This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3134342e302f32302d3230203d3e203137363231.roa
File:                     3131332e33312e3134342e302f32302d3230203d3e203137363231.roa (raw, json)
Hash identifier:          DZazhEUwS9FjKpIk8qBWYWoF1CYAlHMDo3hL25j1u7c=
Subject key identifier:   CC:BB:54:B7:3D:8F:CC:42:8D:9C:15:FE:2C:C9:D6:D4:EF:F8:93:19
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       44B9F0168B6A59F6926B7C3E10A5613CBFA504C1
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3134342e302f32302d3230203d3e203137363231.roa
Signing time:             Tue 20 Jan 2026 02:10:52 +0000
ROA not before:           Tue 20 Jan 2026 02:05:52 +0000
ROA not after:            Tue 19 Jan 2027 02:10:52 +0000
asID:                     17621
IP address blocks:        113.31.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b9:f0:16:8b:6a:59:f6:92:6b:7c:3e:10:a5:61:3c:bf:a5:04:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:52 2026 GMT
            Not After : Jan 19 02:10:52 2027 GMT
        Subject: CN=CCBB54B73D8FCC428D9C15FE2CC9D6D4EFF89319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:c3:94:82:81:b6:45:0f:08:b6:6c:9d:3d:
                    0a:da:ba:b3:62:c2:ec:6d:75:f9:1a:94:84:fc:fa:
                    17:1b:cd:fe:b4:fe:76:f8:da:17:ea:cc:e6:bf:5c:
                    98:03:95:10:96:48:5c:65:4b:51:cf:b3:92:c5:74:
                    c1:0c:2c:01:20:55:3f:fb:9e:9a:67:94:10:f0:f2:
                    92:f0:42:39:0c:94:ec:07:28:bc:52:e1:ef:84:62:
                    7a:2e:da:42:1e:50:cc:89:21:86:1c:60:7e:0b:93:
                    6d:2b:e0:90:9b:b6:16:d4:ec:3a:52:8b:85:8b:a7:
                    60:19:db:51:f4:06:57:96:6d:4e:ea:e0:87:75:e9:
                    31:e4:fa:66:be:e5:b3:a5:7b:5d:a0:59:47:7d:66:
                    56:31:12:78:ce:c9:8b:7e:6d:c2:81:35:3e:1b:74:
                    31:08:65:06:a7:c6:53:6a:d6:9d:bb:9f:3d:fc:a2:
                    1b:d7:f1:8f:e3:55:e1:cc:65:6e:bd:3b:82:e8:87:
                    f1:01:e5:aa:fe:f1:b0:fb:22:20:d0:1e:cf:29:a9:
                    0e:ae:de:ca:bc:78:fe:76:8c:a4:70:4f:64:85:82:
                    40:c4:e0:0e:2c:0f:b7:f9:37:95:dd:3a:d6:50:74:
                    8b:f5:85:89:80:8e:5c:0a:5d:6b:36:f3:e9:d0:33:
                    55:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BB:54:B7:3D:8F:CC:42:8D:9C:15:FE:2C:C9:D6:D4:EF:F8:93:19
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131332e33312e3134342e302f32302d3230203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.31.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ba:89:28:2c:9f:d5:3e:21:cb:d7:01:4a:54:86:48:86:37:7b:
         f8:8e:d8:88:d5:37:17:89:c6:2c:4b:78:70:8c:06:34:ad:6c:
         26:c0:27:b5:e6:5a:10:12:46:3d:55:e0:41:8b:18:b8:59:67:
         fa:58:d2:eb:b2:bf:e4:31:cd:a7:fd:15:80:f9:fe:50:8d:eb:
         d2:76:14:f3:c1:6a:61:21:d1:c4:e9:ef:46:54:64:11:c4:da:
         53:a5:1f:b8:73:77:5b:ac:7b:8f:e4:d3:7f:86:00:3a:09:bb:
         57:85:af:06:70:4f:50:a6:73:31:7f:4b:58:ba:c1:3d:1d:a7:
         99:b2:59:78:5d:68:07:c1:5c:b3:a8:59:db:36:8b:39:4d:0c:
         e9:4d:7c:f6:fc:b9:8c:fb:64:a7:4b:0f:05:31:e1:0b:53:3b:
         0f:8b:90:8f:c2:39:13:30:18:bf:17:a9:78:66:8a:46:cf:2b:
         e6:d1:4a:a1:51:88:95:70:1e:d5:8b:48:73:47:40:45:10:58:
         57:4f:69:2b:1a:07:73:41:d1:91:3b:7a:03:61:b2:74:6d:e8:
         c2:5b:0f:36:27:62:0c:31:f7:9c:29:46:82:20:3c:9d:81:27:
         90:3f:12:11:cf:a3:73:65:78:db:7c:8c:47:32:1d:4a:26:67:
         54:3b:97:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:23:20 2026 by rpki-client