This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136302e302f32322d3234203d3e203535393333.roa
File:                     3130332e3133322e3136302e302f32322d3234203d3e203535393333.roa (raw, json)
Hash identifier:          q/zWn0QO3H3mmqTsZdO3Bb+sZLGQQR6ShXtBKCfZxu4=
Subject key identifier:   98:D6:2D:31:11:10:39:54:64:45:EB:05:F8:B2:4D:97:4D:C9:8C:10
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       477584C41D9B6BB84185FCF4D4B610D0F9CB8484
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136302e302f32322d3234203d3e203535393333.roa
Signing time:             Tue 20 Jan 2026 02:09:32 +0000
ROA not before:           Tue 20 Jan 2026 02:04:32 +0000
ROA not after:            Tue 19 Jan 2027 02:09:32 +0000
asID:                     55933
IP address blocks:        103.132.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:75:84:c4:1d:9b:6b:b8:41:85:fc:f4:d4:b6:10:d0:f9:cb:84:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:32 2026 GMT
            Not After : Jan 19 02:09:32 2027 GMT
        Subject: CN=98D62D31111039546445EB05F8B24D974DC98C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:bb:4b:76:ad:2e:a7:75:d7:3a:e0:07:cc:
                    da:a5:8f:48:e6:6d:d1:43:4c:cc:13:ed:ed:42:d4:
                    53:95:79:b2:b2:7d:30:b5:58:e6:99:0a:85:5c:7a:
                    67:fd:b7:c9:a0:ae:88:f9:8b:0c:11:eb:ae:68:6a:
                    12:23:57:c3:b3:d1:18:32:04:ba:29:ea:c4:11:4a:
                    5e:12:54:11:1b:ed:e2:9a:53:5b:96:77:92:c7:8d:
                    7d:55:47:01:e7:8b:d8:ef:33:48:c0:b5:c8:d6:13:
                    cc:9c:2e:6e:91:90:84:8a:44:c2:ed:65:78:f7:be:
                    2a:e9:c0:1d:e4:ea:7a:36:c9:3c:a2:2f:1a:0b:86:
                    70:52:3c:42:69:6d:19:b5:ad:41:c3:e4:4c:53:08:
                    a9:6e:28:10:44:7e:41:12:5b:1b:d8:8c:44:aa:70:
                    8e:18:e3:4f:91:c2:77:87:3c:d4:1c:26:68:22:8f:
                    9d:f4:81:d7:7c:74:6e:01:7e:98:ea:ec:9d:72:b1:
                    eb:3c:7d:00:3c:96:e1:d8:26:a7:4a:66:10:f0:d5:
                    53:b9:c7:f3:f0:92:a6:87:71:ed:9c:45:14:6e:63:
                    28:77:18:e6:ae:9b:ac:90:a6:4c:5b:93:dd:73:10:
                    3d:51:52:05:ac:2e:35:0c:d8:e0:d6:1c:11:3c:23:
                    f2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D6:2D:31:11:10:39:54:64:45:EB:05:F8:B2:4D:97:4D:C9:8C:10
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136302e302f32322d3234203d3e203535393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:fd:3b:b3:0f:5d:6e:53:e3:84:93:1d:bb:2a:c0:8b:6c:
         b9:b4:be:b5:db:fa:70:4a:db:08:62:c3:ab:1d:61:43:96:e0:
         0c:14:a5:cb:3d:fe:d0:d3:a5:2c:61:5f:75:99:93:f0:2d:9e:
         83:89:24:9d:f1:c8:8e:01:ae:b2:15:9d:3b:d4:c3:2c:00:51:
         68:56:c1:42:d7:71:9b:71:7d:32:b1:39:35:98:e2:87:bd:4f:
         9c:ce:bb:46:96:2a:ea:20:42:cb:97:4e:b2:be:58:87:5e:b6:
         fe:58:08:0b:79:20:b8:b5:d5:30:30:67:55:23:5f:ea:71:66:
         ea:e6:0e:50:11:cc:2e:6e:6e:60:db:96:63:e4:74:f0:a4:bb:
         08:9f:9d:e8:86:c3:25:4d:bf:55:48:35:50:65:e2:fa:c2:17:
         ff:e2:f8:be:9c:4b:2c:65:95:40:f4:da:42:60:f1:09:65:0c:
         ff:85:61:ed:7f:b9:27:be:ee:b9:4b:ce:13:91:16:fd:d6:03:
         28:91:1b:b5:1d:c1:e4:49:74:6d:3b:4c:52:26:3f:a9:78:70:
         a7:e8:c1:4e:ae:68:5b:38:92:22:e2:17:af:dc:1d:59:d1:f9:
         7b:97:ee:e1:93:46:73:22:bc:da:22:83:13:61:a0:c1:76:2a:
         eb:38:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:56 2026 by rpki-client