This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/7PKrlIeYLDtSJF6jj50hPuMW56o.roa
File:                     7PKrlIeYLDtSJF6jj50hPuMW56o.roa (raw, json)
Hash identifier:          j6HqdTw6z2bYh9eJ3jguI5sSBOiyrYwlkyNEUVTc4wc=
Subject key identifier:   EC:F2:AB:94:87:98:2C:3B:52:24:5E:A3:8F:9D:21:3E:E3:16:E7:AA
Certificate issuer:       /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial:       2437
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/7PKrlIeYLDtSJF6jj50hPuMW56o.roa
Signing time:             Mon 05 Jan 2026 03:02:46 +0000
ROA not before:           Mon 05 Jan 2026 03:02:46 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     4811
IP address blocks:        101.96.192.0/18 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9271 (0x2437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
        Validity
            Not Before: Jan  5 03:02:46 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=ECF2AB9487982C3B52245EA38F9D213EE316E7AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:c1:65:c5:30:76:6d:3d:12:5f:78:5a:c3:
                    60:dd:8c:b4:79:b7:26:29:d2:ff:3d:87:ac:81:c5:
                    ce:34:7f:84:07:cc:89:30:77:40:aa:9d:a1:b9:6c:
                    77:7a:b3:60:50:16:2e:69:04:26:2a:91:10:9c:bd:
                    12:b5:af:bc:6f:45:71:77:40:ae:ae:5c:91:e8:fe:
                    8c:d6:c3:c5:53:5e:eb:f8:93:7a:50:39:1e:9a:05:
                    ab:5a:4b:1a:de:ec:c5:57:a0:a4:23:c6:60:0a:a8:
                    33:16:d6:a7:05:52:13:45:32:7f:d0:11:88:38:61:
                    d6:f8:a6:0e:55:78:f5:66:d1:dc:86:f7:b3:f2:0a:
                    a8:4e:25:d9:25:d9:e6:6c:d3:a9:78:4a:3e:06:93:
                    23:14:f0:6a:43:ac:0e:85:79:49:a3:2c:83:35:cf:
                    ef:5d:0e:8b:a5:9d:1a:65:5b:0c:4b:d0:1e:e7:07:
                    e7:16:2a:25:dc:38:4e:a4:97:59:8f:dd:f8:82:21:
                    4b:62:1c:89:bd:e7:15:c8:06:47:25:e5:0e:76:3a:
                    5f:35:77:a3:4d:d5:a5:e6:dc:f3:4c:fa:f8:8c:3e:
                    b6:37:eb:fb:54:6a:fe:f2:f4:85:5b:9a:c9:aa:25:
                    42:37:2e:4b:3f:fb:a3:70:9c:6a:9b:e8:18:99:4d:
                    d1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F2:AB:94:87:98:2C:3B:52:24:5E:A3:8F:9D:21:3E:E3:16:E7:AA
            X509v3 Authority Key Identifier:
                keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/7PKrlIeYLDtSJF6jj50hPuMW56o.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.96.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         99:fe:29:b3:cf:a6:65:64:34:f8:aa:1d:1c:bb:7b:4d:c6:45:
         9d:e7:7c:53:f5:f5:17:6c:e4:be:a2:fb:d1:8e:61:fe:4b:cd:
         69:6e:5b:51:a8:86:ee:f0:1b:93:92:4a:46:8f:b0:8f:75:40:
         3e:c1:ec:66:e7:21:0d:9c:ca:17:8a:c3:a3:46:1f:6e:5a:41:
         9b:a8:02:81:cc:b1:25:62:99:c7:b5:ec:a2:71:83:fe:2e:7a:
         8c:fa:00:06:bc:ee:b6:51:bd:3e:f2:61:29:0e:8e:e0:b0:47:
         8d:ef:26:fc:f3:54:01:c2:0e:5f:00:a6:28:6b:47:cf:f5:bc:
         d9:6d:a4:14:55:7b:63:40:df:87:72:bd:ae:fe:1c:79:d3:ea:
         2b:d7:f0:6e:a9:43:d7:e3:97:2b:d4:84:ce:0a:d8:ec:cf:bc:
         67:36:49:44:3f:6c:d1:8e:af:a7:74:ee:75:d5:8a:ac:12:a0:
         93:f1:c9:6e:10:1f:08:2a:a1:22:95:8d:99:47:81:f0:fc:39:
         9b:4c:4c:2a:a9:0a:d1:f9:4c:fa:d6:4b:51:e4:b2:1a:be:84:
         e4:13:ff:a6:e2:c3:f1:fe:d0:2a:4e:99:a8:85:4e:c4:d3:77:
         30:6e:08:d0:71:60:87:64:57:4a:9c:6a:29:8c:13:40:76:c8:
         e6:30:0c:b4
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICJDcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4
QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNjAxMDUw
MzAyNDZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEVDRjJBQjk0ODc5ODJD
M0I1MjI0NUVBMzhGOUQyMTNFRTMxNkU3QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvdMFlxTB2bT0SX3haw2DdjLR5tyYp0v89h6yBxc40f4QHzIkw
d0CqnaG5bHd6s2BQFi5pBCYqkRCcvRK1r7xvRXF3QK6uXJHo/ozWw8VTXuv4k3pQ
OR6aBataSxre7MVXoKQjxmAKqDMW1qcFUhNFMn/QEYg4Ydb4pg5VePVm0dyG97Py
CqhOJdkl2eZs06l4Sj4GkyMU8GpDrA6FeUmjLIM1z+9dDoulnRplWwxL0B7nB+cW
KiXcOE6kl1mP3fiCIUtiHIm95xXIBkcl5Q52Ol81d6NN1aXm3PNM+viMPrY36/tU
av7y9IVbmsmqJUI3Lks/+6NwnGqb6BiZTdHvAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU7PKrlIeYLDtSJF6jj50hPuMW56owHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw
dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvN1BLcmxJZVlMRHRT
SkY2amo1MGhQdU1XNTZvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBmVgwDANBgkqhkiG9w0BAQsFAAOCAQEAmf4ps8+mZWQ0+KodHLt7TcZFned8
U/X1F2zkvqL70Y5h/kvNaW5bUaiG7vAbk5JKRo+wj3VAPsHsZuchDZzKF4rDo0Yf
blpBm6gCgcyxJWKZx7XsonGD/i56jPoABrzutlG9PvJhKQ6O4LBHje8m/PNUAcIO
XwCmKGtHz/W82W2kFFV7Y0Dfh3K9rv4cedPqK9fwbqlD1+OXK9SEzgrY7M+8ZzZJ
RD9s0Y6vp3TuddWKrBKgk/HJbhAfCCqhIpWNmUeB8Pw5m0xMKqkK0flM+tZLUeSy
Gr6E5BP/puLD8f7QKk6ZqIVOxNN3MG4I0HFgh2RXSpxqKYwTQHbI5jAMtA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:19:06 2026 by rpki-client