This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3232342e302f31392d3139203d3e203233373234.roa
File:                     3131372e35302e3232342e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier:          X/sW80Rl3oxlEQBBQJu7fpGJ6boRTbK/eXFg8M+8R1A=
Subject key identifier:   CD:65:64:16:8E:4F:B7:03:88:92:33:A1:C7:48:B9:7D:8A:86:C9:EC
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       4622C32DFF0426F4D62650D18189535435B9A945
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3232342e302f31392d3139203d3e203233373234.roa
Signing time:             Tue 20 Jan 2026 02:10:49 +0000
ROA not before:           Tue 20 Jan 2026 02:05:49 +0000
ROA not after:            Tue 19 Jan 2027 02:10:49 +0000
asID:                     23724
IP address blocks:        117.50.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:22:c3:2d:ff:04:26:f4:d6:26:50:d1:81:89:53:54:35:b9:a9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:49 2026 GMT
            Not After : Jan 19 02:10:49 2027 GMT
        Subject: CN=CD6564168E4FB703889233A1C748B97D8A86C9EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:d0:b4:b1:24:28:dd:f2:f1:3c:61:b0:6f:
                    3a:d4:17:cb:0a:ed:7d:9c:bf:90:82:af:1e:ce:95:
                    b9:aa:68:b3:0a:24:9e:9c:16:7d:f8:68:08:58:43:
                    f3:a0:f0:f9:19:3a:6e:c8:3c:36:f7:de:25:ed:b3:
                    f4:98:26:85:03:4b:36:ab:c5:6f:18:f4:69:72:fd:
                    3e:b3:be:c2:e5:86:3c:b8:f8:ac:d6:92:a8:17:26:
                    1b:63:e7:58:5c:ac:d8:fd:3f:b0:32:28:6b:77:98:
                    b4:f9:a1:eb:7e:e8:f7:2e:d2:e1:17:a2:20:aa:05:
                    2a:89:a8:be:cb:40:22:52:41:de:00:0a:82:df:dc:
                    90:97:a0:30:64:db:dd:05:03:0d:a3:fe:92:37:66:
                    56:f3:98:00:21:2f:c3:b3:5b:b8:16:b8:18:ef:3f:
                    22:fc:6d:54:d9:04:6e:b8:74:8b:fb:3a:6e:f9:eb:
                    98:e0:b6:f1:67:0a:95:2d:fa:56:06:cd:7e:b5:73:
                    90:63:89:86:08:e8:23:41:4b:dd:74:99:a3:2a:f6:
                    b9:ae:0a:91:b1:cc:95:cc:ce:5c:98:09:0f:2c:f5:
                    20:3c:de:20:21:3c:0e:c2:65:f4:32:96:ab:27:61:
                    6a:8f:28:60:fa:8f:fd:6a:a0:78:47:e9:5c:04:53:
                    2a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:65:64:16:8E:4F:B7:03:88:92:33:A1:C7:48:B9:7D:8A:86:C9:EC
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e3232342e302f31392d3139203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.50.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:d2:66:97:29:a5:24:7a:50:4d:10:43:ca:2e:a0:ee:90:db:
         66:2d:2e:1c:b3:7c:83:54:7d:09:95:8b:5a:27:5e:dd:e4:5c:
         27:23:af:bb:25:93:ee:9d:a2:76:f4:28:52:57:f6:33:83:28:
         33:c6:b7:2b:40:86:57:38:a3:a1:11:84:af:44:b4:a0:72:a1:
         60:79:3c:72:9b:02:86:31:09:77:36:8a:49:9a:9b:25:fd:b0:
         54:b5:49:e3:58:0f:b3:ba:09:a9:ca:4f:fd:0d:ff:f5:9c:53:
         3e:70:37:0e:0e:23:28:0e:5d:ee:df:dd:65:6c:4c:42:73:ea:
         85:ba:1f:7b:74:da:19:b2:a2:b5:fe:5a:15:3d:e1:ea:b7:99:
         50:c3:a6:bb:e1:22:22:72:cf:29:7e:9b:35:a4:5e:f7:6c:3e:
         48:bc:b7:fe:6a:3a:4f:93:60:3d:5b:19:c8:44:77:55:98:b4:
         04:05:ad:76:67:f7:cb:d1:cc:83:e4:88:e2:93:2e:59:37:21:
         74:bf:9d:09:e4:96:bd:95:08:ca:64:30:46:c4:a0:34:1b:ed:
         7c:cd:59:6b:8e:7c:f6:1a:91:aa:9e:0d:40:d7:e7:06:1f:80:
         96:8a:8f:b4:37:b1:19:14:91:31:fd:71:c7:e2:ae:f0:75:03:
         d9:ea:00:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:22:20 2026 by rpki-client