This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/34392e35312e3134362e302f32332d3234203d3e20313332323033.roa
File:                     34392e35312e3134362e302f32332d3234203d3e20313332323033.roa (raw, json)
Hash identifier:          uIV/dmn3TVHh2QVgkyPZUpUMRN5xFb2AeTCQlqGyDio=
Subject key identifier:   3A:23:6A:B8:BE:FA:9D:4C:25:09:2A:99:F3:38:FA:CE:7B:F8:76:A7
Certificate issuer:       /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial:       6C1F948695CB2CD0A2F5A6D2899F29A2D69D642F
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/34392e35312e3134362e302f32332d3234203d3e20313332323033.roa
Signing time:             Tue 20 Jan 2026 02:26:07 +0000
ROA not before:           Tue 20 Jan 2026 02:21:07 +0000
ROA not after:            Tue 19 Jan 2027 02:26:07 +0000
asID:                     132203
IP address blocks:        49.51.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 05:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1f:94:86:95:cb:2c:d0:a2:f5:a6:d2:89:9f:29:a2:d6:9d:64:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
        Validity
            Not Before: Jan 20 02:21:07 2026 GMT
            Not After : Jan 19 02:26:07 2027 GMT
        Subject: CN=3A236AB8BEFA9D4C25092A99F338FACE7BF876A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:63:e4:cb:00:56:2c:94:0f:f6:8e:f3:59:
                    5a:41:1f:d6:6f:ef:54:2c:b8:92:b7:f3:e7:0f:dc:
                    e5:27:4d:4b:c5:1a:c6:60:e4:a6:45:08:24:5c:09:
                    02:41:91:5a:30:d1:7d:d1:ae:9a:50:fd:c4:f7:12:
                    c1:6e:01:90:61:45:1b:01:72:48:4c:f0:63:43:04:
                    9b:9b:7f:cb:fb:c5:fa:d4:8e:de:7a:46:4b:7f:17:
                    cb:a3:f5:e1:54:b6:4f:67:b2:c2:74:9b:2f:bb:0f:
                    45:e7:6d:c9:60:06:b5:d6:93:cb:c8:b3:f7:67:34:
                    58:7b:52:23:58:d2:bb:27:26:d0:b0:d5:fc:f3:d1:
                    be:f3:36:0f:b5:c2:94:7e:ba:2a:16:32:1b:09:1f:
                    0c:81:58:36:5a:93:fd:ca:a2:55:5b:25:a8:f5:e5:
                    87:3d:53:19:a0:fb:db:78:29:1d:3f:4a:9b:0a:12:
                    ba:63:76:be:e1:98:bf:1a:53:fb:ca:75:38:2b:91:
                    e5:e2:96:a5:f6:d6:75:e3:62:69:31:22:5a:8a:a1:
                    4c:88:ff:92:dc:62:d7:e9:e3:92:a2:78:71:47:57:
                    81:00:2f:77:c7:8f:08:23:35:fc:4a:3a:d2:36:5a:
                    b2:e7:ee:d7:8d:40:97:31:dc:1b:fa:93:c4:67:dd:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:23:6A:B8:BE:FA:9D:4C:25:09:2A:99:F3:38:FA:CE:7B:F8:76:A7
            X509v3 Authority Key Identifier:
                keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/34392e35312e3134362e302f32332d3234203d3e20313332323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.51.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:63:47:a7:67:89:05:fb:cc:70:59:ae:97:81:8c:ae:06:80:
         1d:4b:0b:89:cb:42:2f:11:31:2e:94:9c:67:39:fb:ca:cf:c8:
         22:35:9f:4c:ca:46:59:ea:0e:f2:b9:5b:74:e6:7e:05:07:41:
         ab:23:3d:25:b1:4e:fa:c3:92:25:70:84:51:d9:da:4d:bb:06:
         f2:5d:df:ad:91:44:2c:e1:95:ab:ba:0d:08:b5:e0:19:44:58:
         8c:7f:f8:64:81:57:c0:8f:4d:a7:51:92:2e:55:95:2a:ee:27:
         8a:67:23:b3:50:dc:37:f7:34:51:55:7a:01:39:48:9f:19:c8:
         cb:3d:4d:01:02:60:f6:4d:f7:01:c1:a9:96:58:4c:e4:c9:a5:
         8d:79:55:12:e0:26:dc:15:70:1e:fb:95:76:46:56:5e:c6:9a:
         61:d9:31:c3:84:2a:aa:5d:80:80:bb:b4:37:72:5a:1e:f7:f7:
         fa:d4:ae:7f:b2:14:8a:3a:c3:33:c1:26:f6:42:9e:7f:24:6c:
         06:e4:55:8c:db:6b:7b:53:cb:27:93:c8:8d:d6:42:03:f5:b5:
         f3:0d:d5:bc:f4:35:60:a3:ff:b4:db:8d:36:cf:ee:d6:56:cf:
         a7:c8:16:89:4e:64:78:c1:27:59:39:d1:56:2a:11:65:cd:f0:
         75:a4:5a:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jan 20 14:53:43 2026 by rpki-client