This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e203535393333.roa
File:                     3130332e3131382e3231322e302f32322d3234203d3e203535393333.roa (raw, json)
Hash identifier:          TB9HchTGYrKw5TljusvC1iRR7xCJI33MoQfHs0C3mYo=
Subject key identifier:   22:73:90:B0:FD:0D:82:53:BE:B3:E9:9B:B4:53:A8:C1:01:7E:07:13
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       1992060A994B5B83AA1249205A7D5CA92010E670
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e203535393333.roa
Signing time:             Tue 20 Jan 2026 02:09:38 +0000
ROA not before:           Tue 20 Jan 2026 02:04:38 +0000
ROA not after:            Tue 19 Jan 2027 02:09:38 +0000
asID:                     55933
IP address blocks:        103.118.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:92:06:0a:99:4b:5b:83:aa:12:49:20:5a:7d:5c:a9:20:10:e6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:38 2026 GMT
            Not After : Jan 19 02:09:38 2027 GMT
        Subject: CN=227390B0FD0D8253BEB3E99BB453A8C1017E0713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7c:83:a4:bd:a3:c6:bc:90:3c:d6:59:9a:52:
                    3a:b2:d4:4c:7a:52:97:70:01:0d:0d:ed:6d:58:bb:
                    67:b9:5a:68:a2:9a:e8:b1:b4:17:12:47:8e:06:64:
                    62:4c:3b:4c:19:69:3c:ef:86:a5:13:5e:ea:0d:74:
                    59:41:68:fb:d6:42:bf:82:60:0c:3f:a5:d0:ae:ef:
                    f5:5b:3c:97:19:8b:87:10:bd:98:9c:98:93:16:7a:
                    ad:77:b0:27:39:f3:1b:2d:1e:81:91:49:57:65:b9:
                    26:3e:51:3c:78:6e:b6:51:51:bb:bd:c8:0a:81:69:
                    b9:44:ab:15:9d:b6:4d:68:5b:b6:fa:39:19:60:9d:
                    d7:96:c1:28:02:43:1c:87:dd:d8:ea:ac:7a:6b:aa:
                    7c:40:16:11:7c:65:fd:07:18:34:03:fd:8c:cc:11:
                    67:71:76:d2:ca:2c:ee:66:62:6a:ba:43:98:f4:72:
                    d4:32:c3:5b:ba:65:4d:f8:ac:7d:b8:01:8a:61:55:
                    d2:57:4c:5b:2f:3b:7d:9b:20:61:b1:f1:a6:b2:3d:
                    d6:99:08:31:71:fc:df:b5:61:b9:e3:f5:94:3f:11:
                    4e:6a:08:ca:f7:4b:8b:51:08:16:9d:3a:18:21:0a:
                    3b:4c:d6:79:d4:75:02:4b:30:16:e7:12:78:e3:04:
                    8e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:73:90:B0:FD:0D:82:53:BE:B3:E9:9B:B4:53:A8:C1:01:7E:07:13
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e203535393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:7d:5d:6c:fc:ca:e4:25:13:0c:c8:66:f4:1a:30:f7:a5:d3:
         87:e6:f2:8c:cf:c3:a5:46:24:f3:34:31:86:59:2b:07:f2:5c:
         54:56:aa:90:a9:11:3c:ad:3e:f9:57:3b:3e:5d:cd:aa:c2:a2:
         0c:80:49:e7:1a:44:89:5e:b3:63:51:71:50:b1:a3:8a:35:de:
         2c:09:d2:30:bb:66:9c:1a:7f:97:1f:86:cb:c0:68:4d:3c:45:
         45:56:96:26:5d:44:a4:f3:d4:b8:bb:29:14:ae:7e:b4:dd:bf:
         ba:38:f8:86:bd:12:fb:a4:fe:b9:2e:28:b0:b5:16:09:36:76:
         19:6f:f8:56:39:27:86:d8:c0:e1:f1:1d:86:2e:6f:7e:3a:21:
         06:cc:61:ac:2c:be:ff:91:c5:49:8f:49:25:9e:fd:68:02:f6:
         46:86:50:2f:7f:c2:ff:dc:7d:8e:ee:60:8c:38:e6:e7:57:4b:
         14:3a:9b:95:db:8c:5d:47:36:c4:42:67:31:9f:3b:b1:13:42:
         1e:f4:96:4d:12:a5:e3:f8:4e:91:e7:67:e5:cb:93:bb:61:a6:
         01:14:a3:ed:72:49:97:46:59:2a:d4:8c:33:85:3b:56:97:9c:
         31:23:35:08:89:0c:97:2f:52:80:d4:a7:3c:66:74:d9:bf:13:
         d8:3e:34:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:55 2026 by rpki-client