This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1646/vp3WK312KKzUmfyyrQFqNFOctyQ.roa
File:                     vp3WK312KKzUmfyyrQFqNFOctyQ.roa (raw, json)
Hash identifier:          CnKv1LTj28zoW/vIVStQxZSumUrKc2KiZivBLF2cZTQ=
Subject key identifier:   BE:9D:D6:2B:7D:76:28:AC:D4:99:FC:B2:AD:01:6A:34:53:9C:B7:24
Certificate issuer:       /CN=1619C986780A13F380FE45EDC28EF4C842884843
Certificate serial:       1F
Authority key identifier: 16:19:C9:86:78:0A:13:F3:80:FE:45:ED:C2:8E:F4:C8:42:88:48:43
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FhnJhngKE_OA_kXtwo70yEKISEM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/vp3WK312KKzUmfyyrQFqNFOctyQ.roa
Signing time:             Mon 29 Dec 2025 08:37:02 +0000
ROA not before:           Mon 29 Dec 2025 08:37:02 +0000
ROA not after:            Fri 25 Dec 2026 07:18:09 +0000
asID:                     135629
IP address blocks:        52.82.171.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1619C986780A13F380FE45EDC28EF4C842884843
        Validity
            Not Before: Dec 29 08:37:02 2025 GMT
            Not After : Dec 25 07:18:09 2026 GMT
        Subject: CN=BE9DD62B7D7628ACD499FCB2AD016A34539CB724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:19:84:59:83:d2:94:63:1e:8f:c8:52:26:a3:
                    15:74:fa:ab:53:d5:18:41:3a:49:32:46:2d:0c:3d:
                    0e:47:f7:98:31:9e:38:f7:74:f1:b6:ad:4e:ad:51:
                    c4:08:7b:25:36:50:f4:ec:81:8e:ff:f8:20:24:8a:
                    cb:eb:fe:4a:5c:f4:00:df:33:50:8c:35:e8:28:a8:
                    8e:78:6d:c6:40:5a:33:b8:d4:75:36:f7:5e:31:b6:
                    27:1b:6a:bc:11:58:27:a9:b6:d7:c1:e7:78:dd:43:
                    55:e8:88:3b:ee:d5:58:df:a2:c5:7d:b5:ff:32:22:
                    94:15:3d:ea:38:86:4d:c2:c2:de:26:16:f9:b3:61:
                    49:47:46:0d:d4:33:78:97:f1:4d:b6:05:62:30:d8:
                    33:2c:76:2e:e2:e3:40:1d:d9:c4:3f:a2:a6:54:69:
                    45:51:1e:99:c8:fe:b2:21:e9:d3:18:93:dd:fa:8e:
                    07:33:5d:48:b5:2a:ae:8c:1f:d8:23:57:4e:81:a0:
                    ec:2a:1b:ac:7b:7d:85:8f:c2:5e:85:83:4c:ae:03:
                    2e:f8:65:db:43:f8:29:f8:7b:21:a0:a3:f6:3a:5d:
                    82:74:c3:b3:66:c9:5f:95:2e:88:64:ad:5f:04:40:
                    00:fd:a9:f2:f6:90:32:89:46:90:ed:78:29:6b:81:
                    a3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9D:D6:2B:7D:76:28:AC:D4:99:FC:B2:AD:01:6A:34:53:9C:B7:24
            X509v3 Authority Key Identifier:
                keyid:16:19:C9:86:78:0A:13:F3:80:FE:45:ED:C2:8E:F4:C8:42:88:48:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FhnJhngKE_OA_kXtwo70yEKISEM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/vp3WK312KKzUmfyyrQFqNFOctyQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.82.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:6b:55:c8:b5:0c:e1:ba:66:15:06:51:b0:e7:cc:0f:c9:ed:
         33:ad:6b:05:00:8a:ac:bc:1a:cc:cb:13:4c:52:cc:29:d9:05:
         89:7b:f5:6b:37:c3:e8:3f:77:42:8b:0f:dc:14:81:75:12:20:
         f9:26:51:20:7b:99:ed:af:a8:af:7b:40:4f:64:01:d3:b7:bc:
         ca:51:aa:62:d9:9b:3e:da:e2:a6:8c:17:25:8a:66:44:5f:c6:
         6e:fa:09:46:10:55:5f:4a:a7:c9:9d:fa:57:da:89:c5:9d:7c:
         a2:7c:69:10:e3:99:0d:4b:9f:19:3a:d3:0d:34:c7:c8:83:14:
         11:a4:7f:b4:77:2e:3e:22:7d:a9:9b:29:e0:03:0f:06:25:dd:
         fb:61:fc:63:bf:e3:d9:1f:61:a3:cf:56:62:7e:54:c4:63:ca:
         21:4e:0f:4e:78:16:41:1d:66:15:87:da:e5:2a:20:a9:f5:e4:
         7e:b9:88:a3:04:86:8a:d3:de:41:1d:63:97:f4:29:da:12:01:
         e6:ae:e5:a0:0e:a5:de:57:29:38:5b:54:bb:ac:9c:f0:04:ce:
         6c:9e:a3:9a:a2:40:a7:f1:de:af:82:12:b2:1d:ba:8d:fd:80:
         05:b8:60:d2:28:f7:f1:6f:38:34:db:4f:bf:d6:d4:89:46:ce:
         20:ec:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:08:25 2026 by rpki-client