This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3139322e302f31392d3139203d3e203233373234.roa
File:                     3131372e35302e3139322e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier:          9mI9xsP/jd8BWMYD0zP6FMiwV5w1jv/YF5Pk0R0gRdY=
Subject key identifier:   6D:92:9A:F4:F0:6F:8B:F6:2D:C8:8E:8B:B8:F4:BF:B6:7D:38:0B:16
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       624EDE4F2FA2D0E9312D4FC89B1DD16B3B3C4FEE
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3139322e302f31392d3139203d3e203233373234.roa
Signing time:             Tue 20 Jan 2026 02:10:51 +0000
ROA not before:           Tue 20 Jan 2026 02:05:51 +0000
ROA not after:            Tue 19 Jan 2027 02:10:51 +0000
asID:                     23724
IP address blocks:        117.50.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4e:de:4f:2f:a2:d0:e9:31:2d:4f:c8:9b:1d:d1:6b:3b:3c:4f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:51 2026 GMT
            Not After : Jan 19 02:10:51 2027 GMT
        Subject: CN=6D929AF4F06F8BF62DC88E8BB8F4BFB67D380B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:47:7c:93:02:11:f4:44:b8:77:59:9e:d7:
                    90:1e:b8:eb:5e:cc:1a:3e:ee:83:63:1a:50:23:af:
                    cb:1d:bf:1f:d0:69:12:41:c5:5b:56:4e:ac:60:7a:
                    07:4e:d7:1a:7b:da:23:e7:ec:0b:b4:f7:f3:f4:4d:
                    67:4a:a6:fa:e9:fa:c4:24:96:26:27:1b:5e:b2:fc:
                    c5:ef:dd:c7:96:84:d0:a6:70:68:87:49:c3:e3:c2:
                    1d:3a:2e:b2:56:b7:56:bd:49:44:e8:64:21:e3:b6:
                    d7:b6:e5:de:6e:02:47:81:d1:85:2c:d7:cb:fa:5d:
                    04:fb:c0:90:46:6e:b4:06:39:7c:0f:84:40:f6:6a:
                    52:15:55:17:a4:46:de:43:c5:c3:e5:d1:fc:e7:ae:
                    82:1a:1e:98:7a:33:bc:4e:2b:25:cf:8c:b1:6a:77:
                    ce:fa:69:dd:f3:5c:b0:2e:70:c3:a3:76:e7:e1:e6:
                    0b:a2:49:62:34:88:71:b8:29:0e:a3:1b:d7:80:09:
                    3e:62:c1:7c:37:12:06:fb:2b:e6:df:33:9c:7d:9c:
                    d2:5d:75:ab:bf:58:29:4c:27:89:b5:c5:cf:26:c7:
                    20:34:bb:1c:29:69:bd:eb:cf:c9:9b:05:19:b8:ca:
                    cd:e8:f6:a9:1c:d2:84:bd:bd:29:32:22:0e:34:9b:
                    65:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:92:9A:F4:F0:6F:8B:F6:2D:C8:8E:8B:B8:F4:BF:B6:7D:38:0B:16
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3139322e302f31392d3139203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.50.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:00:c3:aa:36:da:0d:cc:40:dc:d5:d8:7f:5a:2e:ff:c2:8a:
         9a:26:b3:b1:8f:13:bb:aa:c5:3c:b9:31:7b:eb:b3:89:9d:8c:
         c2:3f:a2:a6:76:bf:39:c8:86:bd:32:78:96:c1:78:49:f4:e9:
         f5:79:60:1b:5c:20:43:6d:64:b7:6d:83:67:90:07:f4:e9:6b:
         99:61:29:96:ae:72:bd:b2:d0:4d:03:d8:db:9f:01:e9:5f:bd:
         df:ad:e1:49:25:b2:0d:2a:ac:b4:89:29:ad:6a:6e:fc:35:b9:
         ae:c4:ad:c4:2c:af:4b:ae:8e:a6:bb:43:07:a8:97:a0:23:40:
         19:12:36:67:aa:8f:fb:cc:5a:e2:72:96:e0:60:2d:09:ea:33:
         c7:a6:c9:89:8c:27:8f:47:61:3c:21:3f:76:9d:14:47:65:e3:
         5d:95:a5:05:fc:4e:05:ec:e3:26:8d:19:fa:09:1b:c6:02:a0:
         1a:6e:c8:15:ea:57:4f:22:a2:2a:64:b2:63:8e:77:0c:56:29:
         37:f3:15:89:9b:a9:a5:c9:fc:46:bf:3b:65:b8:2c:3b:b6:fc:
         d9:eb:9e:2c:99:0b:bf:59:a7:ae:bc:b9:77:15:c6:a8:77:fd:
         8a:cb:cd:1d:26:d3:65:d8:79:f9:35:b2:f6:31:4a:ab:36:14:
         fe:b5:7b:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:24:07 2026 by rpki-client