This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/bf9tjEQhJcypTEpWnmdPn8Wuxzg.roa
File:                     bf9tjEQhJcypTEpWnmdPn8Wuxzg.roa (raw, json)
Hash identifier:          hOMmxYCZH97U36OHqfzp2BvSDJDhyvQwEKdYpYn+K5U=
Subject key identifier:   6D:FF:6D:8C:44:21:25:CC:A9:4C:4A:56:9E:67:4F:9F:C5:AE:C7:38
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       1392
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bf9tjEQhJcypTEpWnmdPn8Wuxzg.roa
Signing time:             Fri 12 Apr 2024 03:53:12 +0000
ROA not before:           Fri 12 Apr 2024 03:53:12 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5010 (0x1392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Apr 12 03:53:12 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=6DFF6D8C442125CCA94C4A569E674F9FC5AEC738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:36:04:7b:b2:ab:8f:9b:46:9c:34:11:11:
                    19:29:ed:12:0d:01:9e:3d:6b:54:64:a8:e2:7e:8f:
                    f4:d9:e6:56:85:b5:de:b6:fd:ee:8d:fb:de:89:db:
                    8b:f1:58:0a:07:19:c3:1f:d2:52:e5:07:ba:49:50:
                    00:a2:4e:8d:d2:1b:f0:4e:0b:da:0c:99:0d:2e:99:
                    8a:4e:90:2b:1d:44:2a:50:90:f4:95:09:2d:6c:04:
                    1f:c5:4d:72:81:7b:7e:ec:4d:b0:ea:94:2c:a7:3a:
                    0d:fe:9f:73:d1:2c:ae:3f:62:5d:ee:15:49:16:ec:
                    10:2c:d5:fc:a7:30:44:24:a2:71:ff:0a:64:85:a5:
                    90:0b:2c:12:a0:ac:1e:5c:41:78:78:c1:56:e8:82:
                    fd:80:fa:ae:d9:a0:1c:e5:08:cc:32:e6:20:c7:8f:
                    fb:8a:d5:f9:87:4b:b0:71:9d:c9:49:7f:ea:01:8d:
                    92:a9:e9:d2:55:8b:6f:a2:58:56:5f:b3:a3:b7:74:
                    b2:27:68:76:b9:d1:ac:e0:0c:c0:62:ec:6c:ef:f9:
                    25:3c:a1:57:c2:97:5b:22:a4:b8:90:99:82:b1:6e:
                    ae:00:e3:1b:49:e2:fc:cd:b7:0e:d0:4b:c7:d3:e9:
                    7d:ab:fa:b8:04:ec:a7:d5:2d:b0:87:0d:18:ae:e1:
                    9f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FF:6D:8C:44:21:25:CC:A9:4C:4A:56:9E:67:4F:9F:C5:AE:C7:38
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bf9tjEQhJcypTEpWnmdPn8Wuxzg.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:cd:c1:bf:05:d0:9a:18:16:c7:cf:63:3c:df:5f:e0:ef:d9:
         b2:3b:3b:1a:51:87:1b:38:36:22:fa:8b:8d:bd:d4:9b:74:f2:
         33:26:38:9e:48:96:cb:22:f0:95:11:60:e4:14:6e:46:d3:c0:
         80:d2:bb:f3:74:bb:e2:5e:ab:12:a5:e0:51:ea:50:11:d4:a6:
         0d:6f:03:ab:1f:be:ea:59:b4:56:ba:6f:9c:c5:37:d3:71:62:
         5c:04:22:70:c7:0b:67:23:3c:48:71:d2:40:07:ff:f2:51:af:
         97:fa:f5:63:df:69:13:76:a4:20:51:99:d2:1d:b4:ff:61:9b:
         a7:77:ec:79:aa:3e:2b:7f:2d:0e:51:33:65:78:7b:a8:b2:bc:
         66:09:0c:c4:12:7a:fe:60:4d:05:ee:c2:d7:8a:03:84:d4:ea:
         2b:e5:ff:25:af:56:1a:1a:c3:6e:cf:3c:6c:b8:18:27:f4:0f:
         95:70:17:bd:3a:a1:49:ae:9d:24:5f:27:4b:76:64:24:15:20:
         f4:06:87:30:5f:45:26:74:4e:1c:d8:e6:51:78:6d:c0:24:aa:
         af:a5:36:09:ed:68:90:86:75:0e:98:3c:47:f6:59:8f:58:d5:
         83:11:b5:57:dc:bd:c2:33:6d:a1:c3:9b:ca:66:52:4c:21:7e:
         4c:f3:3a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:53:01 2025 by rpki-client