This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234302e302f32322d3234203d3e20313338393638.roa
File:                     3130332e3131382e3234302e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier:          2G6KxsOjpmRiudnbBon22NaKJC5BFU2rTb7to1KDuyE=
Subject key identifier:   9F:20:2C:3A:B5:62:2F:52:95:D7:18:B3:F4:56:FE:68:D4:10:A6:02
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       765710BB0418DC531F1B8ACFF50364E1A96B5E20
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234302e302f32322d3234203d3e20313338393638.roa
Signing time:             Tue 20 Jan 2026 02:09:38 +0000
ROA not before:           Tue 20 Jan 2026 02:04:38 +0000
ROA not after:            Tue 19 Jan 2027 02:09:38 +0000
asID:                     138968
IP address blocks:        103.118.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:57:10:bb:04:18:dc:53:1f:1b:8a:cf:f5:03:64:e1:a9:6b:5e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:38 2026 GMT
            Not After : Jan 19 02:09:38 2027 GMT
        Subject: CN=9F202C3AB5622F5295D718B3F456FE68D410A602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ff:e6:23:44:f9:eb:f4:38:c0:92:d3:9d:3a:
                    3d:f5:d8:d7:db:4c:6c:d7:03:b7:49:0e:79:a0:f3:
                    fd:83:3f:54:72:15:5b:2a:48:bb:b7:44:fe:60:f8:
                    68:ee:52:00:e5:3c:91:1e:2a:3f:c8:53:27:0e:37:
                    e3:b2:07:e6:c6:ab:4f:9a:64:da:1c:91:94:41:56:
                    7f:40:b5:f8:9b:db:14:b9:f3:9f:3d:60:7d:b0:42:
                    da:ad:6a:04:79:e9:d5:5f:32:20:a0:5b:ca:0d:43:
                    ba:da:81:9e:a0:52:3d:77:05:e7:60:9b:f0:5e:cf:
                    68:7b:79:28:f8:6a:df:02:82:a8:f6:b7:ca:6f:2b:
                    bc:16:81:96:bd:43:2c:72:92:49:e3:f1:e0:04:c9:
                    23:e7:36:73:7c:11:f1:f1:64:e4:6e:05:b6:fc:25:
                    3f:26:4c:3b:c9:e0:52:09:ed:0c:92:c4:c5:ed:da:
                    2f:85:d4:e9:eb:09:ef:ba:4f:d9:9f:13:8a:9e:3c:
                    46:e5:b6:86:a5:9f:0a:a2:3a:2d:4e:04:fd:14:da:
                    fd:5e:2e:0e:48:23:36:67:79:80:ef:a3:8e:05:a4:
                    97:3a:e8:95:3b:03:43:a4:1c:7d:11:8b:8f:d6:9c:
                    de:d3:0c:83:1e:16:3d:62:95:8d:1e:e8:d4:99:ef:
                    50:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:20:2C:3A:B5:62:2F:52:95:D7:18:B3:F4:56:FE:68:D4:10:A6:02
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234302e302f32322d3234203d3e20313338393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:2a:a4:0a:2a:df:47:99:3c:bd:81:13:6b:6c:20:d5:02:91:
         cd:60:1f:f2:ab:04:8f:6e:d1:98:b0:84:f9:7b:8c:6f:1e:a2:
         7e:a9:0e:b7:ba:16:79:ba:fd:f4:bf:3b:23:1e:57:67:9b:5d:
         7f:27:00:29:3c:40:0d:28:ef:c9:e0:a0:50:4f:00:7b:5e:61:
         cc:97:4d:38:2c:14:3a:12:ff:4c:dd:88:f0:17:69:03:af:e6:
         2c:49:ea:01:06:b7:cb:52:31:39:5e:f7:54:b0:70:03:17:04:
         3c:cc:5a:bf:c3:4b:da:98:0c:51:d6:84:3a:05:7a:60:26:8e:
         69:f6:82:23:70:b7:e8:0a:88:7e:d6:84:9d:db:12:b8:09:3c:
         0f:00:f3:32:ce:4d:d2:c0:cf:42:95:b7:3c:1e:6a:f4:37:46:
         6f:95:f7:c9:1c:fc:44:78:1a:13:e2:bf:5a:47:9b:20:8b:5b:
         7f:bc:42:c1:72:76:a0:e5:98:7d:9e:ff:70:58:00:74:aa:5f:
         7c:00:71:69:46:6f:f3:3f:3a:ce:d6:29:c7:80:85:d5:95:17:
         a6:70:10:fa:44:8e:71:58:15:63:78:9e:fd:52:1c:4e:4a:0e:
         51:b0:01:24:c4:3e:60:5c:5a:99:af:ac:89:99:03:32:90:cb:
         ce:9b:f3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:10:13 2026 by rpki-client