:1E:8F:6F:8A:5A:76:4C:CD:35:53:A6:5E:07:68:FD:26
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313334313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:3f:6d:04:69:06:a0:64:8b:ba:10:dd:10:c1:c2:86:0a:0a:
         1b:13:1a:88:40:03:37:63:26:5e:3f:29:d5:b4:7a:b4:c7:ba:
         9d:98:24:63:9b:e1:20:0c:2d:a2:c6:ea:5a:82:2d:a8:2b:70:
         21:a9:f2:ea:22:56:5d:f4:73:b4:ac:60:c9:e8:63:65:a2:24:
         e3:7a:3b:c0:22:e8:14:7f:c6:c3:ef:86:39:be:44:fc:67:c6:
         28:c3:dd:da:2c:00:a1:63:49:e2:53:ca:56:68:13:fc:5f:45:
         ba:2c:fd:9b:b3:a7:d8:93:5f:eb:6d:37:b2:4a:b8:d3:05:3d:
         98:98:c7:71:17:8b:1d:fa:11:23:74:75:e3:5a:97:a5:7d:45:
         e2:80:ea:fd:14:77:bb:b5:aa:ee:58:28:18:4a:e7:75:0b:71:
         4c:5f:5e:92:d0:33:f0:12:c5:86:88:4f:f5:aa:8a:84:d3:d6:
         c2:b8:79:59:dc:2f:02:0c:3c:5e:7d:5c:15:93:8a:8f:ac:4d:
         fb:e1:f3:dc:50:ea:e8:3a:4d:1b:1e:39:a2:24:e6:7e:e6:b6:
         49:6c:1b:e0:9a:b7:27:2e:75:5b:4c:df:74:dd:10:d0:a4:22:
         00:73:32:ef:57:00:57:46:18:3c:e8:49:9b:1a:0b:bb:57:a2:
         c6:a0:66:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:20 2026 by rpki-client