This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136342e302f32322d3234203d3e20393637.roa
File:                     3130332e3133322e3136342e302f32322d3234203d3e20393637.roa (raw, json)
Hash identifier:          BdI4kVzKsLmnuz5lIQN1pNS7salYDCWs1bt7UuToHMM=
Subject key identifier:   BC:9E:DF:D0:8C:3C:2C:43:81:8A:FA:EE:AD:78:51:28:11:53:C3:04
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       531E29017C764E4B0D543B9D1E390D088284C351
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136342e302f32322d3234203d3e20393637.roa
Signing time:             Tue 20 Jan 2026 02:09:35 +0000
ROA not before:           Tue 20 Jan 2026 02:04:35 +0000
ROA not after:            Tue 19 Jan 2027 02:09:35 +0000
asID:                     967
IP address blocks:        103.132.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1e:29:01:7c:76:4e:4b:0d:54:3b:9d:1e:39:0d:08:82:84:c3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:35 2026 GMT
            Not After : Jan 19 02:09:35 2027 GMT
        Subject: CN=BC9EDFD08C3C2C43818AFAEEAD7851281153C304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:a6:0b:8f:0b:36:b4:a0:7a:cb:58:9a:aa:
                    db:5f:53:c6:24:ca:fa:7a:be:7e:14:e2:38:51:29:
                    da:f0:53:91:ce:91:f6:fe:47:6d:26:cd:a2:c8:f0:
                    e7:46:7a:a0:be:b7:3c:f2:c6:ec:70:01:f1:5e:b3:
                    a9:2f:3e:22:35:ea:6c:2d:9f:aa:ec:a0:6d:de:7e:
                    9c:84:3e:64:3c:ed:30:fc:d5:c0:8c:c0:aa:09:60:
                    db:e2:44:86:9a:7b:4e:50:47:b6:b6:ba:da:5d:de:
                    df:73:9b:db:5e:21:a9:6f:0b:37:86:a5:15:19:21:
                    83:ea:93:d1:2f:25:f4:47:f6:12:47:ac:7b:c1:fd:
                    90:4c:d7:ae:3c:ae:b5:a9:91:22:fb:79:33:2c:3c:
                    76:a0:97:81:d6:32:10:35:4a:92:49:cd:df:78:ea:
                    6a:0c:b6:6b:c4:de:89:be:59:3f:b3:a2:17:83:78:
                    f0:ed:14:a6:10:92:f2:1f:e8:dd:55:bc:c4:3f:4b:
                    82:8c:2c:84:85:fb:f4:87:17:b1:61:8f:0c:3d:7b:
                    a2:c9:2c:b1:ed:41:88:c2:8b:7c:4e:0d:f7:a0:ec:
                    d9:0c:20:d8:4a:5c:73:d3:76:a8:f5:31:82:fc:2a:
                    7d:96:ac:28:70:74:3d:03:6e:ef:7d:98:82:6c:da:
                    81:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9E:DF:D0:8C:3C:2C:43:81:8A:FA:EE:AD:78:51:28:11:53:C3:04
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3133322e3136342e302f32322d3234203d3e20393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:d9:b3:3d:83:62:67:0b:bc:d2:6b:04:78:25:35:f1:94:55:
         05:d5:d0:94:0d:7f:b0:ee:e9:f8:d9:c2:6d:e3:d2:94:d4:11:
         7d:c6:46:5f:aa:83:d0:21:5e:30:56:d1:58:79:31:23:a8:e6:
         fb:e0:62:bd:22:2a:35:bc:0c:15:56:90:71:4f:80:11:7a:6e:
         c3:e5:8e:2d:5d:c8:85:fd:d3:4d:de:0e:ee:32:11:49:78:29:
         46:32:cd:0d:a1:52:36:a4:a7:a4:c7:39:1b:29:20:6d:37:f0:
         39:7d:54:34:41:54:31:b3:3b:8e:82:13:a4:12:90:9d:c8:eb:
         b2:0e:5a:62:0d:87:3a:28:4c:e8:8a:d2:20:69:ca:53:fa:81:
         95:e2:18:ee:c6:73:fb:cf:9b:37:f1:82:7b:d5:85:6b:16:be:
         88:7b:85:fb:d2:f6:16:8e:e2:c7:4f:cf:95:f9:0d:9e:f2:85:
         c7:98:98:8e:9c:43:4e:38:3d:67:fa:d1:e7:0f:97:09:1f:79:
         41:4b:21:77:af:79:a9:6d:fb:b7:c9:d9:b0:23:68:ed:8f:01:
         dd:10:34:4c:15:a0:ce:2e:e6:6b:42:a2:0b:2d:5f:4a:90:6d:
         4d:c6:b9:b1:29:7f:b9:af:12:c2:7a:0d:09:2b:ba:4e:67:7d:
         c3:f8:41:98
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUUx4pAXx2TksNVDudHjkNCIKEw1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjAxMjAwMjA0MzVaFw0yNzAxMTkwMjA5MzVaMDMxMTAvBgNV
BAMTKEJDOUVERkQwOEMzQzJDNDM4MThBRkFFRUFENzg1MTI4MTE1M0MzMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaEqYLjws2tKB6y1iaqttfU8Yk
yvp6vn4U4jhRKdrwU5HOkfb+R20mzaLI8OdGeqC+tzzyxuxwAfFes6kvPiI16mwt
n6rsoG3efpyEPmQ87TD81cCMwKoJYNviRIaae05QR7a2utpd3t9zm9teIalvCzeG
pRUZIYPqk9EvJfRH9hJHrHvB/ZBM1648rrWpkSL7eTMsPHagl4HWMhA1SpJJzd94
6moMtmvE3om+WT+zoheDePDtFKYQkvIf6N1VvMQ/S4KMLISF+/SHF7Fhjww9e6LJ
LLHtQYjCi3xODfeg7NkMINhKXHPTdqj1MYL8Kn2WrChwdD0Dbu99mIJs2oGXAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUvJ7f0Iw8LEOBivrurXhRKBFTwwQwHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4NjE1NjgyLzAvMzEzMDMzMmUzMTMz
MzIyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM5MzYzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmeEpDANBgkqhkiG9w0BAQsFAAOCAQEAu9mzPYNiZwu80msEeCU18ZRVBdXQ
lA1/sO7p+NnCbePSlNQRfcZGX6qD0CFeMFbRWHkxI6jm++BivSIqNbwMFVaQcU+A
EXpuw+WOLV3Ihf3TTd4O7jIRSXgpRjLNDaFSNqSnpMc5GykgbTfwOX1UNEFUMbM7
joITpBKQncjrsg5aYg2HOihM6IrSIGnKU/qBleIY7sZz+8+bN/GCe9WFaxa+iHuF
+9L2Fo7ix0/PlfkNnvKFx5iYjpxDTjg9Z/rR5w+XCR95QUshd695qW37t8nZsCNo
7Y8B3RA0TBWgzi7ma0KiCy1fSpBtTca5sSl/ua8SwnoNCSu6Tmd9w/hBmA==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:07:45 2026 by rpki-client