This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131392e31322e302f32322d3234203d3e20313430383639.roa
File:                     3130332e3131392e31322e302f32322d3234203d3e20313430383639.roa (raw, json)
Hash identifier:          BIlnhK9081K3OfXvYriF6WxIOul10VcjwkyHAc1eVyY=
Subject key identifier:   81:FB:D9:41:E7:02:E7:1B:26:0A:A5:E6:19:21:77:E1:C4:62:2F:56
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       3615E04FFA12795342DEEFCE6C2B833EE313BBC3
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131392e31322e302f32322d3234203d3e20313430383639.roa
Signing time:             Tue 20 Jan 2026 02:09:35 +0000
ROA not before:           Tue 20 Jan 2026 02:04:35 +0000
ROA not after:            Tue 19 Jan 2027 02:09:35 +0000
asID:                     140869
IP address blocks:        103.119.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:15:e0:4f:fa:12:79:53:42:de:ef:ce:6c:2b:83:3e:e3:13:bb:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:35 2026 GMT
            Not After : Jan 19 02:09:35 2027 GMT
        Subject: CN=81FBD941E702E71B260AA5E6192177E1C4622F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:43:fe:94:70:57:b4:57:fa:5f:85:26:70:6f:
                    1b:52:9d:7b:b0:62:4d:71:ec:f7:b2:31:1c:9a:e3:
                    d3:9b:e2:c0:66:84:88:50:f8:78:63:11:75:41:27:
                    0a:6e:3f:7e:d9:3a:71:cd:c8:0f:66:16:e8:fe:aa:
                    0f:03:85:df:8e:3f:e1:57:1e:c6:08:a5:5d:bb:be:
                    26:2f:eb:8f:60:20:69:1e:9a:f3:aa:f2:01:af:08:
                    7d:9d:4c:83:0a:fc:87:ab:62:fe:56:5b:89:3c:1d:
                    3a:91:8f:7d:c9:a2:a8:ad:7b:1d:30:1d:7c:6d:50:
                    c7:80:bc:87:eb:34:1e:fb:5a:9f:2a:a7:b5:ee:11:
                    85:1e:da:ea:43:e6:f9:83:f8:86:7e:f4:74:0b:e7:
                    23:ca:93:ed:cf:e1:9d:1d:7a:8a:86:5c:e7:58:0f:
                    1f:79:12:fd:d1:f4:cd:af:6a:0d:75:eb:7a:cd:50:
                    c9:5e:7c:93:87:34:ed:e7:b4:99:be:b5:e8:58:e6:
                    d1:36:3d:24:92:c8:a0:af:57:82:1e:35:f4:24:49:
                    bb:a5:8d:d1:4a:df:f7:fe:30:5b:df:2e:0c:fd:f5:
                    76:07:25:a5:b6:56:11:a5:f0:9e:c2:ab:ef:1d:5a:
                    af:d9:e9:24:62:88:18:b8:29:d6:57:ff:69:54:31:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FB:D9:41:E7:02:E7:1B:26:0A:A5:E6:19:21:77:E1:C4:62:2F:56
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131392e31322e302f32322d3234203d3e20313430383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:69:a4:79:ad:d6:8f:48:18:f9:c1:8a:dc:e9:3d:a3:2a:f6:
         e4:c0:22:67:41:27:b6:95:65:6c:35:b9:63:50:7f:bb:d5:7e:
         9b:b6:9d:67:7b:6f:b5:55:c2:9d:c3:dd:32:e6:b5:4c:a1:bf:
         de:f5:7d:03:e9:f0:49:68:78:b5:f0:e2:fb:01:f4:69:cb:01:
         68:3f:61:c0:3d:e6:90:b7:0f:77:d5:a6:5f:a8:73:c3:3a:fb:
         8d:d9:26:cc:e7:98:dd:0a:9f:ce:95:68:5f:07:a4:26:63:21:
         b0:e6:10:52:7b:8d:bc:52:6d:d9:f0:f1:7e:46:4b:9b:3d:90:
         8b:61:2d:ad:f1:1d:48:4d:0a:07:b6:85:27:c3:d7:92:43:49:
         57:dc:db:10:35:d3:bc:36:24:14:6f:00:42:48:53:10:a2:29:
         3a:13:61:a6:ec:79:d6:07:52:37:01:d3:a0:3d:f4:63:8c:9c:
         7e:42:dc:75:42:95:8d:3e:00:b2:f2:5c:f4:cd:13:6f:90:44:
         df:c1:af:10:0b:a0:35:6e:c3:ae:14:2f:77:fd:fa:82:e3:f2:
         a6:03:8b:bf:cd:ec:06:16:fb:0f:bf:66:34:f8:1d:33:2d:d1:
         ab:34:80:d6:a2:19:8f:39:1d:14:69:f5:75:6d:85:a7:c0:64:
         7f:0a:bc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:20 2026 by rpki-client