This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/0dP1VxN-Co7upcdMJVIuEWtzap4.roa
File:                     0dP1VxN-Co7upcdMJVIuEWtzap4.roa (raw, json)
Hash identifier:          pQZO2sfYdo2YEGDjM+68Hsgit12/4SoK6Yi3f4zyHbU=
Subject key identifier:   D1:D3:F5:57:13:7E:0A:8E:EE:A5:C7:4C:25:52:2E:11:6B:73:6A:9E
Certificate issuer:       /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial:       2438
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/0dP1VxN-Co7upcdMJVIuEWtzap4.roa
Signing time:             Mon 05 Jan 2026 03:02:47 +0000
ROA not before:           Mon 05 Jan 2026 03:02:47 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     137718
IP address blocks:        101.96.192.0/18 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9272 (0x2438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
        Validity
            Not Before: Jan  5 03:02:47 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=D1D3F557137E0A8EEEA5C74C25522E116B736A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d6:85:18:e8:bd:32:cf:df:9d:21:94:83:f9:
                    b4:b5:a1:59:a7:39:0e:75:25:64:5a:2c:e1:b0:30:
                    6b:19:ba:ee:70:85:5c:05:0f:93:97:67:1d:11:b1:
                    89:24:8c:79:4c:ee:80:37:ba:75:4f:89:8d:0e:c2:
                    a7:28:0c:8e:a1:22:1e:d3:ff:d9:4c:b2:ce:c2:e7:
                    b0:49:d5:62:da:d8:8b:ac:ee:de:b9:fd:66:00:cf:
                    7d:c9:6a:55:32:66:37:49:ba:50:95:00:5d:d9:2f:
                    83:dd:ea:15:48:11:bb:bb:1b:91:e0:67:d8:68:9c:
                    11:34:de:e4:c1:9d:a1:56:e4:a4:ec:f4:80:5b:96:
                    b9:52:40:d9:9b:1b:42:5b:bb:fe:13:7f:94:0f:71:
                    76:01:fe:e4:5b:d7:61:03:d8:90:4a:d7:80:65:44:
                    60:6f:d2:76:77:64:4e:8e:d9:9d:02:6b:63:4c:a6:
                    db:10:e7:15:3b:c8:34:54:57:8b:ba:d3:32:51:60:
                    7e:15:70:bd:13:7e:6c:12:bc:ac:fc:e4:8b:d5:a4:
                    6f:dc:56:33:06:74:3f:6d:af:64:b4:82:24:76:69:
                    ed:5e:5a:31:4d:48:c1:1e:a9:dc:ae:59:68:60:22:
                    37:bd:3d:fa:56:70:c4:15:32:9f:02:f4:b3:10:bd:
                    71:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D3:F5:57:13:7E:0A:8E:EE:A5:C7:4C:25:52:2E:11:6B:73:6A:9E
            X509v3 Authority Key Identifier:
                keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/0dP1VxN-Co7upcdMJVIuEWtzap4.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.96.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0b:99:75:5e:f1:3a:90:19:d1:c9:0e:11:41:0b:1d:b6:21:fc:
         b2:42:ea:bf:f1:e9:ee:9f:96:0f:54:08:b5:4c:b8:72:9f:ce:
         07:ab:99:d1:db:61:33:79:a7:33:f6:f2:ec:de:31:e3:27:7b:
         20:c9:c7:d7:28:17:83:5b:60:b1:13:93:45:8a:7d:6a:e7:3f:
         b8:7f:fe:2a:4f:1e:83:c2:35:d4:2e:9c:88:95:4c:c1:0a:32:
         76:12:14:a3:c4:97:f9:1a:59:5a:3e:e2:70:ad:b7:9a:87:ce:
         d4:99:19:fc:17:b5:f8:31:65:9c:a7:4c:54:20:e4:c9:05:a4:
         b5:14:b2:00:be:20:28:fc:c4:4c:c1:1a:f6:91:b4:dd:5a:77:
         a8:0e:66:63:53:28:ce:84:ec:55:a8:62:55:d8:17:68:cf:ca:
         01:9a:01:44:50:66:71:6f:6c:86:30:2a:c5:47:e5:c6:0a:12:
         54:18:ff:42:ec:27:18:a3:e7:15:94:85:c0:41:d6:d5:f5:be:
         6a:3e:3e:53:5b:c0:6d:66:5b:82:37:94:12:66:eb:06:28:f6:
         8a:d9:b3:2e:8c:e9:47:ea:ba:81:4a:6e:9b:d8:41:90:13:f3:
         bb:eb:8d:a4:80:3d:11:c9:a5:fa:23:81:00:e3:a3:ab:05:f2:
         e8:d0:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:19:09 2026 by rpki-client