This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/fQ4RX99Dzp2fxsioxoDcA3Lrb2Q.roa
File:                     fQ4RX99Dzp2fxsioxoDcA3Lrb2Q.roa (raw, json)
Hash identifier:          O/fY2OQHw7Xse9THY043xgNXHjHydVjHhoSEky1LH60=
Subject key identifier:   7D:0E:11:5F:DF:43:CE:9D:9F:C6:C8:A8:C6:80:DC:03:72:EB:6F:64
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       1266
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/fQ4RX99Dzp2fxsioxoDcA3Lrb2Q.roa
Signing time:             Tue 09 Apr 2024 00:53:00 +0000
ROA not before:           Tue 09 Apr 2024 00:53:00 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4710 (0x1266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Apr  9 00:53:00 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=7D0E115FDF43CE9D9FC6C8A8C680DC0372EB6F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:41:e2:70:cf:44:78:8e:8f:ce:a6:26:a9:e4:
                    3a:9b:fa:55:b1:1d:9f:40:c8:15:a9:7e:97:e6:8d:
                    41:ee:4a:58:7c:b3:ae:0f:eb:b1:4e:f1:2c:77:38:
                    f9:c3:f0:56:f4:42:22:aa:04:1e:00:07:6b:4f:32:
                    57:21:1c:dd:b6:be:17:b9:84:8a:dc:e0:5c:25:90:
                    8c:fe:2a:9e:49:cf:46:e0:da:17:ca:03:b8:d6:2c:
                    2b:f6:fc:1a:8c:a8:63:b0:c1:87:b9:93:a4:2b:d0:
                    a8:6c:15:9b:9b:7d:39:a7:69:f6:de:93:ba:69:6f:
                    0a:53:8c:6e:e2:8e:ed:1c:50:fe:af:9d:d6:c6:64:
                    bb:91:7d:3a:f2:e3:ab:20:76:f7:b4:0e:f7:41:d4:
                    40:46:b1:8d:33:cd:9e:b8:7d:f4:a9:d8:98:5a:f3:
                    e9:0f:95:38:50:1c:11:12:28:e9:32:5b:70:4f:b0:
                    1e:72:e4:a9:de:b9:27:df:28:70:86:b1:f5:69:3b:
                    c7:72:82:eb:2b:98:58:e7:1d:53:d8:48:e4:da:e3:
                    4b:9d:21:22:dd:fb:ea:ec:3c:fd:0d:5a:ae:5f:18:
                    07:b1:7f:8f:41:29:75:2a:49:a4:b5:17:5b:3a:a4:
                    4e:6b:73:e2:77:07:13:80:50:e7:03:32:3b:b6:3a:
                    fa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0E:11:5F:DF:43:CE:9D:9F:C6:C8:A8:C6:80:DC:03:72:EB:6F:64
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/fQ4RX99Dzp2fxsioxoDcA3Lrb2Q.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4e:39:31:10:fa:ec:a3:0b:54:37:41:c7:27:84:90:35:a3:4c:
         82:23:86:85:d2:f7:68:73:7b:e6:15:71:88:8b:60:98:da:0c:
         cc:47:da:2c:e5:cb:f6:d5:7e:15:3f:8e:cb:6c:28:d1:f1:c1:
         6f:dc:ee:e3:dc:c4:17:bb:70:d3:b5:ff:e6:d3:47:01:bf:83:
         c8:1d:86:fd:7d:39:36:d4:f8:df:3c:8c:f7:48:01:8f:89:81:
         f5:6e:1f:a2:d7:78:ba:17:3d:d9:82:64:31:90:a3:ee:2d:ba:
         14:dc:be:79:22:9d:38:e9:37:4c:8e:a6:af:22:ed:b9:cd:dc:
         01:e8:a7:26:ab:11:dd:ba:dc:3e:05:39:8f:fe:3e:77:32:a4:
         22:3d:d9:06:c7:7a:16:58:39:86:f8:56:84:b5:a6:7d:fe:1a:
         aa:a5:19:b9:12:b7:cd:f9:50:88:83:08:dd:71:66:c3:48:87:
         63:5a:2a:32:b7:24:58:fd:9d:fc:43:bd:af:9b:72:c7:76:0e:
         30:34:9d:b7:18:20:c2:85:9d:35:5d:8c:03:42:25:f5:92:7d:
         f3:48:b0:b4:63:ed:ee:c1:cf:61:8c:01:f6:95:7b:d5:6e:8f:
         e0:70:b7:0c:c1:09:16:94:d3:be:9d:bf:fa:5e:89:28:47:35:
         13:b2:0d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 13:03:48 2025 by rpki-client