This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3235352e302f32342d3234203d3e20313334313736.roa
File:                     3130332e3131382e3235352e302f32342d3234203d3e20313334313736.roa (raw, json)
Hash identifier:          6rC8bk2avqeKmAMBNLb8A4WdHvocN76VoZ+Tr+1Fd1k=
Subject key identifier:   95:3D:91:2C:96:68:FE:85:78:E3:2D:71:A3:79:97:B2:E7:87:D4:BE
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       1A06A26862530758E22B0F9B247D55611F0194D4
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3235352e302f32342d3234203d3e20313334313736.roa
Signing time:             Thu 22 Jan 2026 08:07:08 +0000
ROA not before:           Thu 22 Jan 2026 08:02:08 +0000
ROA not after:            Thu 21 Jan 2027 08:07:08 +0000
asID:                     134176
IP address blocks:        103.118.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:06:a2:68:62:53:07:58:e2:2b:0f:9b:24:7d:55:61:1f:01:94:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 22 08:02:08 2026 GMT
            Not After : Jan 21 08:07:08 2027 GMT
        Subject: CN=953D912C9668FE8578E32D71A37997B2E787D4BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9e:ea:ef:38:7c:3e:bb:ff:c0:60:b5:9d:1f:
                    20:4d:74:d4:ae:14:07:7b:86:d2:5a:89:11:68:f4:
                    ab:09:96:3c:93:ea:ea:25:1f:b8:2f:fb:da:37:a5:
                    53:8a:a3:9b:4c:2e:a4:00:02:99:4d:56:b3:95:13:
                    bb:0d:1e:3c:d3:5e:8a:f9:a0:ed:9d:53:df:87:c4:
                    33:03:23:4b:e8:71:2d:e9:30:95:31:76:da:9a:43:
                    d8:aa:6c:47:29:1e:8f:84:bc:88:03:1f:ee:a4:09:
                    71:2e:7e:67:ee:fc:b7:9a:34:99:df:7b:3b:9f:a0:
                    20:7c:d9:a4:31:90:cd:27:51:b5:d8:47:57:62:77:
                    83:14:d9:01:25:04:7b:68:7c:f7:3c:3d:49:38:c2:
                    6b:c5:a4:2b:db:8a:6e:f6:49:ed:c4:cf:2e:2d:06:
                    4c:6f:b3:4e:8f:8d:80:13:dd:fe:ab:e6:b6:5c:99:
                    69:e6:ac:1f:8b:c8:07:56:f6:a7:60:c3:2c:78:64:
                    04:c8:53:63:ec:2b:56:c6:3d:15:56:a7:10:55:04:
                    68:52:bc:2e:21:ee:e0:53:66:6c:2b:b3:18:45:f2:
                    23:43:06:1d:08:5a:10:ae:e7:95:4b:cb:a4:89:9b:
                    66:a6:e6:1f:4f:33:2d:62:d8:39:a2:b8:43:3f:c3:
                    8c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3D:91:2C:96:68:FE:85:78:E3:2D:71:A3:79:97:B2:E7:87:D4:BE
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3235352e302f32342d3234203d3e20313334313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:b5:83:59:d8:31:a4:cc:0b:75:54:bd:6b:bf:5d:00:9a:77:
         1a:b5:15:11:8a:ce:4b:ca:ca:f0:a7:1f:36:d1:a2:c9:e6:10:
         27:87:7e:0f:21:3f:ce:fe:8b:a1:3f:a9:81:e6:f5:75:07:0b:
         a2:a4:c9:97:b2:03:65:16:84:72:15:9a:3d:6f:84:e8:d7:ab:
         5b:df:11:54:61:5e:e6:e9:03:a4:da:8b:43:e6:35:ec:ac:6a:
         ac:81:3d:6f:75:7d:ee:f0:5c:f0:1e:ef:bc:55:9e:27:f0:e2:
         df:96:35:f7:bf:a3:fc:b7:24:fb:6f:09:96:32:2f:63:a1:39:
         5e:74:2d:eb:b9:45:09:43:3f:7b:43:e8:56:20:eb:04:f7:04:
         ed:e1:c3:e2:60:d3:d2:46:32:aa:6f:39:36:64:a8:70:bc:11:
         82:20:06:2f:8f:4a:75:31:fb:bc:35:3a:2f:65:a8:a5:ed:c0:
         b5:09:2d:05:5b:05:cf:0b:ca:fc:f2:85:a7:2c:73:5c:b0:58:
         64:00:a4:e5:e0:f3:a6:7b:30:27:82:5b:3d:aa:a8:8e:53:73:
         31:74:0e:b1:7b:6b:5c:a6:ae:c1:f9:41:2c:7b:9a:eb:24:41:
         71:f5:0f:47:66:9b:d0:f2:88:74:26:5a:6e:08:1b:db:51:60:
         50:57:7e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:13:04 2026 by rpki-client