This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/vjb66Z_SOniTB9XVChLTVCrq3EQ.roa
File:                     vjb66Z_SOniTB9XVChLTVCrq3EQ.roa (raw, json)
Hash identifier:          803jHXDgQiYOqeO9VnKkqWBpZ2cPH0jl99XtOAgUwtI=
Subject key identifier:   BE:36:FA:E9:9F:D2:3A:78:93:07:D5:D5:0A:12:D3:54:2A:EA:DC:44
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       1976
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vjb66Z_SOniTB9XVChLTVCrq3EQ.roa
Signing time:             Sat 27 Apr 2024 20:53:51 +0000
ROA not before:           Sat 27 Apr 2024 20:53:51 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6518 (0x1976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Apr 27 20:53:51 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=BE36FAE99FD23A789307D5D50A12D3542AEADC44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:35:d9:d6:9a:35:ac:32:c9:95:3d:ae:a4:
                    ee:0b:61:b4:a0:d5:62:c8:75:d3:1f:69:42:27:72:
                    a2:b1:77:ee:2d:89:f5:4a:df:a4:75:88:7a:de:7b:
                    fd:e8:35:9d:85:2a:f0:c0:13:35:7d:11:0d:b7:e6:
                    76:79:d7:bf:68:65:82:6e:6f:48:30:b9:a4:ff:1a:
                    17:36:aa:19:75:70:55:b8:5d:c1:52:21:1f:b4:81:
                    be:14:43:ec:1d:2e:0d:d8:6a:63:b7:3d:75:e9:2f:
                    bf:87:95:48:23:fd:79:3f:e4:87:28:89:5b:6a:ba:
                    6d:9e:da:8f:0b:b2:a6:6c:62:f4:1c:79:2c:1b:80:
                    53:fa:ed:b7:97:a6:c1:33:eb:70:84:52:71:f8:08:
                    88:08:ef:60:6c:fd:25:f0:3a:22:de:59:60:cf:f7:
                    5a:b2:ab:2b:92:73:32:13:06:bb:22:a8:c6:02:32:
                    66:40:a9:5b:a7:49:07:29:38:9d:32:4c:44:38:fd:
                    6b:dd:fd:af:4b:1f:61:e2:22:3b:8b:45:b9:59:f6:
                    88:46:2a:0d:d0:ca:69:a1:fd:8d:d2:83:f4:bb:d5:
                    3b:5d:4f:b7:85:87:6c:19:cf:17:6d:7e:13:0c:bc:
                    ff:2e:b7:30:2a:b6:f4:7d:2b:2b:0a:a9:cd:13:6d:
                    be:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:36:FA:E9:9F:D2:3A:78:93:07:D5:D5:0A:12:D3:54:2A:EA:DC:44
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vjb66Z_SOniTB9XVChLTVCrq3EQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:73:6f:83:82:dd:51:a1:ad:51:07:cb:58:3e:1b:a8:fb:0e:
         38:80:22:a6:8e:5a:dc:48:e5:59:06:81:57:ba:80:a1:6a:a3:
         fb:82:02:03:bd:9f:21:04:8b:b7:54:dd:f6:60:6f:d7:57:d6:
         83:7d:76:a0:55:0f:74:b5:9a:01:ce:37:a9:3d:29:fb:1a:2c:
         73:5c:15:91:e6:30:4a:08:01:36:b2:ee:33:42:83:c8:01:d2:
         f6:15:b1:7b:c7:dc:38:bc:23:67:2a:7b:b2:3b:ef:d1:e9:bb:
         20:47:4f:2d:b6:a0:0b:22:36:fe:bb:9a:c9:0f:ca:db:ab:fd:
         82:e1:a6:08:04:c9:0b:e9:45:cc:ae:19:3f:c6:69:9b:94:33:
         e7:b9:dd:71:c3:cb:f6:e4:89:fb:d6:e2:5f:ec:34:19:62:e9:
         89:4d:6e:21:7a:a9:2f:f8:6b:5a:7d:44:7d:05:f2:0d:f8:a8:
         1c:ce:40:75:1f:1e:2f:9c:ca:ad:ca:f4:fd:da:20:d6:15:b5:
         14:9c:51:1b:20:d4:bf:fd:f7:fc:2e:d8:56:7d:df:67:d1:d2:
         9f:db:c0:ee:54:c9:be:2b:23:0d:25:6c:6a:e3:05:7f:68:2f:
         a8:6f:10:d5:3c:89:3b:e5:cd:ac:49:5e:11:44:44:b5:32:35:
         ce:72:ed:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:55:30 2025 by rpki-client