This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234332e302f32342d3234203d3e20313532393138.roa
File:                     3130332e3131382e3234332e302f32342d3234203d3e20313532393138.roa (raw, json)
Hash identifier:          aA6n6OcXV3YaZUm3/cXMydh8uuMQFDhYxVXm1N4arzw=
Subject key identifier:   FF:03:CC:2A:70:5F:36:2B:B4:88:CB:3D:FC:AC:7C:89:39:EC:74:D5
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       10F95F748BE023808D1916CB65A36837EAF6EAE0
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234332e302f32342d3234203d3e20313532393138.roa
Signing time:             Tue 20 Jan 2026 02:09:39 +0000
ROA not before:           Tue 20 Jan 2026 02:04:39 +0000
ROA not after:            Tue 19 Jan 2027 02:09:39 +0000
asID:                     152918
IP address blocks:        103.118.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f9:5f:74:8b:e0:23:80:8d:19:16:cb:65:a3:68:37:ea:f6:ea:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:39 2026 GMT
            Not After : Jan 19 02:09:39 2027 GMT
        Subject: CN=FF03CC2A705F362BB488CB3DFCAC7C8939EC74D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5b:73:60:fc:ab:24:a6:82:39:4d:49:c4:10:
                    5a:fe:20:a7:b9:0e:e7:9b:75:46:93:f3:6a:ee:5b:
                    de:a8:a2:cb:98:ed:b7:11:70:a8:a3:05:1e:96:30:
                    24:8a:f0:ed:8f:c9:22:8c:73:a0:ce:53:ef:dc:70:
                    5a:93:5e:71:62:29:30:5f:1e:54:e6:bc:9f:80:e0:
                    53:db:61:c9:b9:17:67:77:7c:40:30:eb:20:1a:f5:
                    4a:58:81:56:85:e2:fc:24:b4:69:09:e4:eb:ed:9b:
                    97:da:3d:9c:00:6b:33:68:98:fc:0d:e6:e3:21:fe:
                    40:21:ca:cf:cb:6c:a7:8f:78:0b:97:ac:80:08:63:
                    17:6a:5f:94:d8:a1:15:0e:f4:ce:17:3b:98:4a:50:
                    fa:2b:9a:5c:6c:74:d0:d1:dd:b1:6a:2e:4b:ea:5b:
                    a4:2f:44:cf:1e:cd:fb:f5:12:22:1a:ff:c7:bb:14:
                    ef:7b:8c:93:b2:59:d5:f3:7f:24:f7:c3:56:fd:5b:
                    ed:ed:26:27:ff:4a:82:eb:78:41:85:4a:be:4b:05:
                    09:8e:ea:98:9e:aa:cb:dd:a5:f3:e4:c3:c5:85:0b:
                    64:34:52:45:2a:1a:72:ad:ec:36:71:b6:21:69:60:
                    33:7c:18:a8:dd:a6:82:62:5a:be:ef:79:5e:fc:98:
                    ba:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:03:CC:2A:70:5F:36:2B:B4:88:CB:3D:FC:AC:7C:89:39:EC:74:D5
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234332e302f32342d3234203d3e20313532393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:29:d8:74:84:eb:67:cd:de:3d:f8:15:09:ab:13:7d:cd:18:
         db:be:d7:87:55:d6:f4:b9:47:b5:5c:f1:33:b8:94:b8:a3:87:
         19:d5:8c:74:a1:ac:e4:66:5a:38:16:f6:69:c6:c9:48:1d:a6:
         77:28:e8:91:27:0e:c3:f2:26:c3:3b:ca:db:69:21:6f:51:a2:
         db:dd:13:42:30:73:65:6a:22:e5:d3:48:4f:de:8b:c6:6f:df:
         ac:10:cc:8f:d3:31:c2:91:76:0d:a9:35:bd:81:c2:8c:31:9b:
         38:ed:73:6b:e2:ad:eb:59:ad:7f:9f:f5:42:6c:5d:cb:70:a3:
         39:4d:3f:8b:4b:b2:98:0d:7a:11:37:38:53:88:08:49:17:48:
         f8:41:4b:f4:3d:09:31:83:79:ce:42:b0:c6:39:22:d3:45:2b:
         74:7a:d3:0a:56:b3:53:d8:f9:3a:8d:8f:64:c1:f3:ad:1f:ab:
         6d:01:a9:2a:09:64:a3:a6:37:83:e0:ed:9f:ea:dd:a2:4a:e7:
         e8:46:b7:fd:08:fd:11:a5:d4:44:da:66:5c:27:6c:22:83:2b:
         54:99:e7:fb:4e:52:e7:49:ab:c4:85:59:fe:16:da:24:51:e9:
         c7:cd:f1:68:81:e7:84:37:5c:71:8c:4a:6d:6d:90:c7:3d:66:
         d2:80:c3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:10:12 2026 by rpki-client