This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/323430343a363338303a3a2f33322d3438203d3e20313430323933.roa
File:                     323430343a363338303a3a2f33322d3438203d3e20313430323933.roa (raw, json)
Hash identifier:          wOEu4s8or2SwQwHND5Q2d5xq0kfsHWiBIQ/WtFCz69A=
Subject key identifier:   A8:99:5B:4B:BF:A1:C0:6D:56:A1:E3:14:AE:19:64:65:E0:AE:55:6E
Certificate issuer:       /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial:       7E07382A352BDD4A2DB1E713CC4460BEA9A09069
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/323430343a363338303a3a2f33322d3438203d3e20313430323933.roa
Signing time:             Tue 20 Jan 2026 02:19:12 +0000
ROA not before:           Tue 20 Jan 2026 02:14:12 +0000
ROA not after:            Tue 19 Jan 2027 02:19:12 +0000
asID:                     140293
IP address blocks:        2404:6380::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:07:38:2a:35:2b:dd:4a:2d:b1:e7:13:cc:44:60:be:a9:a0:90:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
        Validity
            Not Before: Jan 20 02:14:12 2026 GMT
            Not After : Jan 19 02:19:12 2027 GMT
        Subject: CN=A8995B4BBFA1C06D56A1E314AE196465E0AE556E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:82:03:af:74:b9:a1:23:0a:6e:84:65:66:83:
                    b2:b5:23:ab:7d:1f:67:93:38:36:89:9c:82:88:25:
                    c1:ae:3b:b1:c2:5e:97:20:53:df:b5:2d:bf:a1:15:
                    9a:90:90:0d:95:a5:a2:ea:d2:37:4d:14:67:76:a8:
                    2b:59:b8:1a:d3:ae:d6:65:9f:27:38:78:86:0a:e9:
                    d5:ad:21:70:04:7e:dc:c0:8b:e6:34:9b:1b:77:a2:
                    ba:df:d7:1c:4f:86:f7:21:26:a9:cf:67:9f:81:b4:
                    1a:5a:32:d6:fe:28:9a:6e:94:bd:41:25:b4:53:1f:
                    cb:f4:20:e2:c3:74:ff:a6:7e:2b:61:a0:f8:c3:33:
                    6d:31:59:00:c8:62:18:f4:d7:18:e7:3a:61:48:dd:
                    f9:33:39:6c:e4:cd:cf:3d:a4:1c:9e:c9:fc:9a:06:
                    ab:bf:63:6e:b8:0e:6b:33:25:78:49:da:5e:7c:85:
                    10:84:06:22:0a:cf:0d:24:e1:8d:69:23:1e:7e:11:
                    fa:ef:bf:a5:59:b4:0d:60:ab:da:c7:fd:f9:12:6f:
                    31:d9:ea:63:28:9c:79:e3:f5:6e:2b:b8:9c:d3:a6:
                    0f:14:e0:55:1b:9a:bb:2c:87:b6:16:0e:93:e4:a7:
                    4b:8a:a0:0e:7d:6f:55:cc:7f:47:3e:81:bc:6d:1d:
                    54:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:99:5B:4B:BF:A1:C0:6D:56:A1:E3:14:AE:19:64:65:E0:AE:55:6E
            X509v3 Authority Key Identifier:
                keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/323430343a363338303a3a2f33322d3438203d3e20313430323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:6380::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:0c:82:d3:9e:7c:ea:69:46:12:a0:a1:6c:16:bd:19:49:ef:
         7a:81:79:30:51:54:0b:f7:b2:f8:07:af:92:22:0a:ae:eb:d7:
         12:01:c0:83:c2:63:ff:58:22:01:0b:54:1a:03:b0:c0:2a:45:
         1f:42:48:9d:bf:0e:2b:8e:20:75:6f:12:a2:87:d2:d9:6f:8e:
         2b:b4:c9:56:2c:a3:89:46:29:d8:91:3f:32:3b:8f:53:69:50:
         fe:2f:e3:6f:db:35:5e:89:a3:c1:98:55:7e:22:5f:46:30:a1:
         ce:d3:ff:61:d7:23:1a:a8:4c:50:31:19:a2:a3:90:3e:e2:29:
         26:bd:44:f9:af:b7:6d:2a:fd:eb:71:82:09:db:bf:51:1e:35:
         78:71:87:f9:06:85:36:58:5b:f8:28:85:78:e9:99:1e:b7:4d:
         8f:40:db:05:0f:15:fb:80:92:06:d0:a7:36:b2:39:e2:65:ab:
         db:5c:4f:d9:47:5b:9b:90:71:83:bd:38:25:f9:c9:26:c0:a1:
         60:db:06:39:c1:a9:1d:8b:cb:c0:00:da:71:b4:32:00:2c:cc:
         25:18:bb:b6:42:1a:7b:cf:66:59:b5:56:1a:01:37:ee:19:a6:
         c6:db:30:3b:cd:18:e8:39:01:41:be:fb:1a:2b:52:c0:47:2c:
         86:ae:15:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:22:36 2026 by rpki-client