This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/efplNrbyxmF0lq82VbwGP0D6LK0.roa
File:                     efplNrbyxmF0lq82VbwGP0D6LK0.roa (raw, json)
Hash identifier:          Pf2espGPICu6M6YrMRJZT/d6D3ptEEuGCF8kMNpxX+M=
Subject key identifier:   79:FA:65:36:B6:F2:C6:61:74:96:AF:36:55:BC:06:3F:40:FA:2C:AD
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       F400
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/efplNrbyxmF0lq82VbwGP0D6LK0.roa
Signing time:             Sun 25 Jan 2026 07:28:12 +0000
ROA not before:           Sun 25 Jan 2026 07:28:12 +0000
ROA not after:            Sat 09 Jan 2027 08:23:18 +0000
asID:                     134762
IP address blocks:        43.227.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62464 (0xf400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Jan 25 07:28:12 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=79FA6536B6F2C6617496AF3655BC063F40FA2CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6a:2b:96:2d:d5:de:5b:70:8d:43:82:bb:09:
                    09:b2:bc:63:ad:76:c7:24:16:2f:c4:de:27:87:b4:
                    d9:dd:f7:03:58:fc:22:b5:4b:f2:b7:fc:89:80:73:
                    3f:af:0a:7c:e0:94:94:d2:ad:83:8a:d1:cb:78:33:
                    3a:b2:56:39:2e:da:54:07:d0:cc:1c:fc:64:da:03:
                    d4:9b:fa:0f:27:ab:0f:b1:b6:a8:50:fc:db:db:87:
                    f7:d5:be:c7:2f:37:d9:c1:36:d0:34:a9:40:0b:4e:
                    2d:06:d6:0f:f1:c7:54:6a:24:60:a0:b7:a3:49:11:
                    fd:1a:0c:8a:a2:01:ff:27:e2:a7:cf:8f:ff:1b:36:
                    0b:4f:7b:e0:32:9c:20:91:2b:32:76:d3:f3:07:d0:
                    8e:e2:bc:ad:f0:3c:f4:e2:b5:8c:88:8d:e1:de:b3:
                    52:a6:b5:48:5a:fb:b0:1e:cd:16:c7:cd:5b:8b:b1:
                    17:b9:b2:34:b4:b6:95:3a:1d:84:38:a3:67:f9:f5:
                    4f:86:f9:f8:99:db:cc:13:a7:1d:15:bd:c0:76:56:
                    03:ea:d6:fd:57:36:4a:be:0e:33:4f:15:b6:d1:75:
                    e6:59:cf:a4:31:d4:22:30:51:34:3d:3a:35:54:9e:
                    8e:f7:7e:50:10:80:17:d5:d2:ec:f7:22:74:c2:0c:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FA:65:36:B6:F2:C6:61:74:96:AF:36:55:BC:06:3F:40:FA:2C:AD
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/efplNrbyxmF0lq82VbwGP0D6LK0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.227.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:46:b6:09:71:30:48:4b:d3:30:ea:0a:d8:56:fb:a4:cc:86:
         0f:56:d7:53:98:6d:b0:d2:b9:d7:21:50:fa:55:f8:af:72:92:
         0b:d2:0c:53:b5:46:34:49:e4:77:71:4d:6c:41:91:42:57:54:
         eb:50:c6:c2:8f:a1:2b:86:b8:08:23:a9:1d:d5:c8:be:b4:6c:
         ce:f5:6a:d7:a1:2e:d1:3c:42:70:e9:fa:d9:4a:7e:c3:ff:49:
         8d:18:de:05:f2:11:99:1f:1a:b1:d0:84:60:ff:b6:d1:7f:1e:
         c7:62:45:59:85:f3:40:c6:31:51:50:90:06:4f:bf:91:76:95:
         b2:02:3a:c4:7b:19:62:55:b0:62:7a:20:f3:c3:2e:34:af:f8:
         be:0f:9a:92:19:90:7a:66:81:9f:9d:c8:a4:e9:c2:ea:96:83:
         43:17:f7:9a:b4:80:84:d8:5b:05:cb:97:db:8e:07:09:9e:48:
         cb:c8:8a:fe:f6:68:0c:7a:4e:1c:34:5d:f3:b5:8e:82:54:78:
         ee:c3:46:fc:53:0e:ac:62:bc:7f:50:87:3d:5f:ba:ae:6b:ab:
         e0:1d:08:d7:59:85:26:c2:d2:fd:32:7f:6c:5e:ea:23:02:56:
         71:d6:90:6e:a7:63:9e:e8:fd:0d:ae:94:22:95:7d:d6:6a:8e:
         52:0f:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:58:15 2026 by rpki-client