This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e34382e302f32312d3234203d3e2034383131.roa
File:                     31342e3130332e34382e302f32312d3234203d3e2034383131.roa (raw, json)
Hash identifier:          FsKGoKtZ9oGXlVV1y8zPJP+xIUJDXi9WeQmYzwnRt8k=
Subject key identifier:   18:B4:ED:89:15:31:4B:FB:53:3E:89:4C:36:D8:B8:AA:32:32:BD:DC
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       1E5B5862CBDAFE5DEB6B961A19FE6640197D54BD
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e34382e302f32312d3234203d3e2034383131.roa
Signing time:             Tue 20 Jan 2026 02:09:44 +0000
ROA not before:           Tue 20 Jan 2026 02:04:44 +0000
ROA not after:            Tue 19 Jan 2027 02:09:44 +0000
asID:                     4811
IP address blocks:        14.103.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5b:58:62:cb:da:fe:5d:eb:6b:96:1a:19:fe:66:40:19:7d:54:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jan 20 02:04:44 2026 GMT
            Not After : Jan 19 02:09:44 2027 GMT
        Subject: CN=18B4ED8915314BFB533E894C36D8B8AA3232BDDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:78:bf:b1:71:a0:14:04:2f:d6:b0:c8:38:
                    1a:29:4f:d0:2c:0e:26:2e:86:6d:b8:b3:c5:84:33:
                    df:85:5a:fb:34:2e:34:1b:ea:05:0c:b3:81:19:64:
                    c6:50:21:47:a4:fc:d8:82:c3:99:6e:25:ea:b4:83:
                    1e:b5:00:0a:51:25:5e:f0:19:92:72:e8:01:f6:07:
                    d9:52:a1:42:a0:19:53:cc:4a:f4:dd:5e:7b:8a:86:
                    1e:fb:f6:93:ab:db:1e:e4:31:e0:a2:b4:94:f2:ac:
                    fb:7f:1e:6c:9e:0c:96:81:0e:c2:eb:fb:02:17:d2:
                    c7:1f:5f:23:86:81:83:d4:82:04:03:d9:2f:f6:a8:
                    7b:d9:ec:5d:06:07:78:e2:70:73:56:8c:30:07:dc:
                    51:13:58:e2:83:53:b1:c1:a6:1d:1e:ea:79:05:fd:
                    d5:6d:94:d5:4f:cb:10:77:87:59:d2:04:8b:d0:f9:
                    1e:d7:72:d7:e3:61:c9:8c:6d:3c:3c:cc:e2:53:2d:
                    fd:bf:ed:5f:39:bf:c9:63:4f:74:3c:ef:3e:58:38:
                    c6:87:46:c9:71:85:c1:78:d6:75:cd:11:36:fa:2f:
                    ed:2d:d7:b9:2b:4f:68:8b:df:bb:36:ff:b7:99:66:
                    a7:b1:31:87:48:06:15:eb:49:0d:a5:33:dc:5e:e7:
                    93:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B4:ED:89:15:31:4B:FB:53:3E:89:4C:36:D8:B8:AA:32:32:BD:DC
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/31342e3130332e34382e302f32312d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.103.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:92:18:54:da:a0:bb:65:17:97:9a:7c:6b:9f:30:c6:bf:79:
         2f:ff:b2:05:c9:3d:56:9c:ae:35:29:e6:c0:e1:a3:a5:73:bd:
         51:c3:9b:81:6d:bd:78:f6:0a:97:fa:c2:4c:94:a3:92:46:a0:
         38:17:43:de:a9:4c:a5:a4:d6:d6:27:d6:d2:c0:ef:a4:36:9e:
         bb:60:7c:52:90:ca:55:6b:23:0c:c1:c7:79:45:ab:87:77:0f:
         ae:f4:23:14:25:6a:03:24:7e:46:72:c6:f6:f8:9a:9b:4a:45:
         09:b6:ef:d9:0b:9f:10:8d:ba:b6:bb:b8:32:f1:2f:53:cb:ca:
         6b:fb:7d:9e:2a:16:f5:0e:e2:da:c9:92:85:21:47:ee:ea:0b:
         87:ef:4c:bd:24:fd:7e:3e:7c:e3:71:2f:c7:b2:49:49:14:6c:
         ba:a9:33:4b:b9:78:cc:df:d8:f3:66:1f:47:c8:b9:dc:9d:c5:
         cb:c1:1c:af:41:3e:27:d4:86:d5:59:d6:48:dd:f5:f6:3a:c4:
         ea:07:f8:48:60:37:f9:8b:0d:22:91:39:e5:44:77:25:3a:41:
         d9:59:4a:29:c4:f4:b9:3a:15:ef:9b:1c:db:95:cc:26:b3:7b:
         0e:2c:b4:88:b7:64:81:95:3b:f9:8f:e3:ea:79:fd:dd:f7:05:
         b3:65:c0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:35:24 2026 by rpki-client