This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313337353038.roa
File:                     3130332e3131382e3231322e302f32322d3234203d3e20313337353038.roa (raw, json)
Hash identifier:          E/eofEvlObVhzJwkMAr1VB54ajsZHK9XB8Kvn+bdoiY=
Subject key identifier:   C5:1D:41:98:9A:CE:1C:B2:0A:8F:AA:5C:61:C5:ED:9A:E5:E4:85:57
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       2B897DCE0296A9DA1B532C3296AFD08A8C28E81B
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313337353038.roa
Signing time:             Tue 20 Jan 2026 02:09:38 +0000
ROA not before:           Tue 20 Jan 2026 02:04:38 +0000
ROA not after:            Tue 19 Jan 2027 02:09:38 +0000
asID:                     137508
IP address blocks:        103.118.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:89:7d:ce:02:96:a9:da:1b:53:2c:32:96:af:d0:8a:8c:28:e8:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:38 2026 GMT
            Not After : Jan 19 02:09:38 2027 GMT
        Subject: CN=C51D41989ACE1CB20A8FAA5C61C5ED9AE5E48557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5f:40:9c:ae:72:38:b9:41:d4:6d:ac:58:c3:
                    97:e4:37:76:06:3a:04:6b:51:f9:bf:a2:83:10:f0:
                    1e:16:18:02:7b:e7:2f:6b:f2:bd:c0:72:af:cf:b9:
                    38:54:98:91:d8:a3:29:f2:e7:ca:0b:39:8b:51:c1:
                    16:cd:fd:93:8c:07:67:1a:68:ae:64:83:7c:ec:1e:
                    5f:1c:e8:53:b6:1a:02:c6:5f:da:a3:5f:59:2a:1d:
                    aa:55:77:30:70:d6:ee:fc:e2:57:a2:3b:f6:bc:9d:
                    42:12:09:84:f6:4d:38:a0:41:bc:a0:2f:18:41:17:
                    49:75:8b:f4:ce:62:92:91:fe:b5:34:f3:18:b2:ea:
                    20:7a:87:50:ad:cd:c5:6b:f4:38:08:49:da:40:1b:
                    70:cd:75:b0:a6:39:4f:e1:95:6f:4b:c5:af:64:f2:
                    2f:73:5d:d0:78:2a:2a:1e:23:7a:3f:9a:46:8a:35:
                    4e:08:e6:61:94:46:99:17:8a:69:12:b2:27:5b:f3:
                    0c:a6:9e:22:fd:14:09:2e:b5:cc:16:ec:bf:3d:4f:
                    47:64:26:bb:6d:4b:d9:ff:09:23:4e:bb:3c:62:10:
                    38:53:7a:0f:f4:df:fd:f8:a4:4b:74:4d:b9:e5:a8:
                    3d:01:79:0d:5f:44:c3:7f:a9:ba:1f:6e:7c:7e:9d:
                    63:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1D:41:98:9A:CE:1C:B2:0A:8F:AA:5C:61:C5:ED:9A:E5:E4:85:57
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313337353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:76:da:b4:a5:33:dc:b8:d9:d2:17:54:74:5f:59:2e:d8:4b:
         3a:d3:63:38:0b:b8:f4:d3:1a:43:ee:a1:49:f9:83:62:1a:b0:
         03:09:69:ee:42:fe:ae:1f:69:52:25:05:e0:fe:2f:9c:d0:08:
         13:0a:47:65:09:08:29:a5:1e:0e:57:88:8a:48:61:37:e9:e9:
         79:79:2a:89:d4:31:bf:bf:fe:16:c1:25:49:30:74:dd:6c:c3:
         86:f8:e7:43:a0:9f:f1:55:94:62:97:4e:6e:b5:a8:8a:52:9e:
         bc:e1:d2:28:8e:f0:a0:f9:40:8f:4f:b2:65:74:fd:60:b1:7d:
         71:2b:4f:43:b1:ee:17:6e:34:2b:74:5d:01:38:23:96:c5:02:
         23:51:a7:c7:ea:eb:3c:57:eb:2e:8b:25:aa:7f:23:53:25:b9:
         d3:ef:50:e0:f9:5b:7f:12:bf:c7:f6:b4:6e:88:4c:16:78:01:
         e4:11:90:8b:0a:c4:dc:dc:37:82:4e:a3:20:a4:b1:40:d6:7b:
         8d:fa:ef:77:f3:83:7f:18:c6:98:5a:ea:cb:af:df:e5:d0:aa:
         cc:67:7a:6b:b1:2f:50:ca:d5:0e:4c:c2:53:c3:71:c1:75:0f:
         2e:e9:45:e1:d1:01:79:5c:cb:2f:02:e4:d4:91:27:4d:8d:9b:
         18:ac:25:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:56 2026 by rpki-client