This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/MqPsASKu1Y7L9FQbxvon7Nb0UVM.roa
File:                     MqPsASKu1Y7L9FQbxvon7Nb0UVM.roa (raw, json)
Hash identifier:          kp6t8O4xNpQ3hWWgrFML81XeuzgQLrW4TKrGFhqYets=
Subject key identifier:   32:A3:EC:01:22:AE:D5:8E:CB:F4:54:1B:C6:FA:27:EC:D6:F4:51:53
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       1AD0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/MqPsASKu1Y7L9FQbxvon7Nb0UVM.roa
Signing time:             Wed 01 May 2024 11:24:02 +0000
ROA not before:           Wed 01 May 2024 11:24:02 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6864 (0x1ad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: May  1 11:24:02 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=32A3EC0122AED58ECBF4541BC6FA27ECD6F45153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:d7:00:36:73:31:1a:e0:21:21:52:78:06:
                    cf:3c:85:e4:7e:c5:01:9b:40:54:a6:df:ca:56:aa:
                    19:9d:aa:01:45:ee:64:06:0b:24:f8:46:5e:22:87:
                    31:01:8d:8f:fb:96:1a:b6:ca:02:f4:ab:41:46:fa:
                    dd:51:b8:b1:27:29:a3:da:19:38:e4:d5:5a:37:29:
                    87:30:b2:20:b8:f0:60:c3:d9:57:81:bb:a2:3e:3c:
                    f0:74:7b:03:73:a0:72:cd:f8:e6:3d:cd:9c:79:3e:
                    0a:b0:5b:c7:48:a6:c2:6f:d6:fa:6a:b9:2c:81:ae:
                    cf:29:e2:64:84:57:d3:0f:b5:31:88:8e:34:a0:ef:
                    72:df:59:2d:2f:79:e0:da:50:54:4c:e6:15:3d:94:
                    dd:4b:80:a6:9c:c3:45:d8:91:43:6b:af:5e:88:2b:
                    2e:fe:ce:9b:a3:1c:13:74:a4:75:fe:87:8c:4b:43:
                    e5:a5:06:5c:a0:83:7c:6d:4d:61:80:87:de:42:64:
                    fd:39:e2:af:a3:67:5f:b9:df:9e:73:c2:1e:31:ae:
                    a0:3b:8e:11:67:7f:e7:86:d4:97:99:2f:09:b8:b5:
                    d9:90:f6:9d:0f:9a:83:74:02:ae:1d:43:b6:22:fd:
                    e9:9c:17:2f:c3:60:ec:72:41:0b:ac:ee:f9:72:33:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A3:EC:01:22:AE:D5:8E:CB:F4:54:1B:C6:FA:27:EC:D6:F4:51:53
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/MqPsASKu1Y7L9FQbxvon7Nb0UVM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:56:3e:84:e1:09:f5:db:59:83:ef:6c:a8:dd:12:65:da:a4:
         40:63:0f:aa:c9:83:51:aa:8d:9b:58:ba:b8:a7:79:d7:e9:8d:
         06:90:11:dc:c6:55:e8:4a:71:1c:02:0b:17:65:ed:2f:eb:88:
         0f:60:cc:93:93:f9:83:52:af:ac:ca:73:b3:c1:11:09:8a:5e:
         60:27:28:8b:7c:da:25:69:37:1f:9a:e6:87:1b:28:c4:76:67:
         ab:65:9b:15:ee:ac:c1:9e:e8:18:c2:ef:0a:e8:97:b7:1b:84:
         ec:b4:37:2b:f8:57:a1:cb:dd:21:4c:a5:7c:26:ae:47:2c:ab:
         d6:09:f0:5b:90:e0:3f:b7:1f:48:1b:66:f0:45:a8:84:03:7b:
         41:68:70:fe:5a:7e:02:38:35:40:1b:a8:7a:f1:20:5e:a6:df:
         fc:2a:9b:29:6a:3a:7f:e0:d3:78:5f:e3:e5:3b:d7:05:bf:f2:
         af:4c:ea:d5:3a:c1:01:40:09:dd:12:b9:72:47:c0:aa:de:18:
         1f:d0:8c:af:fb:f0:38:3c:5f:51:e8:17:4e:07:1b:2e:3b:38:
         cb:b3:f2:f1:81:19:f3:94:68:a2:8d:bf:47:a0:59:52:83:f6:
         59:0d:16:38:f8:6f:d3:60:4a:c5:57:2f:96:88:cd:90:cb:ef:
         54:be:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:46:21 2025 by rpki-client