This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3132382e302f31392d3139203d3e203233373234.roa
File:                     3131372e35302e3132382e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier:          M1ePJ0YnCLSAt1Q4eLTZNDqqJ4tjMqOlKiruX6yTGSE=
Subject key identifier:   34:5C:F1:46:D6:6A:A8:27:02:35:50:A5:A2:7E:C3:1A:0D:0E:77:BE
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       778B54F48459757B3577032ADB26F622E56FD1CA
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3132382e302f31392d3139203d3e203233373234.roa
Signing time:             Tue 20 Jan 2026 02:10:51 +0000
ROA not before:           Tue 20 Jan 2026 02:05:51 +0000
ROA not after:            Tue 19 Jan 2027 02:10:51 +0000
asID:                     23724
IP address blocks:        117.50.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8b:54:f4:84:59:75:7b:35:77:03:2a:db:26:f6:22:e5:6f:d1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:51 2026 GMT
            Not After : Jan 19 02:10:51 2027 GMT
        Subject: CN=345CF146D66AA827023550A5A27EC31A0D0E77BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:c0:d9:a3:21:83:24:28:ba:ac:ca:68:61:
                    c8:9f:30:f0:0d:23:c1:1d:d1:3a:a4:20:94:07:44:
                    b6:a8:34:97:fe:94:db:de:ff:ba:23:7d:ee:bf:ef:
                    19:b6:13:f7:df:88:39:25:54:bc:ae:61:6e:30:1c:
                    da:9a:56:51:b7:6b:69:a8:89:86:4d:93:61:09:31:
                    f0:01:47:7d:52:a3:ed:6e:61:34:cc:fd:33:e6:38:
                    22:0b:16:a6:de:08:17:2b:b7:12:04:9e:fe:cb:66:
                    5c:c5:0b:5d:7e:52:cd:f5:c1:3e:60:fa:31:f2:af:
                    9d:35:f9:81:d3:8d:98:d9:d0:2e:c8:0b:db:c7:ff:
                    1b:aa:da:37:85:6c:5b:43:e0:c1:12:d5:8d:5b:8d:
                    f6:a3:cb:9e:fe:0b:82:07:1f:a9:68:2b:d6:74:1c:
                    79:ea:20:8f:69:53:89:ee:db:82:7a:0f:cf:2b:7c:
                    6e:b9:c3:32:36:5c:9a:85:f2:1e:9f:56:f9:74:d9:
                    c2:5e:15:0f:ec:34:b6:13:cd:ea:ee:a4:95:38:ce:
                    69:50:d0:d3:8d:dd:c0:38:14:2d:1c:0a:2a:8c:b1:
                    aa:26:88:19:b5:c0:9e:8f:7b:77:06:a6:6d:68:e3:
                    3a:ca:7c:05:da:6f:f5:28:87:3b:cd:4b:23:4b:33:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5C:F1:46:D6:6A:A8:27:02:35:50:A5:A2:7E:C3:1A:0D:0E:77:BE
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3132382e302f31392d3139203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.50.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:14:0c:f6:c3:87:6a:d5:c3:3c:de:a8:7d:60:4d:18:c7:a8:
         42:2e:a7:64:fb:ee:ce:82:86:41:b8:a4:59:b3:e2:80:da:07:
         f5:2d:bc:50:16:ba:42:96:76:89:ad:74:40:24:3a:89:76:69:
         3b:5d:15:35:15:80:18:ce:51:83:9f:57:13:c1:53:72:4f:1b:
         5f:a9:9a:da:76:e1:b0:e3:bc:0d:8e:7b:ba:6c:0b:38:86:d8:
         c8:87:09:58:b0:a5:f8:ef:19:ce:43:3b:99:7c:d9:29:56:ae:
         31:a1:ba:41:b0:ef:a9:18:cb:15:aa:48:6b:91:68:cf:d7:1b:
         47:7f:18:69:1c:ee:4f:10:a2:4d:0d:36:b5:74:a8:3d:c6:3f:
         6e:12:99:1a:92:87:5a:4f:91:e0:fe:dd:23:88:df:40:70:75:
         27:2a:e3:5d:1c:56:6b:f8:9c:50:b1:64:93:af:ca:75:43:ac:
         b3:b7:2f:ac:a0:2a:d2:69:0a:bb:49:6d:99:a0:20:8c:28:d1:
         46:6e:1e:07:84:1c:79:9c:be:9a:54:4d:89:9c:03:d3:d0:e1:
         89:d5:0b:e6:fe:d4:b8:7d:31:28:72:99:7d:67:db:25:61:46:
         fd:a2:c5:bc:d7:d9:41:ce:8a:2f:ea:2f:85:e9:a2:32:f5:fa:
         67:cd:3a:99
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUd4tU9IRZdXs1dwMq2yb2IuVv0cowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB
OUFBM0MyQzAeFw0yNjAxMjAwMjA1NTFaFw0yNzAxMTkwMjEwNTFaMDMxMTAvBgNV
BAMTKDM0NUNGMTQ2RDY2QUE4MjcwMjM1NTBBNUEyN0VDMzFBMEQwRTc3QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCroMDZoyGDJCi6rMpoYcifMPAN
I8Ed0TqkIJQHRLaoNJf+lNve/7ojfe6/7xm2E/ffiDklVLyuYW4wHNqaVlG3a2mo
iYZNk2EJMfABR31So+1uYTTM/TPmOCILFqbeCBcrtxIEnv7LZlzFC11+Us31wT5g
+jHyr501+YHTjZjZ0C7IC9vH/xuq2jeFbFtD4MES1Y1bjfajy57+C4IHH6loK9Z0
HHnqII9pU4nu24J6D88rfG65wzI2XJqF8h6fVvl02cJeFQ/sNLYTzerupJU4zmlQ
0NON3cA4FC0cCiqMsaomiBm1wJ6Pe3cGpm1o4zrKfAXab/UohzvNSyNLM+rhAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUNFzxRtZqqCcCNVClon7DGg0Od74wHwYDVR0j
BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4
MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDU4OTE4Ny8wLzMxMzEzNzJlMzUz
MDJlMzEzMjM4MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBXUygDANBgkqhkiG9w0BAQsFAAOCAQEAqBQM9sOHatXDPN6ofWBNGMeo
Qi6nZPvuzoKGQbikWbPigNoH9S28UBa6QpZ2ia10QCQ6iXZpO10VNRWAGM5Rg59X
E8FTck8bX6ma2nbhsOO8DY57umwLOIbYyIcJWLCl+O8ZzkM7mXzZKVauMaG6QbDv
qRjLFapIa5Foz9cbR38YaRzuTxCiTQ02tXSoPcY/bhKZGpKHWk+R4P7dI4jfQHB1
JyrjXRxWa/icULFkk6/KdUOss7cvrKAq0mkKu0ltmaAgjCjRRm4eB4QceZy+mlRN
iZwD09DhidUL5v7UuH0xKHKZfWfbJWFG/aLFvNfZQc6KL+ovhemiMvX6Z806mQ==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:24:07 2026 by rpki-client