This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234342e302f32322d3234203d3e203535393333.roa
File:                     3130332e3131382e3234342e302f32322d3234203d3e203535393333.roa (raw, json)
Hash identifier:          s2uxQ19J07d/kl7JNBHLd/VMM7yzORQ0autIjWuXTws=
Subject key identifier:   05:1A:C2:93:1B:D9:C8:C9:9C:85:B3:24:66:9A:F3:7A:12:14:25:4A
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       16EF75F9D5EC7DBD65D1DCC7944DBBC933CFDF01
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234342e302f32322d3234203d3e203535393333.roa
Signing time:             Tue 20 Jan 2026 02:09:33 +0000
ROA not before:           Tue 20 Jan 2026 02:04:33 +0000
ROA not after:            Tue 19 Jan 2027 02:09:33 +0000
asID:                     55933
IP address blocks:        103.118.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ef:75:f9:d5:ec:7d:bd:65:d1:dc:c7:94:4d:bb:c9:33:cf:df:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:33 2026 GMT
            Not After : Jan 19 02:09:33 2027 GMT
        Subject: CN=051AC2931BD9C8C99C85B324669AF37A1214254A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9b:6e:6f:82:60:96:9c:c3:dc:1f:7c:a7:14:
                    71:74:cc:8d:46:fb:a3:77:2e:f1:d9:7c:94:b6:35:
                    c6:18:d8:24:44:fa:bf:98:d0:02:cf:a3:11:7e:e2:
                    1f:e8:6e:cb:ba:69:b4:9d:fb:2d:4d:bd:19:af:77:
                    4f:6a:3c:10:8b:1b:1d:18:af:78:2f:2c:5f:3b:13:
                    a7:45:64:da:ce:24:d3:0b:08:4c:13:b4:6a:f0:aa:
                    c3:18:53:34:ac:17:85:b4:5a:1a:16:35:12:99:95:
                    eb:5d:95:8a:7b:7e:64:35:38:34:9d:14:cc:02:53:
                    b1:d1:af:22:c2:ed:fc:94:27:15:51:f8:77:6d:f0:
                    00:82:e7:f8:6b:1a:93:1b:77:59:7b:de:73:71:49:
                    41:06:07:11:fb:b4:53:d6:52:ca:54:c8:0e:79:8a:
                    91:a2:73:e7:29:16:d8:07:42:08:6b:9b:15:38:08:
                    25:66:65:6c:cc:03:d1:45:3c:0a:c0:75:5d:a2:91:
                    21:1c:51:f8:28:ea:39:1d:de:a9:80:6f:6b:b2:cc:
                    73:d4:33:3f:bd:fe:94:7d:5b:a7:44:67:ec:62:71:
                    f4:ee:42:0a:35:39:32:f6:fc:c6:59:b8:79:6a:20:
                    79:e0:da:48:91:66:0d:c0:2d:3f:5a:de:e3:e5:56:
                    86:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1A:C2:93:1B:D9:C8:C9:9C:85:B3:24:66:9A:F3:7A:12:14:25:4A
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3234342e302f32322d3234203d3e203535393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:d6:33:48:d4:10:74:be:e3:78:93:f5:27:47:f3:2e:0d:9e:
         03:3c:87:13:67:1b:a6:08:12:fd:17:e7:04:c3:8a:bc:2e:3d:
         4c:24:89:bb:c0:24:5d:f0:7f:fe:42:66:03:f5:17:e4:f8:ef:
         04:2d:b5:89:82:c4:7e:9e:70:f0:ab:f7:1d:b7:17:71:91:71:
         f6:52:19:a4:c7:64:4e:d4:3d:37:70:2e:1a:49:9d:a4:af:27:
         bf:6f:f4:a0:16:a3:68:64:06:06:d9:2d:50:a8:1a:01:26:46:
         76:08:5f:30:3e:19:8b:a6:d8:b8:6e:cf:a6:ee:02:52:58:e5:
         2f:97:a1:5e:2e:55:6b:64:2a:3e:08:50:79:89:d9:59:66:46:
         d7:49:81:d1:4a:36:95:62:3f:da:66:98:9d:bf:02:c1:10:d7:
         c2:e4:62:1d:f3:ca:e3:d6:f9:a7:ea:04:78:48:43:4c:7e:e5:
         af:f8:cd:14:a2:0d:02:b9:40:fc:48:6a:01:63:11:ac:50:59:
         86:63:cc:c1:ee:3b:78:06:9c:ba:a2:38:f6:11:2e:ef:16:b5:
         46:8d:38:aa:20:a1:65:12:f9:ba:e8:21:1d:d9:02:7b:59:01:
         b1:78:12:27:40:51:6d:d7:8b:a9:a0:d3:ce:47:a6:1f:73:19:
         d7:83:be:3d
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUFu91+dXsfb1l0dzHlE27yTPP3wEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzNaFw0yNzAxMTkwMjA5MzNaMDMxMTAvBgNV
BAMTKDA1MUFDMjkzMUJEOUM4Qzk5Qzg1QjMyNDY2OUFGMzdBMTIxNDI1NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmm25vgmCWnMPcH3ynFHF0zI1G
+6N3LvHZfJS2NcYY2CRE+r+Y0ALPoxF+4h/obsu6abSd+y1NvRmvd09qPBCLGx0Y
r3gvLF87E6dFZNrOJNMLCEwTtGrwqsMYUzSsF4W0WhoWNRKZletdlYp7fmQ1ODSd
FMwCU7HRryLC7fyUJxVR+Hdt8ACC5/hrGpMbd1l73nNxSUEGBxH7tFPWUspUyA55
ipGic+cpFtgHQghrmxU4CCVmZWzMA9FFPArAdV2ikSEcUfgo6jkd3qmAb2uyzHPU
Mz+9/pR9W6dEZ+xicfTuQgo1OTL2/MZZuHlqIHng2kiRZg3ALT9a3uPlVoZtAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUBRrCkxvZyMmchbMkZprzehIUJUowHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMC8zMTMwMzMyZTMx
MzEzODJlMzIzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNTM5MzMzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmd29DANBgkqhkiG9w0BAQsFAAOCAQEAvNYzSNQQdL7jeJP1J0fz
Lg2eAzyHE2cbpggS/RfnBMOKvC49TCSJu8AkXfB//kJmA/UX5PjvBC21iYLEfp5w
8Kv3HbcXcZFx9lIZpMdkTtQ9N3AuGkmdpK8nv2/0oBajaGQGBtktUKgaASZGdghf
MD4Zi6bYuG7Ppu4CUljlL5ehXi5Va2QqPghQeYnZWWZG10mB0Uo2lWI/2maYnb8C
wRDXwuRiHfPK49b5p+oEeEhDTH7lr/jNFKINArlA/EhqAWMRrFBZhmPMwe47eAac
uqI49hEu7xa1Ro04qiChZRL5uughHdkCe1kBsXgSJ0BRbdeLqaDTzkemH3MZ14O+
PQ==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:54 2026 by rpki-client