This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f31372d3234203d3e2034383337.roa
File:                     3131382e3138342e3132382e302f31372d3234203d3e2034383337.roa (raw, json)
Hash identifier:          7LPc87hS5rjIOtI6iPGGcyZ23idOROuWnZG/gbZcJmY=
Subject key identifier:   CF:E0:E5:D0:20:3A:F9:CD:FA:76:1D:3C:57:D2:E2:5A:46:E2:F4:02
Certificate issuer:       /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial:       4A96668FC68C0596CF600520F37F85B3C3FEA7D3
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f31372d3234203d3e2034383337.roa
Signing time:             Tue 20 Jan 2026 02:19:12 +0000
ROA not before:           Tue 20 Jan 2026 02:14:12 +0000
ROA not after:            Tue 19 Jan 2027 02:19:12 +0000
asID:                     4837
IP address blocks:        118.184.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:96:66:8f:c6:8c:05:96:cf:60:05:20:f3:7f:85:b3:c3:fe:a7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
        Validity
            Not Before: Jan 20 02:14:12 2026 GMT
            Not After : Jan 19 02:19:12 2027 GMT
        Subject: CN=CFE0E5D0203AF9CDFA761D3C57D2E25A46E2F402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:94:f4:08:b3:c4:5a:b2:50:74:be:21:a6:
                    1c:8a:ff:ee:8a:00:ed:73:fa:69:90:85:7e:64:57:
                    bb:a8:46:0b:ec:55:1f:4e:b1:eb:e2:8c:2d:95:e2:
                    87:13:de:62:8e:fc:79:e8:c2:c7:65:fb:40:a1:9d:
                    e1:76:c2:77:06:b8:1c:dd:16:7d:c1:5d:0d:81:d9:
                    70:11:be:d9:50:48:00:2a:11:b3:53:30:3b:05:e8:
                    b5:58:a6:24:b2:21:de:b9:4e:d6:d4:0b:9b:f6:22:
                    14:de:ea:eb:11:5f:c6:89:dd:cf:e6:71:4c:49:21:
                    f8:ba:e1:bb:39:39:a0:35:e6:5b:36:88:7a:62:af:
                    22:c3:1e:93:db:20:4b:44:7a:d3:b4:b2:dd:16:88:
                    f8:5f:76:d0:55:64:5b:16:5b:e4:41:51:9f:90:89:
                    7a:8b:7d:40:b6:da:a1:f4:6d:81:1d:ca:97:8b:6f:
                    ab:37:fe:f7:23:da:dc:76:8f:2b:f4:0e:ba:10:9a:
                    52:59:ce:21:5a:25:61:0b:01:55:14:7d:85:e2:6b:
                    75:fb:6e:b8:0b:b4:d3:f8:fb:12:72:19:7c:ed:e1:
                    3c:a8:0c:7a:f6:ac:b7:1f:be:8d:65:05:e7:9b:95:
                    06:99:d8:8a:08:1b:ec:e9:b4:96:c7:ec:ed:a2:ce:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E0:E5:D0:20:3A:F9:CD:FA:76:1D:3C:57:D2:E2:5A:46:E2:F4:02
            X509v3 Authority Key Identifier:
                keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f31372d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.184.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6f:52:3e:6d:00:20:3e:0e:1f:dc:74:38:a6:9f:8e:3e:d5:08:
         b8:f5:24:ed:07:05:55:c1:33:93:cb:66:ad:f7:66:d0:76:39:
         d6:87:74:0c:01:c7:bb:99:00:0c:12:19:06:72:f0:3a:af:3a:
         ee:d7:c8:3a:b8:f4:6a:5c:d5:16:de:32:fa:50:bb:ac:5c:46:
         75:a5:11:67:fa:2b:ce:f5:e2:0b:3c:1e:28:cd:69:4c:eb:5e:
         73:20:f7:3f:21:cc:e9:3d:88:85:1e:9e:4d:af:20:9f:6f:41:
         5e:de:ec:3a:91:7d:a8:f7:17:39:a7:a9:23:8b:98:b8:f0:0e:
         a6:ce:6a:aa:80:a3:75:f6:61:fb:e3:0a:f8:3b:4d:85:bb:e8:
         36:f4:bb:d4:cb:5a:53:8c:95:9b:c2:b0:40:55:6c:ce:a9:76:
         fb:40:e1:92:3d:0d:e2:b1:40:8b:18:82:d9:5b:82:b6:9d:7f:
         07:98:3f:53:46:f0:e0:e7:d0:f0:79:5d:0e:21:e1:79:d8:b7:
         1d:2f:13:45:fa:24:35:49:fe:f4:46:89:d4:82:00:9e:fd:c3:
         43:53:99:ef:a7:10:b8:13:17:f4:45:a0:b1:9d:42:15:41:17:
         d6:19:e0:70:ea:be:61:c2:8b:3a:b2:c1:a0:2c:db:a5:56:65:
         b1:29:d8:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:55:41 2026 by rpki-client