This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3231362e3232382e302f32342d3234203d3e2038373936.roa
File:                     3130332e3231362e3232382e302f32342d3234203d3e2038373936.roa (raw, json)
Hash identifier:          joMZB56LQ2Wg3o5JgwviUrJfpFjFCSlRd+kGvBPeqQU=
Subject key identifier:   73:D6:85:46:37:C1:CD:99:83:5B:3B:0A:13:AB:70:70:8F:10:6B:CF
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       062170166D36571F63EF20067E2ED27D8D1CCF12
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3231362e3232382e302f32342d3234203d3e2038373936.roa
Signing time:             Tue 20 Jan 2026 02:09:40 +0000
ROA not before:           Tue 20 Jan 2026 02:04:40 +0000
ROA not after:            Tue 19 Jan 2027 02:09:40 +0000
asID:                     8796
IP address blocks:        103.216.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:21:70:16:6d:36:57:1f:63:ef:20:06:7e:2e:d2:7d:8d:1c:cf:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:40 2026 GMT
            Not After : Jan 19 02:09:40 2027 GMT
        Subject: CN=73D6854637C1CD99835B3B0A13AB70708F106BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:4c:d2:01:7d:2b:1c:72:38:e4:fe:4f:b4:
                    96:3a:03:65:21:ca:04:bb:6a:34:40:0c:e1:ba:52:
                    f3:b0:d8:89:cd:e1:0c:dd:24:1a:37:77:c8:ba:ea:
                    90:c6:c0:4f:e1:34:1b:2d:59:48:cf:18:9e:86:89:
                    a3:ca:c3:9e:e1:97:af:5d:15:ad:b5:64:0c:01:78:
                    31:28:28:2d:5d:10:f0:9c:ca:8d:1d:b4:7e:72:8f:
                    dd:69:e3:02:18:63:55:ac:b9:0c:fb:b3:9c:84:95:
                    ee:7f:70:11:bf:de:76:41:c2:27:e5:bb:23:fe:3e:
                    4c:96:2c:76:9d:05:7b:76:e2:70:d9:2e:26:5a:75:
                    45:1b:c7:51:39:00:ca:ff:ae:b0:f5:04:4f:0f:56:
                    ca:24:11:1c:44:a6:3d:5b:cf:fd:83:ce:83:64:d1:
                    91:23:a1:f7:ca:ff:18:19:48:90:3d:df:85:ad:67:
                    07:cc:d9:be:32:fc:b1:69:de:8f:f7:6a:65:24:c9:
                    2d:61:ea:1a:66:0b:9e:57:c3:84:f0:f0:c5:e3:87:
                    b8:cc:ad:51:89:8e:33:1f:1b:42:cd:8c:10:77:5c:
                    51:c7:5f:f0:81:27:0b:52:1a:52:52:0f:50:ba:d5:
                    f6:8d:53:ee:f7:1f:b5:0c:a7:0c:d3:3d:65:54:25:
                    f3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D6:85:46:37:C1:CD:99:83:5B:3B:0A:13:AB:70:70:8F:10:6B:CF
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3231362e3232382e302f32342d3234203d3e2038373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:9c:61:5a:2e:97:f0:3d:1f:84:00:33:a7:0c:f8:66:37:e4:
         19:95:ef:8e:cd:d5:92:0b:5e:44:c6:f9:57:89:8e:f6:b0:44:
         d7:46:81:ff:29:4e:0d:f9:2b:7f:45:bd:89:f0:65:ea:df:a2:
         86:93:3a:a9:66:d3:c7:cd:50:52:fe:9f:ff:e6:94:7c:73:9a:
         bd:67:d1:55:e8:7b:3e:d3:16:db:77:31:49:ec:5b:46:7c:91:
         2f:ae:ba:df:3a:18:fc:c8:d2:7e:2e:f7:45:76:6c:0c:bc:fe:
         a5:66:16:0e:c1:4b:83:f8:47:29:0b:b8:c1:22:25:d0:12:62:
         00:ee:25:53:a0:91:76:2e:e7:e6:83:f4:bf:12:f7:24:56:a5:
         5c:28:e5:5c:bd:75:18:3e:aa:1d:b9:b7:76:62:70:4b:26:5e:
         b5:c4:e6:81:47:90:4f:41:e1:72:0b:e7:b0:0a:07:66:ad:e9:
         7d:be:f6:33:1e:0e:0c:77:75:13:18:fb:48:ed:d2:7e:95:7a:
         9c:a7:20:29:19:90:10:b0:22:4b:1c:0c:fc:d9:23:0b:98:91:
         64:78:91:c7:c6:7f:6a:e8:e6:03:0a:26:8f:e9:5b:0b:11:cf:
         56:5c:64:ac:e9:00:3d:e9:b8:c9:6a:fc:d1:5f:64:a0:65:5a:
         17:65:4f:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:07:44 2026 by rpki-client