This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234322e302f32342d3234203d3e203633363431.roa
File:                     3132332e34392e3234322e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier:          4yFeBtOnx6PJDSGqWWlfXw9GOt3LnYBEIdTySWvAfJw=
Subject key identifier:   7F:E3:83:ED:EC:29:B0:75:E0:60:7A:8E:7D:E0:F3:EA:7D:59:5F:12
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       5FBF508F62B2F3495A9D625ADB0197D03B46FE65
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234322e302f32342d3234203d3e203633363431.roa
Signing time:             Tue 20 Jan 2026 02:20:15 +0000
ROA not before:           Tue 20 Jan 2026 02:15:15 +0000
ROA not after:            Tue 19 Jan 2027 02:20:15 +0000
asID:                     63641
IP address blocks:        123.49.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 07:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bf:50:8f:62:b2:f3:49:5a:9d:62:5a:db:01:97:d0:3b:46:fe:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Jan 20 02:15:15 2026 GMT
            Not After : Jan 19 02:20:15 2027 GMT
        Subject: CN=7FE383EDEC29B075E0607A8E7DE0F3EA7D595F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:bf:79:23:f6:89:0c:3c:93:6a:d9:33:74:
                    79:81:c0:93:ca:64:85:06:de:05:4f:5a:45:c5:80:
                    fd:ee:7f:19:18:9c:0c:a7:6b:cc:93:27:94:c7:6b:
                    c0:6f:3d:ea:cd:c9:9a:4e:72:36:4a:f9:27:9b:e1:
                    26:b3:c3:90:06:66:89:c5:d8:df:88:fa:e0:b2:77:
                    45:a9:da:b7:23:b3:c1:15:1b:2f:8c:bb:58:a0:fc:
                    6d:60:07:38:2c:2c:9a:5b:99:a4:6a:f8:fe:1a:b8:
                    35:46:dc:97:3a:35:15:8a:64:83:c3:ca:d9:59:97:
                    15:52:87:4c:63:fd:28:ab:7f:03:15:e5:b4:1d:f5:
                    40:c6:a8:1e:e9:63:7d:f3:5e:2d:e6:59:aa:e3:98:
                    cb:09:3f:1d:6e:5f:3e:6c:07:1b:73:65:55:e9:10:
                    51:03:34:ae:37:6a:cf:96:3e:5a:1f:07:59:1b:3b:
                    24:b6:0c:c7:53:52:29:d0:2d:36:64:94:6d:c4:44:
                    d6:0e:17:59:1a:78:82:58:aa:d2:2c:50:1e:ca:03:
                    60:59:98:d2:78:4a:18:13:10:a5:90:b1:ea:8e:fd:
                    63:f7:41:38:60:b3:a9:cd:ca:59:e8:fe:13:62:23:
                    41:8a:42:8c:9a:28:cc:62:be:cb:98:f8:77:05:bc:
                    4a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E3:83:ED:EC:29:B0:75:E0:60:7A:8E:7D:E0:F3:EA:7D:59:5F:12
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3234322e302f32342d3234203d3e203633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.49.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:25:2b:92:da:8a:a2:ad:3a:00:24:89:f9:ba:f4:37:1c:cd:
         3a:d6:b9:a7:b5:b3:66:54:a3:d8:e4:58:bd:af:8f:8b:5c:86:
         9b:bc:e3:61:ee:6a:17:f6:39:7d:58:22:df:c5:41:19:16:7f:
         50:f7:cb:bb:cc:db:e2:f6:19:09:64:e1:f3:ed:3d:4f:7d:63:
         f2:47:37:81:da:89:64:d4:16:cf:bc:17:fb:94:59:7e:0e:c7:
         f6:40:91:dc:14:d7:98:25:7b:3d:75:6e:82:fe:ad:f5:bd:2e:
         ad:d2:ef:b1:fa:29:19:2d:6b:88:a7:c0:82:66:a7:3f:2c:0c:
         c1:c1:6f:f2:e5:08:b8:97:dc:dd:9f:1d:d2:81:ba:8f:a2:69:
         b7:08:89:99:d1:2b:a6:cd:d2:89:9b:e6:fc:22:76:e0:fe:97:
         c4:29:e2:a9:d1:34:56:a6:e5:2a:ab:a5:69:2f:06:d0:42:61:
         a2:69:24:68:74:50:ce:d5:90:89:43:0f:d7:fe:07:e3:47:43:
         00:b2:73:d6:1d:c3:13:8e:ad:7b:34:b7:83:08:11:1c:1f:4d:
         82:1e:0a:32:a8:02:00:2a:f3:b9:d6:d3:66:0d:0d:a0:66:66:
         f1:5c:83:e0:1b:57:fb:e2:a0:93:1c:4f:f2:22:6a:e5:82:79:
         8b:9e:10:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:59 2026 by rpki-client