This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/CKIMqfq9jhjk_qsrqNbRER58wJE.roa
File:                     CKIMqfq9jhjk_qsrqNbRER58wJE.roa (raw, json)
Hash identifier:          Gek5lqcZYgYjOoZ6jcEDYApi09YST4uHp2QCKJzgImI=
Subject key identifier:   08:A2:0C:A9:FA:BD:8E:18:E4:FE:AB:2B:A8:D6:D1:11:1E:7C:C0:91
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       0E0C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/CKIMqfq9jhjk_qsrqNbRER58wJE.roa
Signing time:             Thu 28 Mar 2024 10:22:27 +0000
ROA not before:           Thu 28 Mar 2024 10:22:27 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3596 (0xe0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Mar 28 10:22:27 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=08A20CA9FABD8E18E4FEAB2BA8D6D1111E7CC091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:d8:52:69:e8:dc:35:5f:14:1d:a9:21:f9:
                    0e:bb:5f:81:0a:a4:9d:33:9a:42:c4:aa:eb:37:d4:
                    16:c3:24:bf:16:d4:46:f5:3b:a2:3f:81:50:df:1b:
                    99:af:3b:43:e4:e9:6d:50:f0:30:5b:6b:67:74:0e:
                    c4:7b:11:a6:9d:72:0f:a2:a6:77:17:90:9b:5c:16:
                    5d:ec:cb:6b:b8:aa:d9:02:ea:02:f6:d2:4d:67:12:
                    d9:7a:89:5a:f5:94:f3:50:69:4c:c0:06:76:25:bc:
                    d6:55:5b:df:c3:98:2d:00:3d:91:40:6b:c8:7e:59:
                    8f:81:53:7e:98:1d:35:be:5c:7a:8e:23:d8:9c:04:
                    32:94:18:ed:0b:78:a7:6d:24:1d:0e:fc:88:db:e7:
                    16:cd:47:0c:ac:a7:ea:78:2c:51:71:06:a5:37:90:
                    00:22:99:e0:59:8f:d1:d2:4d:ea:ce:c8:37:f0:54:
                    99:92:34:cd:81:e6:8f:93:93:83:3d:5a:44:bf:ff:
                    c0:fb:c6:8b:4c:d7:96:68:24:bc:47:63:b7:19:44:
                    34:da:97:45:c9:85:5e:24:8a:13:cc:19:68:03:94:
                    c2:fb:c7:87:6b:64:28:f7:92:13:2f:b6:23:5b:1b:
                    d2:0f:5c:1d:d5:50:52:0e:33:ae:83:bc:2e:13:2d:
                    c6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A2:0C:A9:FA:BD:8E:18:E4:FE:AB:2B:A8:D6:D1:11:1E:7C:C0:91
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/CKIMqfq9jhjk_qsrqNbRER58wJE.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         06:b4:bd:52:e9:cc:0d:ee:05:3e:62:66:5f:46:f6:64:49:88:
         c9:96:47:dd:ba:1f:40:11:3b:4b:27:83:52:21:29:6b:39:42:
         4b:47:e5:37:82:4e:4d:df:4a:9d:aa:2e:cf:3a:e9:10:66:27:
         1b:e4:2e:cc:51:3f:b2:d5:85:1d:5e:ab:5f:3f:ca:ea:51:6a:
         bb:cf:c0:57:a3:e8:a0:80:da:a8:04:50:64:d8:17:89:48:d5:
         fa:87:c4:3f:99:f4:c8:d4:bb:68:2a:74:aa:a7:a2:e1:1c:18:
         e1:88:f4:60:1a:9c:e6:d0:24:9f:ca:bc:b6:54:56:b6:0a:7e:
         96:9a:19:19:0d:4c:cc:25:8d:3d:87:d8:2e:9f:ec:52:26:47:
         cc:12:e4:3b:36:05:9c:9b:14:ea:4b:5b:ee:5b:55:70:99:1f:
         09:9c:e1:df:73:19:e5:3a:19:ac:48:12:33:99:6f:b7:de:f7:
         bf:00:1e:80:09:c4:2f:d7:3e:ba:f7:04:66:3f:d7:24:dd:62:
         f0:47:f7:ad:5e:81:14:df:5c:0a:90:59:74:e5:e5:3c:11:7f:
         31:3a:6e:d2:25:d7:2e:40:af:de:dc:1a:42:a0:ec:64:4d:0c:
         bb:94:19:3c:ba:fe:8d:32:d4:d2:50:50:e4:44:4e:fa:1a:0c:
         c9:e4:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:15:24 2025 by rpki-client