This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136342e302f32322d3234203d3e20313338393638.roa
File:                     3130332e3133322e3136342e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier:          oxZT5dOzOFHf3mzfGg6mTN0oazs+0MGmY6Etjh/7Yas=
Subject key identifier:   E5:9B:8F:28:88:1C:D1:20:26:93:31:8D:9A:C6:19:B7:E7:58:DF:9D
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       440056D816CC883659950382F5F94A9A18357CC0
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136342e302f32322d3234203d3e20313338393638.roa
Signing time:             Tue 20 Jan 2026 02:09:38 +0000
ROA not before:           Tue 20 Jan 2026 02:04:38 +0000
ROA not after:            Tue 19 Jan 2027 02:09:38 +0000
asID:                     138968
IP address blocks:        103.132.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:00:56:d8:16:cc:88:36:59:95:03:82:f5:f9:4a:9a:18:35:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:38 2026 GMT
            Not After : Jan 19 02:09:38 2027 GMT
        Subject: CN=E59B8F28881CD1202693318D9AC619B7E758DF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:37:e1:8e:f0:a4:0e:be:83:b3:01:ef:f6:ee:
                    56:2a:68:b3:7d:92:c9:fa:b0:01:ff:ab:d0:b6:52:
                    23:9e:80:47:35:70:24:ea:d0:fa:22:3f:e5:18:4c:
                    87:61:82:ec:cf:2d:e7:a8:ef:a7:22:90:42:24:b0:
                    74:ce:be:b8:40:94:22:2a:2a:ac:56:8d:fd:c8:5d:
                    75:62:e7:ce:6c:44:1f:a6:eb:4c:3b:9c:88:7f:7e:
                    bf:a7:59:49:8e:f0:eb:28:4c:20:70:05:38:8a:c6:
                    85:f0:84:c6:9f:38:09:7d:74:25:5c:2e:c5:60:d7:
                    7f:0b:8e:bd:28:af:4e:21:e1:8c:55:3c:dc:87:0e:
                    80:05:ea:d1:d7:d8:2a:8a:19:2b:da:29:e1:4f:57:
                    9c:08:31:c7:08:ff:99:8a:28:ad:03:8f:b4:26:96:
                    b2:df:e8:2b:89:73:1c:d0:d3:42:cc:44:97:79:e1:
                    63:68:6f:38:23:b3:7a:d7:82:ff:18:29:b0:de:2b:
                    b3:bf:fe:9d:d4:2e:08:91:36:5d:fc:71:5e:e4:3b:
                    c7:c7:64:ad:5c:51:1c:5e:4d:c0:f1:e5:b9:c0:75:
                    44:25:2f:95:01:97:d0:e8:7c:47:07:34:8e:c7:45:
                    98:da:dc:48:b2:88:a2:e2:24:f5:fb:2d:41:2f:1b:
                    85:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9B:8F:28:88:1C:D1:20:26:93:31:8D:9A:C6:19:B7:E7:58:DF:9D
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136342e302f32322d3234203d3e20313338393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:d6:af:75:47:c9:02:54:24:dc:a3:05:69:18:29:1f:94:d0:
         bc:7b:2f:f9:f2:35:00:b6:88:05:df:c8:8d:d4:52:2c:45:26:
         03:d7:f5:60:f9:0e:33:eb:92:74:08:64:aa:1b:af:d0:97:60:
         80:99:ba:cb:a8:47:2f:9b:f4:c6:bc:99:00:84:0c:ed:a0:5f:
         50:67:d8:48:a3:f6:c4:0f:c1:09:64:0e:e1:56:b6:0d:12:4d:
         87:e2:69:be:4b:f4:e8:af:9f:f7:59:cb:9d:a8:20:cb:1b:e5:
         5b:6f:bc:dd:71:07:1b:6e:b3:1d:d4:b6:58:6e:55:4d:2d:97:
         b5:fd:5e:40:a1:3f:14:6b:12:6a:9e:e5:05:f7:5a:b0:55:a0:
         c4:4f:11:fc:be:12:3f:2f:25:be:35:1a:f9:89:b1:de:f0:5a:
         86:02:31:2c:ce:77:de:f9:12:5a:82:0f:61:0e:91:74:87:17:
         de:a6:b2:05:4c:21:4b:38:58:c2:35:30:d3:eb:85:cc:95:df:
         5d:db:19:08:d0:fe:28:e4:64:0e:7b:17:68:8e:b7:4c:2a:f2:
         1d:d9:7d:2f:88:19:8e:55:25:e7:44:2c:9d:4f:e7:58:ea:c4:
         c6:d8:70:c0:23:03:59:5b:ac:c3:3f:16:3b:ca:c9:33:5b:85:
         e4:03:9c:a2
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIURABW2BbMiDZZlQOC9flKmhg1fMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzhaFw0yNzAxMTkwMjA5MzhaMDMxMTAvBgNV
BAMTKEU1OUI4RjI4ODgxQ0QxMjAyNjkzMzE4RDlBQzYxOUI3RTc1OERGOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVN+GO8KQOvoOzAe/27lYqaLN9
ksn6sAH/q9C2UiOegEc1cCTq0PoiP+UYTIdhguzPLeeo76cikEIksHTOvrhAlCIq
KqxWjf3IXXVi585sRB+m60w7nIh/fr+nWUmO8OsoTCBwBTiKxoXwhMafOAl9dCVc
LsVg138Ljr0or04h4YxVPNyHDoAF6tHX2CqKGSvaKeFPV5wIMccI/5mKKK0Dj7Qm
lrLf6CuJcxzQ00LMRJd54WNobzgjs3rXgv8YKbDeK7O//p3ULgiRNl38cV7kO8fH
ZK1cURxeTcDx5bnAdUQlL5UBl9DofEcHNI7HRZja3EiyiKLiJPX7LUEvG4VXAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU5ZuPKIgc0SAmkzGNmsYZt+dY350wHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4NjE1NjgyLzAvMzEzMDMzMmUz
MTMzMzIyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzODM5MzYz
OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmeEpDANBgkqhkiG9w0BAQsFAAOCAQEARNavdUfJAlQk3KMF
aRgpH5TQvHsv+fI1ALaIBd/IjdRSLEUmA9f1YPkOM+uSdAhkqhuv0JdggJm6y6hH
L5v0xryZAIQM7aBfUGfYSKP2xA/BCWQO4Va2DRJNh+Jpvkv06K+f91nLnaggyxvl
W2+83XEHG26zHdS2WG5VTS2Xtf1eQKE/FGsSap7lBfdasFWgxE8R/L4SPy8lvjUa
+Ymx3vBahgIxLM533vkSWoIPYQ6RdIcX3qayBUwhSzhYwjUw0+uFzJXfXdsZCND+
KORkDnsXaI63TCryHdl9L4gZjlUl50QsnU/nWOrExthwwCMDWVuswz8WO8rJM1uF
5AOcog==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:10:13 2026 by rpki-client