This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e302e302f31392d3139203d3e203233373234.roa
File:                     3131372e35302e302e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier:          dpnWjigVhZxb/CGE5ZLlowbX7jwR3u03l5h1H06zakQ=
Subject key identifier:   37:87:53:FC:10:EF:C9:78:2F:1A:D4:4D:02:F8:6A:7E:07:52:C4:2E
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       3FDF328C9DBD6F19DD79BF03BB41BBD87DB472AB
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e302e302f31392d3139203d3e203233373234.roa
Signing time:             Tue 20 Jan 2026 02:10:51 +0000
ROA not before:           Tue 20 Jan 2026 02:05:51 +0000
ROA not after:            Tue 19 Jan 2027 02:10:51 +0000
asID:                     23724
IP address blocks:        117.50.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:df:32:8c:9d:bd:6f:19:dd:79:bf:03:bb:41:bb:d8:7d:b4:72:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:51 2026 GMT
            Not After : Jan 19 02:10:51 2027 GMT
        Subject: CN=378753FC10EFC9782F1AD44D02F86A7E0752C42E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:17:2d:44:17:38:32:69:a1:ff:cf:00:ed:
                    3b:09:70:21:90:ae:7e:68:92:c4:c5:a8:4c:1c:1c:
                    63:7b:46:19:4e:d2:90:cc:07:7e:a1:6a:4c:79:92:
                    f9:0d:c4:8f:40:2d:21:ab:b6:ef:50:0b:1e:4a:fd:
                    f9:90:3d:19:8a:ce:c2:d9:c1:8e:3b:d5:d1:3d:4b:
                    37:73:5c:28:9c:8f:ab:ae:af:f1:5e:36:c6:e0:5a:
                    4e:04:07:81:78:2f:d1:35:03:74:2c:55:83:01:2d:
                    bf:c5:60:c9:90:26:d5:49:57:e0:ea:de:7f:1d:d4:
                    34:fa:22:0b:df:80:8b:29:b9:88:59:08:02:10:a8:
                    8d:f5:f7:80:5e:a1:56:1e:87:8d:54:b7:0a:be:ad:
                    c6:fd:a3:17:2c:9c:02:1f:76:50:49:af:1a:8b:55:
                    4a:2b:01:20:eb:9e:5a:92:92:f3:a9:50:82:70:0a:
                    5d:70:9e:47:a2:67:79:ea:c0:45:38:c7:bd:34:99:
                    33:2b:e9:8f:30:a2:61:7e:f6:95:eb:d7:04:29:7c:
                    bf:e8:92:60:0a:49:04:19:05:dd:34:3f:b7:c7:6a:
                    22:eb:5a:0f:f2:0c:a7:ab:2e:c2:83:99:64:fc:5b:
                    4a:2c:7c:24:9f:40:bd:bd:34:9e:49:d8:ea:d6:79:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:87:53:FC:10:EF:C9:78:2F:1A:D4:4D:02:F8:6A:7E:07:52:C4:2E
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e302e302f31392d3139203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.50.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:de:3b:66:ce:ec:d5:9c:db:e6:98:fe:90:04:87:dc:84:d7:
         c7:44:3d:c9:d5:cb:df:6b:93:11:1b:12:f3:72:f5:2f:38:dd:
         77:bb:4e:26:c5:4f:53:42:92:08:46:0d:55:2c:54:22:0f:55:
         cc:2e:0d:27:11:ee:70:07:76:c6:e9:ee:f2:c4:60:f3:3e:73:
         23:dd:a7:44:32:cc:e1:49:3e:2b:89:f4:75:0a:d8:dc:11:5f:
         7d:62:7e:47:8c:32:5f:c1:78:ee:d6:2a:8f:e1:d3:dd:d7:0d:
         8e:d5:12:a5:86:6a:3f:75:61:5e:f0:c5:a5:b1:72:ae:42:0b:
         a3:2c:4c:f6:d7:aa:0b:f1:0e:a4:1b:6b:64:19:54:2f:65:cf:
         00:92:72:05:8e:a3:0d:d6:eb:b8:e8:f4:f8:4e:c7:47:e5:01:
         ca:32:61:6c:6b:d7:06:56:dd:c7:74:58:3b:56:9c:27:7d:88:
         2b:b0:5e:f3:35:91:e6:b7:45:62:f5:5e:2a:10:30:4b:46:a7:
         5d:03:1d:57:79:23:c4:f0:ef:f9:0e:f4:ed:93:36:66:a6:4e:
         b9:64:86:38:6c:5d:a7:d9:7a:5b:03:31:2a:81:19:e7:9f:ee:
         0c:eb:a0:78:29:8c:a5:b8:61:46:c4:34:bc:fe:e4:fa:14:5d:
         98:db:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:22:46 2026 by rpki-client