This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136302e302f32342d3234203d3e20313337353130.roa
File:                     3130332e3133322e3136302e302f32342d3234203d3e20313337353130.roa (raw, json)
Hash identifier:          SBAH9/sU1+42SMhCvCpL9UYboktiby7rNE3bNaVORxI=
Subject key identifier:   E7:CE:40:A3:CF:56:32:08:E1:3E:CE:FF:F5:8F:3C:DD:4C:DB:B7:7C
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       3C3CC4B58BFE8D7141371652CDB5EF25D91405B4
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136302e302f32342d3234203d3e20313337353130.roa
Signing time:             Tue 20 Jan 2026 02:09:35 +0000
ROA not before:           Tue 20 Jan 2026 02:04:35 +0000
ROA not after:            Tue 19 Jan 2027 02:09:35 +0000
asID:                     137510
IP address blocks:        103.132.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3c:c4:b5:8b:fe:8d:71:41:37:16:52:cd:b5:ef:25:d9:14:05:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:35 2026 GMT
            Not After : Jan 19 02:09:35 2027 GMT
        Subject: CN=E7CE40A3CF563208E13ECEFFF58F3CDD4CDBB77C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:79:f8:58:2b:8f:f8:2b:27:2b:3e:c4:b9:
                    63:dd:31:b9:b7:62:56:6b:e8:9e:b1:04:ea:c1:fa:
                    30:55:41:60:a0:bd:1d:0c:c6:bb:10:90:7c:00:90:
                    60:92:ab:f8:7a:13:53:69:67:32:4d:95:ec:f2:24:
                    3e:f4:8a:e5:36:a6:90:0c:95:ea:a1:a4:ef:2a:d9:
                    75:23:ba:82:6d:43:f0:72:c6:17:4c:73:14:0a:61:
                    44:2e:6c:f0:11:54:56:1e:1a:06:ca:b9:14:d8:f2:
                    45:34:67:13:d8:59:63:08:0f:79:b3:29:2f:d5:4d:
                    49:d6:06:4d:a9:43:8a:5a:17:06:51:30:7b:01:65:
                    e3:4b:42:92:d8:a5:24:30:5c:f4:d4:e1:8e:84:e4:
                    e2:61:64:3f:0b:3f:1f:46:ca:68:22:9f:d4:8e:e1:
                    e3:75:26:02:5a:ff:d5:4a:7c:6d:c1:9b:48:bb:c5:
                    38:15:2c:fb:ec:d2:b4:09:f6:e2:fd:3a:60:b4:f6:
                    6c:28:30:49:4e:82:bc:a3:78:07:85:0c:23:0b:17:
                    12:cf:04:c8:f0:c1:c3:3e:1c:53:92:d7:05:ca:9d:
                    3e:14:e1:42:4e:ed:2d:07:56:7e:9d:13:31:92:23:
                    24:e3:7b:19:60:ac:af:48:cb:cb:e6:e4:65:60:68:
                    17:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CE:40:A3:CF:56:32:08:E1:3E:CE:FF:F5:8F:3C:DD:4C:DB:B7:7C
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136302e302f32342d3234203d3e20313337353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:16:c9:18:c2:f1:1a:92:d3:9a:d7:5f:8d:31:7b:3c:46:ac:
         80:3a:1a:3a:3c:49:4d:33:5c:94:a2:dc:80:da:3a:81:76:91:
         a0:3c:f6:ee:68:66:9c:d5:9a:83:41:77:0d:c4:e7:e6:bc:f1:
         4a:fc:d3:81:4d:20:68:05:3d:48:00:4e:f4:d2:49:ba:64:71:
         51:27:77:a2:d1:e4:de:3a:b2:56:1e:e0:76:66:77:e0:3f:fe:
         7b:c3:99:c7:05:e9:87:49:f7:4a:8a:14:d7:1c:cf:7d:54:81:
         2a:d4:5f:84:51:90:0b:35:a5:47:1c:7f:3c:36:6a:18:8c:66:
         60:63:c4:36:c0:41:0a:cb:1d:be:cb:9f:cf:8a:35:b7:83:0e:
         b6:98:e7:0a:74:13:2b:b3:23:c4:d3:16:10:c5:31:63:be:c1:
         51:94:29:0f:89:52:e8:6a:84:b8:db:9f:de:ec:d0:ff:a4:07:
         6f:a3:b0:3f:6a:8e:b3:3b:a1:46:5c:f2:5d:d0:c1:2a:3e:25:
         1a:df:40:64:2c:87:5b:88:b1:2a:c0:39:80:ca:2b:24:41:f2:
         ea:30:a8:6d:91:7e:5b:7b:4c:9a:88:f2:2d:5f:92:0a:c8:0d:
         2a:c0:c9:c0:64:78:ed:99:8a:4f:94:21:06:62:31:85:fd:65:
         f7:df:65:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:08:57 2026 by rpki-client