This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231362e302f32322d3234203d3e20313337353038.roa
File:                     3130332e3131382e3231362e302f32322d3234203d3e20313337353038.roa (raw, json)
Hash identifier:          VUCK+IhY9eq3TPFjEVOpIvrgrg/hlvmqtye4BVWUEsQ=
Subject key identifier:   8B:3B:19:B6:70:68:3A:C2:1A:72:C6:BD:99:96:F1:29:78:91:3F:B6
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       692A4D09FB84148F1A492156A80F479650666E98
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231362e302f32322d3234203d3e20313337353038.roa
Signing time:             Tue 20 Jan 2026 02:09:35 +0000
ROA not before:           Tue 20 Jan 2026 02:04:35 +0000
ROA not after:            Tue 19 Jan 2027 02:09:35 +0000
asID:                     137508
IP address blocks:        103.118.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2a:4d:09:fb:84:14:8f:1a:49:21:56:a8:0f:47:96:50:66:6e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:35 2026 GMT
            Not After : Jan 19 02:09:35 2027 GMT
        Subject: CN=8B3B19B670683AC21A72C6BD9996F12978913FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:03:95:84:09:35:a4:f1:cb:e8:56:e6:29:
                    5c:b2:a4:6f:dc:a4:9e:33:c0:42:45:8c:79:6a:6b:
                    d9:3e:ca:41:e0:a1:4a:fe:31:6e:db:ae:bf:25:82:
                    20:47:d7:d5:b7:4f:34:aa:89:b6:4d:ab:8a:e9:f0:
                    b8:57:7b:10:45:5d:5f:e2:71:5f:f7:9f:a7:14:23:
                    9f:33:61:6b:de:05:6f:94:81:15:36:5e:e5:22:76:
                    3c:eb:02:8b:85:1d:78:21:87:6d:66:05:93:12:3f:
                    3e:99:6b:c5:fe:2c:88:fe:6f:18:89:59:0a:58:01:
                    81:47:6e:f5:12:81:83:fc:5c:14:3d:de:b5:91:e7:
                    2c:86:8b:36:34:dc:7b:8d:b3:42:9f:08:3a:7b:29:
                    38:66:7d:62:a9:0d:7b:78:7f:a2:a7:1b:05:e0:5f:
                    d3:62:5f:6f:3e:0c:cf:a5:c8:c1:6b:b7:f2:4f:9d:
                    8e:57:fd:2d:41:a7:92:5b:9d:1b:34:8c:b3:33:b4:
                    dd:21:a3:89:11:a7:c9:7f:d0:11:33:f7:01:66:14:
                    67:ff:53:ca:b8:96:dc:8f:2a:6a:b5:b7:b6:0e:93:
                    5b:11:e7:bd:d1:48:87:70:9e:4b:df:44:c7:0d:0d:
                    c6:a3:32:bf:26:d9:83:ef:63:3a:cd:ce:97:ef:38:
                    a3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3B:19:B6:70:68:3A:C2:1A:72:C6:BD:99:96:F1:29:78:91:3F:B6
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231362e302f32322d3234203d3e20313337353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:a1:b6:d8:50:d4:24:95:0c:78:6d:62:3a:c2:0c:03:12:5f:
         c1:d6:59:f3:21:12:5f:52:49:b3:3f:32:ec:7f:88:c8:39:8d:
         1f:ca:9b:a9:e9:6b:e7:4c:4c:d7:7e:e0:38:a4:2d:f7:f7:dc:
         58:2e:9b:5b:0d:67:db:0b:b2:1c:3e:0e:3c:e3:a1:c7:3e:94:
         e5:bb:eb:f3:13:f8:c8:ba:34:26:a4:b4:01:b5:3f:14:e9:0c:
         a8:17:a4:1a:39:5e:c9:5c:1a:ab:e7:bc:4d:7c:fe:ed:d0:dd:
         a5:87:b1:7a:62:3b:89:d7:7b:e2:b6:95:73:61:93:f1:5d:b6:
         34:96:14:10:45:d0:6d:5e:ea:1e:bf:d2:a5:d5:fd:aa:c5:6e:
         29:73:dc:d1:d2:ba:99:83:3d:e6:41:c7:d2:9b:f4:e4:74:20:
         8f:82:4f:63:4c:d2:c3:a1:ef:d2:2e:d2:c3:38:b0:3a:3b:88:
         d0:26:ce:23:40:5d:fa:a2:68:0c:1c:34:ef:df:ea:d8:64:7c:
         3e:a4:8c:9f:05:4e:c5:83:92:b0:03:e3:27:da:2a:86:d9:21:
         26:c2:9c:a5:ad:1a:72:fa:d0:8f:12:39:2f:04:42:54:2f:46:
         be:96:59:38:e5:2e:d8:d8:97:20:1c:52:d9:62:16:0f:43:59:
         d3:29:cf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:56 2026 by rpki-client