This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2358/ndp2cKpKYwn8dFgo2JYcOamWIEw.roa
File:                     ndp2cKpKYwn8dFgo2JYcOamWIEw.roa (raw, json)
Hash identifier:          lMcyc7+N5/lOY7lK9mB4EJFp8B3fuByvIbeutE1lkd4=
Subject key identifier:   9D:DA:76:70:AA:4A:63:09:FC:74:58:28:D8:96:1C:39:A9:96:20:4C
Certificate issuer:       /CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1
Certificate serial:       DB
Authority key identifier: 4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/ndp2cKpKYwn8dFgo2JYcOamWIEw.roa
Signing time:             Fri 24 Oct 2025 02:50:23 +0000
ROA not before:           Fri 24 Oct 2025 02:50:23 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     131539
IP address blocks:        110.42.69.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1
        Validity
            Not Before: Oct 24 02:50:23 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=9DDA7670AA4A6309FC745828D8961C39A996204C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:42:90:16:47:f0:16:75:86:26:c9:58:2e:af:
                    92:46:8c:65:d3:79:9a:5e:b4:b3:a7:b6:31:5f:c9:
                    5d:72:6e:cb:b2:f1:af:3d:51:bf:00:64:91:86:dd:
                    ed:94:f0:d8:48:cb:66:48:1c:67:cc:19:9a:58:22:
                    1f:31:36:78:78:5e:e2:08:6c:fd:3c:b7:33:5e:ad:
                    dd:8f:dd:25:4a:cd:aa:dc:5f:ac:94:c3:b7:5a:61:
                    cd:95:8c:c6:54:24:e9:f0:c6:5e:b7:31:d6:74:50:
                    6e:88:3e:57:a6:87:ce:69:b7:3e:89:b5:ed:93:79:
                    b2:f5:af:72:0b:89:92:27:2b:31:1b:87:46:5d:b2:
                    7e:89:ac:a6:10:56:93:92:75:d1:37:18:56:1d:68:
                    ad:34:87:a6:82:b6:f1:10:19:b3:62:09:d6:7b:73:
                    a5:4b:2b:c0:13:2e:24:78:92:82:35:34:31:51:75:
                    5f:93:fc:a6:8e:85:3e:62:5a:7d:34:2e:83:1a:d9:
                    ee:51:a1:31:b9:4c:e5:ba:a1:ec:df:4c:86:2c:69:
                    22:a0:66:1e:d0:c7:74:0d:73:95:dd:72:66:b7:58:
                    ea:ec:00:77:0b:a5:1b:ff:b1:84:21:f4:66:ca:06:
                    e4:36:d8:62:9c:ad:cc:ae:b6:09:48:83:c0:84:7b:
                    d3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DA:76:70:AA:4A:63:09:FC:74:58:28:D8:96:1C:39:A9:96:20:4C
            X509v3 Authority Key Identifier:
                keyid:4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/ndp2cKpKYwn8dFgo2JYcOamWIEw.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.42.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:77:9d:1a:fd:de:43:9d:17:07:fd:2a:73:64:56:b1:e3:e0:
         56:b5:7e:fb:35:4e:47:4b:ee:a1:eb:23:d0:50:1b:35:23:50:
         49:e9:79:06:5c:23:5f:6f:0e:0b:ac:af:47:3f:96:1f:f2:25:
         fe:e6:c0:42:04:15:89:0c:f8:a0:61:35:a9:74:00:15:97:02:
         bc:81:71:14:3b:59:3e:a0:ef:b4:bf:bd:e5:9e:86:c0:e9:b4:
         09:b4:f3:54:8b:12:8e:da:37:64:f1:5c:0f:4d:25:a9:84:85:
         32:52:9f:06:f2:35:b4:9c:da:86:87:f7:f9:59:8d:a4:32:39:
         1a:42:02:50:79:b2:2b:91:5e:14:19:a4:3c:1e:74:c8:7f:60:
         52:32:40:cc:7b:b6:31:a0:ed:3d:cb:6a:82:a0:c4:98:89:03:
         8c:3f:44:3d:54:32:57:de:9c:e9:6b:cb:2c:06:22:62:b5:a7:
         00:23:b7:6d:df:ed:70:ba:61:97:cf:75:d1:5e:e1:1d:92:92:
         8e:ff:50:16:25:94:13:f7:97:4a:6b:e0:e8:9e:14:b3:c4:90:
         8d:0f:b1:91:da:34:d0:ba:08:f9:3c:49:44:35:df:99:25:05:
         a6:d4:c4:dc:6d:2c:03:fc:4a:8b:b1:e5:7a:c6:56:d9:48:b4:
         c5:93:86:57
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICANswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEMw
NDMwRTM1MThBNUFGNTFCQzBERjYyNTY3RTBEMTU3Q0E1MjNDMTAeFw0yNTEwMjQw
MjUwMjNaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDlEREE3NjcwQUE0QTYz
MDlGQzc0NTgyOEQ4OTYxQzM5QTk5NjIwNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrQpAWR/AWdYYmyVgur5JGjGXTeZpetLOntjFfyV1ybsuy8a89
Ub8AZJGG3e2U8NhIy2ZIHGfMGZpYIh8xNnh4XuIIbP08tzNerd2P3SVKzarcX6yU
w7daYc2VjMZUJOnwxl63MdZ0UG6IPlemh85ptz6Jte2TebL1r3ILiZInKzEbh0Zd
sn6JrKYQVpOSddE3GFYdaK00h6aCtvEQGbNiCdZ7c6VLK8ATLiR4koI1NDFRdV+T
/KaOhT5iWn00LoMa2e5RoTG5TOW6oezfTIYsaSKgZh7Qx3QNc5Xdcma3WOrsAHcL
pRv/sYQh9GbKBuQ22GKcrcyutglIg8CEe9P3AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUndp2cKpKYwn8dFgo2JYcOamWIEwwHwYDVR0jBBgwFoAUTAQw41GKWvUbwN9i
Vn4NFXylI8EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM1
OC9UQVF3NDFHS1d2VWJ3TjlpVm40TkZYeWxJOEUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1RBUXc0MUdLV3ZVYndOOWlWbjRORlh5bEk4RS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzNTgvbmRwMmNLcEtZd244
ZEZnbzJKWWNPYW1XSUV3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAG4qRTANBgkqhkiG9w0BAQsFAAOCAQEApHedGv3eQ50XB/0qc2RWsePgVrV+
+zVOR0vuoesj0FAbNSNQSel5BlwjX28OC6yvRz+WH/Il/ubAQgQViQz4oGE1qXQA
FZcCvIFxFDtZPqDvtL+95Z6GwOm0CbTzVIsSjto3ZPFcD00lqYSFMlKfBvI1tJza
hof3+VmNpDI5GkICUHmyK5FeFBmkPB50yH9gUjJAzHu2MaDtPctqgqDEmIkDjD9E
PVQyV96c6WvLLAYiYrWnACO3bd/tcLphl8910V7hHZKSjv9QFiWUE/eXSmvg6J4U
s8SQjQ+xkdo00LoI+TxJRDXfmSUFptTE3G0sA/xKi7HlesZW2Ui0xZOGVw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 11:59:25 2025 by rpki-client