This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/A6nCP2PS18cT7AF_Ha-nQPl7FSY.roa
File:                     A6nCP2PS18cT7AF_Ha-nQPl7FSY.roa (raw, json)
Hash identifier:          cgVvxsf+dN4IGDL53eSqsJKEjtcR4RKSBhxD/BJvnfE=
Subject key identifier:   03:A9:C2:3F:63:D2:D7:C7:13:EC:01:7F:1D:AF:A7:40:F9:7B:15:26
Certificate issuer:       /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial:       0520
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/A6nCP2PS18cT7AF_Ha-nQPl7FSY.roa
Signing time:             Fri 17 Jan 2025 05:24:43 +0000
ROA not before:           Fri 17 Jan 2025 05:24:43 +0000
ROA not after:            Sat 27 Sep 2025 02:40:14 +0000
asID:                     139076
IP address blocks:        113.31.64.0/21 maxlen: 24
                          113.31.72.0/21 maxlen: 24
                          113.31.128.0/21 maxlen: 24
                          113.31.136.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1312 (0x520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
        Validity
            Not Before: Jan 17 05:24:43 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=03A9C23F63D2D7C713EC017F1DAFA740F97B1526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a6:64:1e:3c:31:3d:21:21:b0:99:73:b5:5e:
                    ef:8e:e9:55:cc:ba:4a:c0:a6:4c:a5:08:87:a3:93:
                    54:a3:22:f1:eb:dd:ca:d3:cb:8c:1c:22:7b:7d:25:
                    8e:cc:19:40:fa:b7:f0:99:ce:da:53:e1:6e:a1:ea:
                    f2:35:c3:e7:6e:3e:f2:a3:87:42:25:ac:f0:6b:17:
                    d1:54:6f:53:b8:44:0d:10:ce:b2:6c:05:7e:1c:51:
                    d7:5b:d5:76:4b:1c:71:ef:24:2a:b2:5b:20:d4:ff:
                    f1:dc:c7:d8:f8:05:d9:8b:7c:c1:d4:ae:d8:fa:6e:
                    71:2b:2f:e3:19:34:77:48:74:83:a0:cf:13:68:23:
                    be:c3:7f:08:de:02:e5:8c:be:1b:51:5a:1d:fc:6f:
                    74:11:40:d8:35:77:15:dc:dc:be:21:5c:9d:73:9b:
                    56:c6:3d:08:be:ed:b8:2c:55:46:ca:6b:bd:d2:00:
                    8a:1c:73:e7:17:af:95:fc:ce:e9:c9:60:fc:3a:5a:
                    a3:d4:21:ae:31:e4:98:93:dc:02:99:13:c7:d3:6f:
                    75:e7:5c:3b:ec:d0:d0:72:c8:91:dc:7e:c4:69:62:
                    23:65:d0:e3:df:a0:09:43:13:4d:fd:3b:6b:a6:80:
                    d3:52:bd:f0:91:4e:c0:fb:e5:f7:2c:f4:c1:8b:36:
                    30:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:C2:3F:63:D2:D7:C7:13:EC:01:7F:1D:AF:A7:40:F9:7B:15:26
            X509v3 Authority Key Identifier:
                keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/A6nCP2PS18cT7AF_Ha-nQPl7FSY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.31.64.0/20
                  113.31.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         af:06:b4:af:1f:86:6e:e8:98:4d:0e:71:ef:3d:d8:4d:fb:1c:
         97:9a:94:8b:90:d4:bd:ca:8a:3b:d1:72:ec:f5:6f:63:f1:65:
         7f:3f:29:5b:35:d5:44:c0:cf:40:33:47:bd:28:71:7b:c7:40:
         90:78:76:8b:ce:38:d5:74:4f:69:81:35:3c:82:71:18:59:49:
         a6:0e:7c:c8:a8:f2:42:1d:48:14:12:48:d5:0b:ca:f6:6c:76:
         89:1d:31:c5:35:dd:76:1a:c9:c2:ac:f6:3b:23:e3:a8:59:0e:
         ca:be:0f:86:c2:2e:9a:7d:34:14:91:c3:b5:a2:4e:a8:f5:6d:
         f3:48:17:c8:54:85:69:70:92:fd:0b:ce:ff:a9:67:1c:ac:ee:
         a1:7f:14:eb:7a:7b:dc:a3:63:46:45:8c:7d:01:82:cb:a4:ab:
         8a:00:db:1a:b0:90:f4:e6:fa:e6:48:c3:a3:f9:d8:5f:ec:4c:
         b1:b9:ab:6e:c4:49:3b:fd:c6:4b:04:a5:d1:8e:88:f3:e3:48:
         3a:87:1b:43:04:7d:e5:11:d1:e7:46:9e:f8:ff:53:75:ec:2e:
         d2:62:97:ff:f1:bb:12:99:bd:42:c9:ee:04:8f:0b:75:94:06:
         14:49:4c:a7:f0:17:98:2a:36:c5:65:9c:2d:13:f6:b1:62:79:
         d2:0a:85:05
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMTcw
NTI0NDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAzQTlDMjNGNjNEMkQ3
QzcxM0VDMDE3RjFEQUZBNzQwRjk3QjE1MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCpmQePDE9ISGwmXO1Xu+O6VXMukrApkylCIejk1SjIvHr3crT
y4wcInt9JY7MGUD6t/CZztpT4W6h6vI1w+duPvKjh0IlrPBrF9FUb1O4RA0QzrJs
BX4cUddb1XZLHHHvJCqyWyDU//Hcx9j4BdmLfMHUrtj6bnErL+MZNHdIdIOgzxNo
I77DfwjeAuWMvhtRWh38b3QRQNg1dxXc3L4hXJ1zm1bGPQi+7bgsVUbKa73SAIoc
c+cXr5X8zunJYPw6WqPUIa4x5JiT3AKZE8fTb3XnXDvs0NByyJHcfsRpYiNl0OPf
oAlDE039O2umgNNSvfCRTsD75fcs9MGLNjAHAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUA6nCP2PS18cT7AF/Ha+nQPl7FSYwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0E2bkNQMlBTMThjVDdB
Rl9IYS1uUVBsN0ZTWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAK8GtK8fhm7omE0Oce892E37
HJealIuQ1L3KijvRcuz1b2PxZX8/KVs11UTAz0AzR70ocXvHQJB4dovOONV0T2mB
NTyCcRhZSaYOfMio8kIdSBQSSNULyvZsdokdMcU13XYaycKs9jsj46hZDsq+D4bC
Lpp9NBSRw7WiTqj1bfNIF8hUhWlwkv0Lzv+pZxys7qF/FOt6e9yjY0ZFjH0Bgsuk
q4oA2xqwkPTm+uZIw6P52F/sTLG5q27ESTv9xksEpdGOiPPjSDqHG0MEfeUR0edG
nvj/U3XsLtJil//xuxKZvULJ7gSPC3WUBhRJTKfwF5gqNsVlnC0T9rFiedIKhQU=
-----END CERTIFICATE-----
Generated at Sun Dec 21 17:30:11 2025 by rpki-client