This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/nnLQ_nOb5lY2d-i73NLXwHUxg_g.roa
File:                     nnLQ_nOb5lY2d-i73NLXwHUxg_g.roa (raw, json)
Hash identifier:          MjeIUWz9008fGGIetMcvbadhX08KdtyWriH1PEjuhZI=
Subject key identifier:   9E:72:D0:FE:73:9B:E6:56:36:77:E8:BB:DC:D2:D7:C0:75:31:83:F8
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       F3FE
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/nnLQ_nOb5lY2d-i73NLXwHUxg_g.roa
Signing time:             Sun 25 Jan 2026 07:28:12 +0000
ROA not before:           Sun 25 Jan 2026 07:28:12 +0000
ROA not after:            Sat 09 Jan 2027 08:23:18 +0000
asID:                     63612
IP address blocks:        43.227.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62462 (0xf3fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Jan 25 07:28:12 2026 GMT
            Not After : Jan  9 08:23:18 2027 GMT
        Subject: CN=9E72D0FE739BE6563677E8BBDCD2D7C0753183F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:47:0c:cc:27:4d:08:99:50:b2:d7:38:58:
                    ad:24:d7:ab:71:2c:25:f2:a5:bf:a2:25:ee:3a:05:
                    91:34:e1:7a:52:7a:61:cf:2e:d6:ea:e1:fa:99:43:
                    13:e6:8f:ae:ad:08:4c:81:15:1b:67:fc:92:6f:f8:
                    84:c1:ca:be:11:96:80:22:a3:90:fa:57:21:63:70:
                    0d:61:79:c7:1b:6a:6c:fc:fb:32:41:28:5a:d5:29:
                    03:3e:93:48:1b:a3:cd:58:30:32:5e:dd:b4:3f:71:
                    5f:21:28:09:83:16:3a:24:b3:82:f5:52:d4:b8:f5:
                    7a:72:35:31:ef:6e:c2:68:ff:a7:96:48:d2:12:ae:
                    25:78:29:b2:ba:d5:b3:c1:36:1f:93:db:09:2c:08:
                    20:f7:82:fe:54:09:10:11:62:73:61:22:40:59:b2:
                    64:04:60:52:b2:ef:7b:99:6c:18:72:8f:1e:ea:ee:
                    50:2a:ca:60:5b:b1:14:c4:45:85:e6:fb:7c:74:59:
                    04:89:2e:ba:22:72:b3:60:71:97:da:14:c0:4f:76:
                    84:a2:24:7e:9e:df:da:89:16:b4:b7:c8:5e:ab:5a:
                    1a:4e:9b:39:83:60:6d:11:46:4a:fb:fc:d6:0a:63:
                    91:8f:4a:77:9a:3f:37:7a:c9:7b:83:dc:15:d2:10:
                    92:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:72:D0:FE:73:9B:E6:56:36:77:E8:BB:DC:D2:D7:C0:75:31:83:F8
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/nnLQ_nOb5lY2d-i73NLXwHUxg_g.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.227.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:5a:e7:d1:95:15:a6:63:b7:b1:81:af:00:13:f8:76:9d:9c:
         d3:cb:39:41:c4:2b:b4:2e:93:f2:f5:11:98:0d:95:51:b5:db:
         56:4b:83:b9:6e:77:9e:7a:1f:95:0d:9d:26:a2:b1:3b:f2:95:
         b5:ec:02:5b:4d:05:65:4a:98:9f:2a:15:25:db:13:73:f1:61:
         1b:1c:26:6b:a4:d2:f1:fd:40:47:6c:76:05:d3:a5:fb:c9:b9:
         da:da:e6:b0:14:a8:04:65:7e:e9:77:a5:a1:04:b9:14:66:37:
         d7:4c:b6:3b:b3:d8:ce:21:9f:43:a5:77:df:90:42:26:c6:2e:
         d1:0f:d3:b1:ac:ea:33:cb:69:96:ed:b6:45:23:1e:90:69:7a:
         b0:d4:7e:7f:83:dc:f5:9f:0b:e9:b1:68:40:36:0d:ed:ad:38:
         82:87:84:87:80:dc:95:37:67:2f:dc:59:ef:b0:43:0d:75:97:
         10:a3:c9:8b:3b:de:0d:8d:5f:eb:84:2a:bc:7b:8a:5b:8f:c4:
         cb:6c:79:a0:dc:a7:af:ae:55:a5:47:b2:ce:96:a9:0a:38:3f:
         92:49:21:6a:6c:0e:c6:07:4b:b5:20:e5:c5:e1:8a:c5:ee:9b:
         83:ca:35:9d:b6:64:eb:b9:bd:c4:6a:b7:35:27:6f:e5:ad:97:
         f5:44:a5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:57:49 2026 by rpki-client