This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3231362e3232392e302f32342d3234203d3e20323136303437.roa
File:                     3130332e3231362e3232392e302f32342d3234203d3e20323136303437.roa (raw, json)
Hash identifier:          o7o0p0ij4TsLeTF08OFNmrh+jINOHbFVP+H3GukEB3g=
Subject key identifier:   6E:7F:73:BE:B5:B2:58:6F:E5:91:BB:8B:FF:D3:58:09:FD:1C:D7:23
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       4FB52B2166D8D3E55EABED2B3CEDD6C471375359
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3231362e3232392e302f32342d3234203d3e20323136303437.roa
Signing time:             Tue 20 Jan 2026 02:09:33 +0000
ROA not before:           Tue 20 Jan 2026 02:04:33 +0000
ROA not after:            Tue 19 Jan 2027 02:09:33 +0000
asID:                     216047
IP address blocks:        103.216.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b5:2b:21:66:d8:d3:e5:5e:ab:ed:2b:3c:ed:d6:c4:71:37:53:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:33 2026 GMT
            Not After : Jan 19 02:09:33 2027 GMT
        Subject: CN=6E7F73BEB5B2586FE591BB8BFFD35809FD1CD723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:a3:dd:06:27:f4:b9:32:93:69:3a:a2:ee:
                    07:e2:e8:69:1c:bc:e5:1f:8d:d9:53:33:ab:97:6c:
                    ee:f3:41:51:75:2a:6a:44:1e:e0:9c:95:fc:a0:b6:
                    57:5d:61:b1:f1:cc:2e:76:11:c8:8d:96:f2:b6:7c:
                    f0:ab:32:25:75:21:76:90:fa:bb:30:d0:61:a7:af:
                    33:f7:ea:a4:b4:d2:ee:00:d2:1f:e8:f4:65:bc:d0:
                    b5:3e:ef:ed:80:20:32:e4:51:a2:ba:df:8e:9a:5b:
                    4e:33:c5:d0:ea:fb:d6:53:3c:2d:db:bc:a3:95:e3:
                    60:2c:8c:9f:88:cd:90:c4:63:6c:e8:11:24:42:d3:
                    0e:14:fd:17:8e:78:fe:f1:08:9d:92:32:31:67:3f:
                    15:da:65:27:75:cc:53:c2:24:1d:7f:92:ff:b2:8f:
                    86:dc:88:64:bf:f0:21:94:27:91:cf:6a:9a:92:88:
                    b5:b7:75:a6:c5:de:2c:f7:14:37:a9:4a:af:1c:53:
                    d4:8a:d2:86:68:a4:55:41:c9:a6:14:06:50:1e:a5:
                    86:10:31:59:97:72:ed:f9:c4:a6:24:f5:a8:4b:33:
                    7a:4f:37:34:d7:9c:df:65:55:68:cd:8e:bf:e9:e7:
                    6d:aa:9b:5c:ea:99:9d:d0:c8:0f:47:1f:5e:05:f5:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7F:73:BE:B5:B2:58:6F:E5:91:BB:8B:FF:D3:58:09:FD:1C:D7:23
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3231362e3232392e302f32342d3234203d3e20323136303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:3d:63:ef:4a:8a:b1:83:f4:d8:7b:cd:f1:6c:b8:bb:64:d9:
         95:63:d0:41:6e:0a:ed:ef:42:f9:5e:16:fe:f7:48:e4:cf:e8:
         2c:de:34:24:0b:64:aa:03:92:11:fa:b2:fa:01:49:b7:16:da:
         6c:18:95:c0:02:7f:ef:c4:ca:2d:87:c8:91:48:72:e1:eb:d8:
         bf:b9:20:7b:14:8e:36:6b:2a:20:db:d1:3b:0e:18:fa:95:a5:
         5d:10:a1:da:ae:6e:65:5a:d5:fb:0c:20:14:a2:d3:3e:36:70:
         f2:ca:6a:6a:8f:0e:f0:4b:c4:f7:9c:b6:e3:00:b4:ba:c3:52:
         66:06:42:66:c6:3c:05:3b:81:1d:e0:ae:4c:57:26:38:8a:8e:
         43:a5:44:d1:94:92:b6:be:97:dc:74:09:91:0f:31:ae:f3:f0:
         c4:4d:01:8b:3e:62:5c:32:6b:0b:6f:c3:b1:7e:4a:7f:ec:fb:
         6d:fc:d1:51:22:8b:89:ec:64:5e:36:b2:26:53:12:3f:8f:c4:
         6d:ef:39:a8:ec:5a:3a:48:f6:78:21:61:19:43:1b:0b:9c:b8:
         f5:ef:d4:a9:ca:c8:75:68:ee:80:52:9b:c2:e5:36:d3:0a:70:
         d7:02:57:fc:9e:9f:86:3e:1f:fe:bd:fa:0b:18:e0:f2:0c:7a:
         cd:b5:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:10:14 2026 by rpki-client