This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061645314/0/3130332e3138362e342e302f32332d3233203d3e20313436373639.roa
File:                     3130332e3138362e342e302f32332d3233203d3e20313436373639.roa (raw, json)
Hash identifier:          KnnUSl5FdwvWqZ4/LTb7QCPFknrMDu6wSlVCKOn0qY0=
Subject key identifier:   4C:4D:1A:54:A5:05:ED:6C:BC:E9:B9:FC:A0:CC:14:80:54:6F:57:8E
Certificate issuer:       /CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886
Certificate serial:       7FDD1A3E7CA511B01D14AF3F5245AA3354F17CB6
Authority key identifier: C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/3130332e3138362e342e302f32332d3233203d3e20313436373639.roa
Signing time:             Tue 20 Jan 2026 02:11:57 +0000
ROA not before:           Tue 20 Jan 2026 02:06:57 +0000
ROA not after:            Tue 19 Jan 2027 02:11:57 +0000
asID:                     146769
IP address blocks:        103.186.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:dd:1a:3e:7c:a5:11:b0:1d:14:af:3f:52:45:aa:33:54:f1:7c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886
        Validity
            Not Before: Jan 20 02:06:57 2026 GMT
            Not After : Jan 19 02:11:57 2027 GMT
        Subject: CN=4C4D1A54A505ED6CBCE9B9FCA0CC1480546F578E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f6:4c:ba:13:a1:8a:12:60:57:0c:54:73:74:
                    67:d6:be:e6:76:31:f3:9c:46:4b:d5:34:2c:2a:26:
                    06:4d:dd:12:2f:27:c0:33:8e:74:f9:1a:97:14:46:
                    ad:69:4b:38:0a:73:4d:0d:00:d0:3d:25:d5:fa:97:
                    ee:e8:cc:a4:2b:af:7c:ee:fe:0a:d2:62:a3:32:e7:
                    b5:53:66:79:b1:34:fc:7b:67:da:45:37:76:f4:28:
                    7a:36:39:77:26:74:68:ba:86:41:f6:5c:4e:c7:44:
                    da:0b:1b:ea:7c:77:bd:6c:21:2d:fd:04:05:76:70:
                    9c:6d:4a:4e:ff:17:c1:34:99:f9:41:1a:b4:aa:9c:
                    00:91:17:93:2c:20:45:12:7a:a6:10:01:d6:55:94:
                    4d:9c:e7:da:fd:bb:11:be:05:25:e0:7c:b9:4f:cd:
                    0c:c1:49:69:e2:a5:23:41:70:9d:90:e7:bf:3f:3b:
                    26:2b:fb:58:00:dc:d1:26:a2:a0:99:9a:27:7b:e5:
                    d6:47:14:b7:41:cf:49:ab:fe:39:fa:61:82:0c:90:
                    ff:08:0e:66:f7:e2:5e:3c:c2:5b:83:10:48:0c:ab:
                    97:ef:67:93:30:7a:9a:77:6e:dc:9d:2d:0e:ba:80:
                    21:16:ad:cb:4c:b5:31:33:27:ee:06:ab:ec:d4:ff:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4D:1A:54:A5:05:ED:6C:BC:E9:B9:FC:A0:CC:14:80:54:6F:57:8E
            X509v3 Authority Key Identifier:
                keyid:C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/3130332e3138362e342e302f32332d3233203d3e20313436373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:09:a9:f6:9b:f8:7e:e4:35:9f:ad:e1:7f:47:6d:e8:61:49:
         3d:03:38:62:41:c9:57:d2:c3:e4:a3:89:d6:bb:55:55:71:c1:
         ad:aa:5b:25:4e:21:69:6c:c4:b8:be:f1:6c:c2:2f:13:82:d5:
         95:77:59:5c:3d:71:48:04:56:28:b2:ed:d3:ac:b3:b9:84:ef:
         9d:d2:18:cd:46:b6:ce:17:1a:59:ca:a3:03:b3:e8:3b:b7:ae:
         1f:03:af:59:23:3d:83:df:f3:6f:62:5b:74:8d:e1:27:25:49:
         b5:f3:53:bc:2e:a1:d6:b5:f0:44:bb:ba:66:8d:6d:cf:a0:8e:
         d2:6c:6c:ab:06:81:8e:c9:de:46:19:2e:70:16:07:7d:b9:d1:
         a2:f7:2b:c8:14:0e:cf:93:8f:d5:b8:c1:de:a0:46:1c:5d:c4:
         d3:ac:83:f1:4f:e4:7c:24:8f:a0:16:52:75:97:a1:e5:37:1c:
         bf:cd:f6:6c:93:d8:78:51:7e:3e:e3:30:f5:ca:c9:0c:11:9c:
         63:68:2b:27:cc:5b:dc:1c:91:be:27:53:f3:1e:f3:f8:b0:8e:
         ad:0d:f1:79:7b:26:a0:23:1b:d9:33:31:6e:5b:31:f6:ba:d2:
         82:a3:11:43:7c:a1:83:05:e4:65:bf:4b:90:b2:b5:b9:f8:ae:
         44:06:ec:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:34:38 2026 by rpki-client