This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3136302e302f31392d3139203d3e203233373234.roa
File:                     3131372e35302e3136302e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier:          WEzv2YJOhMFdsxWEJPNof+wq4occHVyFMotftoyF/cI=
Subject key identifier:   75:FC:FA:20:D0:FC:36:C1:82:9D:AA:EF:02:28:25:EE:D6:AD:4F:4E
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       209D0BE0A0A211449DAA44AC68480F239B376F80
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3136302e302f31392d3139203d3e203233373234.roa
Signing time:             Tue 20 Jan 2026 02:10:48 +0000
ROA not before:           Tue 20 Jan 2026 02:05:48 +0000
ROA not after:            Tue 19 Jan 2027 02:10:48 +0000
asID:                     23724
IP address blocks:        117.50.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9d:0b:e0:a0:a2:11:44:9d:aa:44:ac:68:48:0f:23:9b:37:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:48 2026 GMT
            Not After : Jan 19 02:10:48 2027 GMT
        Subject: CN=75FCFA20D0FC36C1829DAAEF022825EED6AD4F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:e8:78:5b:22:4e:1a:e9:45:33:27:8f:cd:
                    1a:a8:44:e9:f9:aa:1c:97:f2:b1:f1:18:76:70:97:
                    d1:f8:11:14:56:52:43:98:aa:50:15:fc:69:c9:5b:
                    12:44:f1:1c:33:62:b1:11:7a:bc:1a:2a:96:5e:25:
                    e0:e3:89:61:07:bd:51:b3:98:f0:40:0f:18:15:eb:
                    f8:15:cf:af:f2:25:56:c3:c1:fa:e9:62:c3:18:e1:
                    49:90:a6:a9:d7:5b:72:ee:61:2c:36:5c:ed:ac:27:
                    72:69:ef:8f:09:ed:9c:0f:9e:ba:d1:25:82:cb:57:
                    49:01:36:bf:0a:b1:de:2a:33:17:65:68:57:b9:f5:
                    64:54:a7:27:08:c1:f9:4c:b1:fb:22:18:fd:70:f9:
                    22:0b:f6:9b:76:58:cd:35:d9:f3:48:72:dc:f3:3b:
                    2c:a5:c3:c4:01:66:3a:d9:7c:df:9d:ea:bd:18:9c:
                    93:9a:24:10:56:de:d0:57:45:cc:3d:de:31:73:06:
                    e3:60:ef:f5:3b:28:16:c7:63:05:e9:a6:80:54:5a:
                    5a:87:ae:6b:e3:59:ca:3d:e1:9e:3e:8c:ae:cb:43:
                    10:43:47:3a:fb:b0:f3:48:49:c6:3c:1c:7b:04:fb:
                    83:e6:b0:8d:19:78:ab:f2:ce:ae:40:b2:15:6c:5b:
                    df:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FC:FA:20:D0:FC:36:C1:82:9D:AA:EF:02:28:25:EE:D6:AD:4F:4E
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3136302e302f31392d3139203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.50.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1a:53:c3:3f:e1:10:de:0b:a0:1c:d8:7b:1b:a5:19:7d:c4:3e:
         b6:98:5c:a2:6b:40:5f:e7:74:6e:3e:c6:bc:78:37:99:3a:7b:
         96:48:1c:90:59:57:04:f1:1a:b2:1f:a2:e5:2e:4f:18:16:f1:
         65:55:58:ec:e0:61:17:9e:0f:13:41:62:68:ea:03:ab:e6:72:
         e2:eb:98:99:e5:49:f2:ec:ee:09:f8:fe:58:69:a4:dc:2c:c3:
         84:15:8d:e9:3f:80:49:61:67:a6:15:1e:95:30:9e:10:dd:b6:
         4b:f7:45:ec:23:a6:cf:a6:c4:bc:60:54:5c:d0:4b:f3:19:38:
         0a:41:b3:f5:66:38:f1:04:68:c2:1e:59:27:37:82:e6:a1:1f:
         1b:97:e6:d5:de:1c:5a:7b:4b:65:e3:ae:d0:28:f2:4c:a5:81:
         93:b1:fa:5d:ac:f1:8d:83:70:75:0a:78:88:ae:c3:eb:ff:31:
         c7:38:9d:5e:7b:95:45:fb:1d:91:56:b1:0d:22:77:43:f4:cb:
         09:f5:19:40:0f:40:df:f5:f8:f1:26:98:71:7d:93:d3:fd:13:
         cb:dc:fe:7d:6e:5a:49:e2:9c:b6:bf:02:fc:db:89:4f:93:89:
         ce:e0:d3:31:d2:87:55:d4:ca:6f:7a:98:c7:34:80:7c:64:7a:
         40:be:f5:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:24:06 2026 by rpki-client