This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/WTk6bMC9N7aIoENGrxZ0l6uLyC8.roa
File:                     WTk6bMC9N7aIoENGrxZ0l6uLyC8.roa (raw, json)
Hash identifier:          j/2zffjkrYxps9nZ6ALk9ffr4uLVRkHSJlQp8llYfwQ=
Subject key identifier:   59:39:3A:6C:C0:BD:37:B6:88:A0:43:46:AF:16:74:97:AB:8B:C8:2F
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       1C5E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/WTk6bMC9N7aIoENGrxZ0l6uLyC8.roa
Signing time:             Sun 05 May 2024 14:54:30 +0000
ROA not before:           Sun 05 May 2024 14:54:30 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7262 (0x1c5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: May  5 14:54:30 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=59393A6CC0BD37B688A04346AF167497AB8BC82F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:62:22:d5:1f:11:82:e6:b1:d5:23:06:0b:d6:
                    7b:c5:ed:0d:84:29:7e:0e:26:2f:ca:b7:62:e0:6a:
                    f6:7e:97:4d:ee:f9:9d:93:c1:14:24:3c:94:ee:ff:
                    ae:ac:74:86:28:77:5e:4a:f2:89:33:72:16:9c:3f:
                    c7:a2:14:c0:34:5c:41:67:98:db:44:ca:33:3f:5b:
                    f3:dc:ed:93:6f:e5:e6:e7:2d:be:b7:95:c1:8d:e5:
                    a3:4b:ad:08:ca:60:b3:70:a8:d0:85:70:c1:d3:0f:
                    34:0e:a4:30:48:86:09:01:2e:a8:31:da:a4:3b:85:
                    cd:28:c3:99:c3:9e:d5:63:c3:2e:96:82:33:5f:e9:
                    f1:cd:31:41:62:ec:2d:45:8d:2c:89:76:7a:33:9d:
                    2b:ba:58:f0:22:2c:09:cc:c4:b4:02:18:67:f8:de:
                    94:c7:6f:8d:91:7c:32:f9:53:0c:0b:72:28:cc:97:
                    c3:e7:b7:60:28:fa:68:02:33:b0:e9:8a:56:00:e6:
                    2b:df:24:c7:f6:07:cb:8d:2f:5c:d0:71:49:cb:b6:
                    70:38:17:29:14:09:87:e3:cf:84:74:73:8b:38:a7:
                    e4:58:02:1d:61:16:63:00:fa:0e:be:bd:36:4f:74:
                    25:86:7f:f0:ad:d3:56:63:be:c9:81:a2:c2:c9:12:
                    8b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:39:3A:6C:C0:BD:37:B6:88:A0:43:46:AF:16:74:97:AB:8B:C8:2F
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/WTk6bMC9N7aIoENGrxZ0l6uLyC8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3b:04:07:d3:36:59:87:c6:69:dd:8a:8b:52:02:4d:07:7a:0a:
         70:fe:05:8f:b1:d4:18:9b:a4:73:96:8b:8d:b4:d9:85:11:39:
         5d:bd:57:7b:29:fa:9e:a3:a9:b8:e7:4a:20:55:c4:63:81:56:
         57:df:66:30:ba:32:f0:b5:2c:b6:47:6d:93:bb:b9:c3:95:52:
         74:6c:17:25:61:0a:0d:9d:92:fc:d4:3c:d2:55:0c:a9:01:e0:
         50:e6:aa:e7:c6:49:10:9f:99:2f:01:64:ad:a8:39:a9:7a:a8:
         45:31:c3:6d:9d:d3:97:11:fe:eb:0e:26:19:64:3a:7f:2d:e1:
         23:f0:53:a8:6d:ce:74:f7:94:78:1f:5b:65:1b:08:7b:c4:7e:
         22:61:61:3e:95:86:39:44:b1:e5:df:20:54:f7:3a:1e:a0:e8:
         cc:1c:30:c8:15:e7:c3:c0:e6:c3:2e:8f:ba:b3:bc:1b:c4:fa:
         dc:3d:0e:a3:55:b0:a6:e0:23:ec:5c:f7:78:28:d9:e8:0c:03:
         5d:72:92:e2:e3:ec:e4:53:9f:ef:a0:03:ab:8b:1d:16:eb:a6:
         b5:1a:92:ad:17:e4:12:01:e7:a8:b1:ec:b3:e5:11:39:82:48:
         9d:e2:61:f2:6d:33:d7:76:90:6e:47:3c:9e:af:5c:36:75:47:
         78:56:d0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 16:01:54 2025 by rpki-client