This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e33322e302f31392d3139203d3e2034383038.roa
File:                     3131372e35302e33322e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier:          KgDOM43VrjVpDgOduUtmcy7edwlF4mnKhMaMmShyaWY=
Subject key identifier:   98:1B:62:2B:63:59:C0:1B:46:C8:1C:27:AF:B9:C1:E6:06:8E:03:1F
Certificate issuer:       /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
Certificate serial:       415577E0450E8DC2EC7F88E4B1BA832CD74E653D
Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e33322e302f31392d3139203d3e2034383038.roa
Signing time:             Tue 20 Jan 2026 02:10:50 +0000
ROA not before:           Tue 20 Jan 2026 02:05:50 +0000
ROA not after:            Tue 19 Jan 2027 02:10:50 +0000
asID:                     4808
IP address blocks:        117.50.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:55:77:e0:45:0e:8d:c2:ec:7f:88:e4:b1:ba:83:2c:d7:4e:65:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C
        Validity
            Not Before: Jan 20 02:05:50 2026 GMT
            Not After : Jan 19 02:10:50 2027 GMT
        Subject: CN=981B622B6359C01B46C81C27AFB9C1E6068E031F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:0c:5f:ff:65:ff:d0:e2:4d:fd:a1:87:73:
                    b5:90:ab:ba:7e:d1:41:11:6e:ef:7a:fb:d6:ef:01:
                    1f:8b:16:a7:9d:bc:7d:93:c0:6e:c6:8d:fe:77:1b:
                    29:78:84:1d:83:51:53:fc:ed:f0:99:02:3e:2c:46:
                    cd:9c:39:8a:9a:85:c1:f3:e6:78:ce:b8:69:66:42:
                    50:e0:f3:ac:4c:aa:cb:d7:2b:6e:71:83:7e:1e:71:
                    71:bb:e6:c3:f7:9a:c1:20:0d:61:91:bc:4f:01:32:
                    8d:8d:8c:e3:e4:a1:7b:0e:c5:53:0c:f4:63:d5:5a:
                    f1:d4:59:ac:a2:04:22:51:fb:23:74:25:ea:2a:fa:
                    9f:d3:67:85:ff:44:1c:2e:21:e9:a5:fc:46:05:68:
                    2e:bb:f1:71:b3:a3:d0:e8:35:dc:df:4c:a0:9a:7a:
                    5c:bc:75:dc:14:54:9b:db:94:19:71:db:6b:e4:8d:
                    ec:78:64:e6:bf:f4:77:e7:c3:38:d2:cd:57:bb:d6:
                    61:2c:43:3a:78:65:a3:c4:9a:28:46:d6:74:5d:40:
                    13:dd:8a:50:b8:4e:d4:fa:68:ef:20:4e:e2:68:0f:
                    6d:1d:9b:f6:bc:e9:de:09:92:fa:e1:4e:c5:a0:9c:
                    e3:5d:60:75:7d:0a:5f:3f:02:52:01:1d:83:68:49:
                    6f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1B:62:2B:63:59:C0:1B:46:C8:1C:27:AF:B9:C1:E6:06:8E:03:1F
            X509v3 Authority Key Identifier:
                keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3131372e35302e33322e302f31392d3139203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.50.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d7:2c:20:8a:5a:48:d7:a4:08:f6:c0:71:70:df:32:68:39:e8:
         14:72:f2:16:67:f7:19:89:36:9d:54:71:02:ab:0d:63:f2:a6:
         ec:b9:ae:ef:ce:6a:74:c5:7a:c0:d4:27:59:b3:47:0b:ed:8c:
         20:9d:05:39:15:06:fc:dc:10:e0:37:38:0b:f3:46:76:02:3e:
         dd:7d:f6:96:f1:ee:c9:2e:7e:d2:12:1a:8a:fd:19:1a:be:5e:
         ff:a9:a6:28:1b:22:a9:18:b7:45:4a:92:44:99:a4:65:b2:e4:
         de:be:73:81:e8:f0:d7:6a:7a:01:5c:64:75:09:c6:b4:51:a0:
         9c:65:63:c9:65:5a:97:0c:a9:32:57:99:20:03:9b:24:82:62:
         66:56:24:8f:16:2a:ca:b9:70:ba:87:7c:b6:e9:77:cd:2e:75:
         82:49:d9:ef:5c:23:72:26:26:82:4a:05:87:e6:fc:39:d2:c4:
         3b:74:b3:92:d9:0d:5c:f6:03:45:5d:2c:1d:c4:12:8a:dd:d7:
         76:56:44:72:d5:ab:26:de:28:be:7c:20:6e:60:65:87:3a:57:
         02:fd:5f:95:33:81:85:38:48:28:be:f1:e4:a4:ec:fd:1c:26:
         f9:da:56:68:1e:c2:f1:c8:50:5b:68:fb:c1:78:62:db:b6:e5:
         13:91:1f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:23:20 2026 by rpki-client