This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/RaawOuDDYFp9jGPJIVM5tLlWjyk.roa
File:                     RaawOuDDYFp9jGPJIVM5tLlWjyk.roa (raw, json)
Hash identifier:          WWfDSgavDPugQlvWIeOHbTfRUr6gg9vMY9vNrAQH45g=
Subject key identifier:   45:A6:B0:3A:E0:C3:60:5A:7D:8C:63:C9:21:53:39:B4:B9:56:8F:29
Certificate issuer:       /CN=43AA7F201331D710A3F06822BE4D472A5207EB09
Certificate serial:       F1
Authority key identifier: 43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/RaawOuDDYFp9jGPJIVM5tLlWjyk.roa
Signing time:             Tue 06 Jan 2026 12:32:39 +0000
ROA not before:           Tue 06 Jan 2026 12:32:39 +0000
ROA not after:            Thu 19 Nov 2026 10:13:34 +0000
asID:                     151251
IP address blocks:        144.79.10.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AA7F201331D710A3F06822BE4D472A5207EB09
        Validity
            Not Before: Jan  6 12:32:39 2026 GMT
            Not After : Nov 19 10:13:34 2026 GMT
        Subject: CN=45A6B03AE0C3605A7D8C63C9215339B4B9568F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:e8:75:1a:fa:ee:cf:c5:1c:1d:e2:62:89:
                    be:82:ad:d2:99:d6:08:33:22:dd:1a:14:2b:2a:d5:
                    4d:a7:57:d9:14:fc:14:cb:12:bf:35:40:3b:e4:94:
                    2a:6f:ce:c0:7c:39:00:93:80:26:ce:38:b9:ce:fc:
                    4c:77:55:8c:61:6b:ad:ac:ab:e0:cf:ac:82:a8:bc:
                    e5:5c:bf:10:99:91:45:9f:d8:99:f4:66:bc:6b:08:
                    3f:d8:07:04:85:83:36:b2:b7:7f:5b:a2:a4:77:f4:
                    d9:76:ac:1f:b6:1c:df:db:f0:5c:ab:35:6e:44:e9:
                    dd:e4:8e:29:7d:c0:7c:7e:ee:55:68:37:6f:23:46:
                    89:b4:ef:35:59:e4:1c:d5:40:8f:83:b9:8a:e9:cb:
                    79:2e:7e:56:dd:9e:0f:b0:0c:be:38:3d:bb:a3:69:
                    e5:45:6d:33:1d:1e:12:8d:5f:e7:3e:31:7e:67:8f:
                    c9:81:78:de:f1:f3:c4:03:be:5f:47:29:31:a9:e3:
                    e3:fa:d1:8e:be:b7:b6:b4:c2:f8:6c:37:f6:7c:46:
                    66:10:a8:5c:1c:2c:c7:2c:50:34:07:5d:3a:dd:55:
                    bb:bc:c1:c5:19:91:bf:40:25:94:6e:46:38:89:f1:
                    cf:63:22:a6:03:dc:ae:7e:bb:38:fa:ff:4c:62:46:
                    14:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A6:B0:3A:E0:C3:60:5A:7D:8C:63:C9:21:53:39:B4:B9:56:8F:29
            X509v3 Authority Key Identifier:
                keyid:43:AA:7F:20:13:31:D7:10:A3:F0:68:22:BE:4D:47:2A:52:07:EB:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q6p_IBMx1xCj8Ggivk1HKlIH6wk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/RaawOuDDYFp9jGPJIVM5tLlWjyk.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:ac:35:11:0b:0f:86:0b:6e:b4:a9:60:bd:15:5c:2c:57:2f:
         a5:e2:1e:95:94:2c:f1:56:dd:00:2d:43:ee:09:de:ea:85:69:
         e2:31:fd:03:56:9d:13:72:3b:8c:c0:25:9d:40:82:91:92:55:
         49:70:44:6b:e0:8e:f6:bf:81:b7:ff:92:36:fc:1d:90:4c:25:
         d3:76:4a:a9:03:d6:fb:3e:6e:2f:cd:f6:52:21:89:a1:ff:d9:
         92:1a:7a:c2:c2:21:54:c4:00:eb:1e:22:82:e9:81:47:85:bb:
         03:b5:46:a6:88:48:84:c4:7f:a9:92:6e:b1:6b:2b:dc:66:c6:
         18:0e:ae:1f:a5:05:7e:87:54:f5:39:36:3b:0a:68:f4:cd:df:
         8e:c7:0a:18:bc:d9:01:8a:8b:8f:2a:51:51:6f:fe:34:19:58:
         29:f5:bd:85:af:e7:96:b3:d6:dc:1d:55:f5:ec:94:6e:e2:4f:
         30:01:bb:9c:d2:10:61:c8:04:4f:6e:10:8c:02:e0:5d:ff:80:
         ef:7e:e9:f9:da:41:a6:13:d7:89:70:88:81:05:61:80:8f:1d:
         ff:a8:de:1f:38:3e:4b:c4:ad:22:3e:c3:6d:4a:93:94:3a:db:
         cc:aa:96:3e:6b:3c:52:df:ce:d4:8f:ae:89:92:85:2d:63:4a:
         c6:4a:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:57:42 2026 by rpki-client