This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131392e302e302f32322d3234203d3e20313338393638.roa
File:                     3130332e3131392e302e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier:          zuP8utyxTcP52CIDNRzj4NwZgkyhLVMaf28/zwSErhU=
Subject key identifier:   56:8E:9E:82:54:28:6E:27:F8:78:35:38:01:60:3D:A3:00:09:91:F3
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       53AE5A55120F75F02E841CCB444A4CFDCA9E4CAD
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131392e302e302f32322d3234203d3e20313338393638.roa
Signing time:             Tue 20 Jan 2026 02:09:38 +0000
ROA not before:           Tue 20 Jan 2026 02:04:38 +0000
ROA not after:            Tue 19 Jan 2027 02:09:38 +0000
asID:                     138968
IP address blocks:        103.119.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ae:5a:55:12:0f:75:f0:2e:84:1c:cb:44:4a:4c:fd:ca:9e:4c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:38 2026 GMT
            Not After : Jan 19 02:09:38 2027 GMT
        Subject: CN=568E9E8254286E27F878353801603DA3000991F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:78:a5:06:7c:f5:3a:44:13:e4:ab:2e:a6:
                    60:35:4a:e1:79:7b:60:7d:08:ac:aa:0b:b3:d7:dd:
                    ed:4f:29:ae:e6:4b:7f:e2:8a:29:90:6b:5a:8b:01:
                    d0:fb:ea:03:51:d3:4f:41:a4:1e:48:04:10:1e:62:
                    33:78:48:67:57:0b:f9:ee:2b:81:71:27:8d:78:73:
                    12:dc:0d:61:af:6a:33:35:cb:82:5b:1d:19:26:08:
                    36:23:bb:99:82:6e:44:a0:e6:68:df:e1:cd:f7:ea:
                    73:c3:dc:be:19:57:ad:88:2f:79:53:1f:42:0f:8e:
                    af:71:02:fc:26:3e:2d:9b:12:41:8c:c5:02:9f:f7:
                    ef:11:91:fd:b1:02:1b:b7:b8:1f:b3:35:f0:2f:3f:
                    ea:32:53:9a:0c:b6:42:b1:f8:ad:b7:df:07:5f:fb:
                    b6:c4:51:ca:c4:f4:ef:11:d4:3c:f2:b2:0c:60:59:
                    d1:a2:cf:61:77:3a:c2:21:d6:80:68:fd:8d:5b:1f:
                    56:cc:5a:fe:1f:bc:ad:b4:35:79:83:22:fa:bb:92:
                    de:2e:36:3f:a4:d3:5e:bc:07:01:2b:e2:c4:4b:a0:
                    c1:99:5e:2d:79:f5:ec:24:d4:79:7f:ad:17:10:b2:
                    db:3b:70:da:1f:b7:63:1a:58:3d:0f:f2:26:e8:d0:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8E:9E:82:54:28:6E:27:F8:78:35:38:01:60:3D:A3:00:09:91:F3
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131392e302e302f32322d3234203d3e20313338393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:e8:81:ef:f7:e7:bf:77:ed:26:63:17:b3:6e:77:50:5e:a9:
         43:a2:b7:df:64:ac:f0:cc:d5:fa:2f:f0:e5:9f:b8:53:fd:8b:
         a1:15:41:4b:31:d9:71:a1:48:e1:e9:81:c9:84:1e:17:41:46:
         f4:99:f1:9a:6a:27:a9:02:a1:d0:7a:54:14:56:71:ac:82:4a:
         81:6f:64:e3:30:b1:56:f4:38:3f:39:68:1b:f6:ba:49:de:b0:
         0b:bc:8b:6f:a7:74:7e:ad:61:7b:b0:9f:c4:17:36:22:89:9a:
         78:7f:95:e6:9f:f7:47:07:a3:66:3f:ea:0d:9f:71:a1:a1:8e:
         db:65:4e:ab:49:0a:70:8b:6e:c2:19:49:de:b1:07:a7:f5:52:
         9d:d9:a3:fa:83:fb:7a:ac:25:b2:e9:73:5b:b1:10:57:8a:41:
         80:91:7e:ce:59:85:af:ea:96:ae:32:a9:1c:9d:07:11:84:e6:
         0b:d4:be:8e:a1:e7:38:ea:74:ba:32:b0:8c:39:2c:85:e2:cd:
         0f:d8:56:38:2a:49:92:70:66:51:97:16:20:78:d9:aa:78:ea:
         c0:82:95:f1:e2:fb:31:8e:b9:c8:01:b3:1a:0f:50:ee:2d:f9:
         4d:e8:e6:a9:74:54:80:c9:78:d0:66:00:6b:eb:fd:cd:5f:bc:
         65:9b:53:2c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUU65aVRIPdfAuhBzLREpM/cqeTK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzhaFw0yNzAxMTkwMjA5MzhaMDMxMTAvBgNV
BAMTKDU2OEU5RTgyNTQyODZFMjdGODc4MzUzODAxNjAzREEzMDAwOTkxRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkW3ilBnz1OkQT5KsupmA1SuF5
e2B9CKyqC7PX3e1PKa7mS3/iiimQa1qLAdD76gNR009BpB5IBBAeYjN4SGdXC/nu
K4FxJ414cxLcDWGvajM1y4JbHRkmCDYju5mCbkSg5mjf4c336nPD3L4ZV62IL3lT
H0IPjq9xAvwmPi2bEkGMxQKf9+8Rkf2xAhu3uB+zNfAvP+oyU5oMtkKx+K233wdf
+7bEUcrE9O8R1DzysgxgWdGiz2F3OsIh1oBo/Y1bH1bMWv4fvK20NXmDIvq7kt4u
Nj+k0168BwEr4sRLoMGZXi159ewk1Hl/rRcQsts7cNoft2MaWD0P8ibo0M3nAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUVo6eglQobif4eDU4AWA9owAJkfMwHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODYxNTY4Mi8wLzMxMzAzMzJlMzEz
MTM5MmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzODM5MzYzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmd3ADANBgkqhkiG9w0BAQsFAAOCAQEALuiB7/fnv3ftJmMXs253UF6p
Q6K332Ss8MzV+i/w5Z+4U/2LoRVBSzHZcaFI4emByYQeF0FG9JnxmmonqQKh0HpU
FFZxrIJKgW9k4zCxVvQ4PzloG/a6Sd6wC7yLb6d0fq1he7CfxBc2IomaeH+V5p/3
RwejZj/qDZ9xoaGO22VOq0kKcItuwhlJ3rEHp/VSndmj+oP7eqwlsulzW7EQV4pB
gJF+zlmFr+qWrjKpHJ0HEYTmC9S+jqHnOOp0ujKwjDksheLND9hWOCpJknBmUZcW
IHjZqnjqwIKV8eL7MY65yAGzGg9Q7i35TejmqXRUgMl40GYAa+v9zV+8ZZtTLA==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:23 2026 by rpki-client