This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/9Td2fL2v4qkgyPZvd6b4ZhIHdcU.roa
File:                     9Td2fL2v4qkgyPZvd6b4ZhIHdcU.roa (raw, json)
Hash identifier:          8Tfhy83+qj6oCg0VkNheD79pUWBu5Wbs8wKb37HWQQk=
Subject key identifier:   F5:37:76:7C:BD:AF:E2:A9:20:C8:F6:6F:77:A6:F8:66:12:07:75:C5
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       079A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9Td2fL2v4qkgyPZvd6b4ZhIHdcU.roa
Signing time:             Sat 17 May 2025 05:08:18 +0000
ROA not before:           Sat 17 May 2025 05:08:18 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        119.16.0.0/16 maxlen: 16
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: May 17 05:08:18 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=F537767CBDAFE2A920C8F66F77A6F866120775C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:f6:8e:88:d2:bd:90:16:33:ba:b4:83:fa:
                    30:65:7b:00:fc:3a:fd:c6:1c:cd:45:b6:0d:43:3f:
                    99:80:0a:06:ba:72:40:ea:72:0d:9f:1e:18:60:25:
                    48:62:65:c4:b9:21:e1:e5:55:56:28:87:50:87:1c:
                    70:9f:6a:be:59:06:87:ba:fd:8c:2a:09:39:82:e0:
                    47:88:75:bd:5a:58:d0:a6:fe:bf:6e:d8:f4:03:f5:
                    37:42:70:3d:01:7d:7c:91:d5:89:74:e5:6e:bd:12:
                    99:2e:33:6f:42:3b:cc:24:91:47:7e:28:cc:f8:eb:
                    d2:0f:b8:21:75:af:7e:11:36:87:f0:e1:84:d7:38:
                    e4:63:ce:c7:64:5e:04:3f:40:de:cd:5b:2f:1c:35:
                    74:0a:d8:3c:ad:62:84:81:d5:8f:1b:24:8b:0a:ec:
                    98:4d:f7:ae:4e:95:04:7a:65:1e:2a:6b:b3:bf:6b:
                    89:bc:29:64:75:2f:8c:cd:4f:f2:18:40:b4:e9:52:
                    d8:81:db:95:e6:78:23:a2:6d:80:b3:99:93:fa:63:
                    a0:b4:00:12:c5:16:59:48:23:80:3c:f0:cc:d2:4f:
                    d0:eb:d2:b9:2a:62:ca:c1:99:5e:e6:88:14:ad:30:
                    ea:78:74:74:e8:82:9f:0a:cd:c5:de:87:07:8d:8c:
                    cf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:37:76:7C:BD:AF:E2:A9:20:C8:F6:6F:77:A6:F8:66:12:07:75:C5
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9Td2fL2v4qkgyPZvd6b4ZhIHdcU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:28:30:0d:65:4e:b0:1f:b0:da:4c:4f:f2:91:16:14:53:
         84:9c:ae:da:ad:93:d2:36:f9:c0:5e:f4:6a:ac:30:cc:12:56:
         a6:89:5d:6f:55:f7:f4:76:4a:30:93:4c:2e:04:dd:a5:c8:bb:
         48:8f:d8:54:8e:c0:7d:fb:e4:12:b4:0e:55:13:06:f1:cd:58:
         90:4c:da:c7:54:0d:9f:2f:7c:f2:6a:9f:ce:a8:d5:75:63:7f:
         fc:dd:36:8b:80:15:4f:b5:d7:ec:31:db:54:44:0d:f5:4a:4b:
         2e:a5:fe:87:e1:29:b0:57:6f:59:25:f8:d6:60:c6:36:bf:4a:
         c8:f4:d6:cc:36:df:00:43:b8:c4:63:60:60:7e:34:ef:cf:24:
         24:e1:82:49:4d:bd:7f:82:6a:de:7e:aa:4f:e4:55:46:7b:f3:
         ee:20:c1:fc:33:90:b2:db:3b:62:9d:77:8a:c6:3e:26:6e:d6:
         42:11:0c:e6:c1:69:cb:d5:dd:95:7b:70:06:0b:c2:22:b5:8d:
         1a:5b:5f:06:80:73:c2:31:1d:e6:b1:b6:02:73:e7:08:c1:06:
         ff:50:1a:bf:1e:57:ac:41:7b:cc:95:42:22:6e:e8:40:27:75:
         03:52:10:a5:d0:9a:3f:b0:e8:9b:10:54:31:ba:32:ed:d5:ac:
         85:69:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:08:19 2025 by rpki-client