This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234322e302f32342d3234203d3e203531383437.roa
File:                     3130332e3131382e3234322e302f32342d3234203d3e203531383437.roa (raw, json)
Hash identifier:          JuMYlPwJ3wr4YON4Zth8mwy2viiyClm8MMEs0RciRsA=
Subject key identifier:   F1:65:21:DD:00:6E:D8:4C:AE:B6:DA:FD:EE:A7:C2:65:EC:D5:A9:21
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       30A3147AC0E1E944841D8F77F02364F2CA4F9880
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234322e302f32342d3234203d3e203531383437.roa
Signing time:             Tue 20 Jan 2026 02:09:39 +0000
ROA not before:           Tue 20 Jan 2026 02:04:39 +0000
ROA not after:            Tue 19 Jan 2027 02:09:39 +0000
asID:                     51847
IP address blocks:        103.118.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a3:14:7a:c0:e1:e9:44:84:1d:8f:77:f0:23:64:f2:ca:4f:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:39 2026 GMT
            Not After : Jan 19 02:09:39 2027 GMT
        Subject: CN=F16521DD006ED84CAEB6DAFDEEA7C265ECD5A921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:7f:3b:82:5f:19:a0:9c:7a:92:01:0e:f1:
                    2e:85:6e:fb:7a:3e:e3:03:40:b2:10:09:93:b5:8b:
                    ba:2d:1a:3a:f0:6c:fd:33:70:55:3f:12:d3:a2:3c:
                    18:b1:65:f4:6e:8e:34:66:d8:f0:19:22:a2:28:78:
                    49:6a:fd:02:5b:db:0b:30:9f:1d:6c:76:d8:ac:92:
                    ab:a3:18:41:3c:c9:aa:24:a7:91:2b:6f:f6:46:2a:
                    8b:34:3e:48:af:4a:29:b2:f8:85:fd:4d:f1:bc:19:
                    77:49:cb:07:47:18:4a:07:1c:bb:54:71:f7:75:04:
                    9b:a9:5f:c8:1d:b5:96:7b:89:cb:01:47:ee:7f:8a:
                    18:e2:4c:94:af:ad:68:fe:d7:d8:e2:8d:fd:83:fe:
                    5f:c5:d8:95:2f:af:03:98:74:c5:1d:af:22:1c:b6:
                    43:4e:e5:9f:20:10:5f:26:e9:2b:83:d7:5f:35:38:
                    7d:34:59:75:8c:39:d1:96:f9:c5:b4:b5:6e:6d:ca:
                    16:12:74:dc:3c:b3:6f:57:31:da:3f:07:4b:00:43:
                    68:32:ef:32:65:1b:2a:2b:be:8b:22:36:ea:35:6b:
                    84:f1:18:52:bc:c7:54:06:0b:1b:1f:f0:2c:7b:15:
                    d7:4f:6c:2c:5e:81:2c:fc:04:17:68:c5:5f:98:85:
                    64:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:65:21:DD:00:6E:D8:4C:AE:B6:DA:FD:EE:A7:C2:65:EC:D5:A9:21
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234322e302f32342d3234203d3e203531383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:ec:50:cc:8c:c0:49:95:0b:53:e4:ba:e6:55:11:3a:f1:d5:
         48:e7:3d:9c:29:67:10:3a:24:dc:57:89:3f:54:f5:73:43:39:
         74:8a:17:19:bf:91:c9:1d:65:ba:d9:43:66:e3:a8:f0:4b:da:
         f9:d4:c6:0a:b7:07:a5:45:9f:64:16:ec:d9:34:11:b1:44:cd:
         45:43:16:cc:4a:21:68:4d:e0:83:c1:1a:f2:d8:6a:7f:e2:51:
         5d:a0:72:14:3f:d7:6e:5a:53:67:70:43:75:06:37:d3:95:55:
         12:63:f8:fa:67:01:cc:95:e8:25:52:5f:57:97:5a:a2:17:2c:
         dc:ef:0a:3b:c2:e8:51:9d:03:d8:e0:1f:89:32:39:2c:3d:8a:
         f5:53:6e:49:bb:06:9c:4f:fc:45:b8:69:a9:b5:86:d3:aa:d0:
         74:e2:d9:7a:30:02:f9:ef:a3:a1:77:73:3c:04:9c:82:1e:05:
         ff:34:35:ce:be:16:ef:72:5c:83:e4:57:4d:51:1b:ad:fb:8f:
         46:fc:e4:58:b1:be:d9:3c:9a:e9:0e:23:d9:8f:99:74:ad:cb:
         bc:03:9c:a7:49:2b:9e:da:59:f2:00:d8:ce:1b:d8:9d:24:34:
         a5:fe:c5:0c:5b:66:f3:0e:ff:16:ac:ab:00:17:01:d7:87:1f:
         eb:b3:15:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:21 2026 by rpki-client