This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/AkW4bmtAMw39E9O2FM4SzEwI4c4.roa
File:                     AkW4bmtAMw39E9O2FM4SzEwI4c4.roa (raw, json)
Hash identifier:          LFTp3Hj7i/DFw0sj4MJrFbAXrVqNfgkPdjjijHRtJKY=
Subject key identifier:   02:45:B8:6E:6B:40:33:0D:FD:13:D3:B6:14:CE:12:CC:4C:08:E1:CE
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       FD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AkW4bmtAMw39E9O2FM4SzEwI4c4.roa
Signing time:             Thu 08 May 2025 09:37:39 +0000
ROA not before:           Thu 08 May 2025 09:37:39 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        27.103.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: May  8 09:37:39 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=0245B86E6B40330DFD13D3B614CE12CC4C08E1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:30:e2:d9:6a:2a:ac:a3:14:0c:ae:9b:9a:
                    70:54:5d:a8:69:35:67:c3:96:5e:af:ac:20:a8:bf:
                    b7:7b:79:4a:be:7b:22:d1:d8:c2:2c:75:5a:df:ea:
                    5e:a3:8d:22:77:cf:a5:62:03:66:45:c4:2c:14:af:
                    a2:8d:bc:06:10:a1:0b:3f:e0:b6:b1:7a:f0:3a:96:
                    24:2f:ef:b5:b1:20:63:4a:01:cc:d9:94:c5:b8:8e:
                    6b:eb:28:2a:26:00:46:11:bb:3e:07:4c:75:35:54:
                    5c:ad:7b:7c:48:34:cb:ac:38:a8:0f:03:07:c6:17:
                    c5:f6:69:e2:04:07:81:c4:9e:df:3b:fe:e8:25:7c:
                    8d:5e:a3:56:59:f5:d5:c2:cf:f8:cf:06:7b:9f:9f:
                    7a:4c:dc:0c:e0:29:fa:03:b4:52:f2:ee:34:be:bb:
                    a8:9a:2f:26:2f:c1:84:b3:a8:d3:26:0c:25:3e:9f:
                    59:db:0e:92:dd:db:5f:79:8e:71:59:6a:23:03:5c:
                    ec:36:fe:47:42:0f:ad:dd:e8:d2:d4:6b:65:62:16:
                    6b:ff:8f:d0:be:12:de:e2:44:4a:e6:e1:ae:82:f3:
                    e1:42:f0:3d:3d:98:b3:50:c2:81:f1:be:f2:6b:de:
                    9c:51:98:a1:8c:79:6b:f2:bb:0c:5f:47:4d:ce:95:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:45:B8:6E:6B:40:33:0D:FD:13:D3:B6:14:CE:12:CC:4C:08:E1:CE
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AkW4bmtAMw39E9O2FM4SzEwI4c4.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4e:ee:f2:8d:37:c5:1e:b5:05:3f:88:fc:b2:89:61:be:ab:ae:
         cf:93:dc:b7:4e:22:86:6e:73:74:aa:87:ad:9e:cb:88:85:99:
         81:16:20:23:b1:9f:55:7f:fd:55:e9:ee:de:d7:ff:12:b9:74:
         0b:51:61:cc:7f:ec:ab:29:29:fc:51:74:b2:20:17:9c:d1:97:
         92:8c:10:33:ec:1f:29:6a:49:b1:a1:a3:3a:6f:88:09:ed:d7:
         64:d2:2d:a5:1b:d1:fa:c0:7d:13:5a:e1:f1:61:33:5a:49:de:
         10:bf:37:3c:aa:50:29:b8:75:c2:28:93:df:2b:ec:b8:19:53:
         80:dc:38:3c:73:24:1c:1d:5a:8e:9f:46:95:92:8b:1c:8b:48:
         38:a6:7c:95:d3:c9:52:82:63:80:a8:21:02:75:2d:00:57:f1:
         51:51:cd:f9:8c:b7:52:70:b8:1b:0a:70:1a:ad:4d:97:8b:c8:
         bf:27:fa:c8:65:c7:9f:41:08:be:b1:2b:fa:87:39:7a:91:da:
         26:8e:02:cd:c5:41:b1:99:8e:d0:e5:4b:8f:45:ed:ba:d5:39:
         75:a4:bf:74:20:a7:a0:50:ac:85:62:0c:86:4f:a3:e6:ab:08:
         70:f2:f8:e7:35:f0:40:57:5d:66:d5:ab:c7:99:1b:61:e0:d7:
         32:6a:9a:3a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDgw
OTM3MzlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDAyNDVCODZFNkI0MDMz
MERGRDEzRDNCNjE0Q0UxMkNDNEMwOEUxQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCujDDi2WoqrKMUDK6bmnBUXahpNWfDll6vrCCov7d7eUq+eyLR
2MIsdVrf6l6jjSJ3z6ViA2ZFxCwUr6KNvAYQoQs/4LaxevA6liQv77WxIGNKAczZ
lMW4jmvrKComAEYRuz4HTHU1VFyte3xINMusOKgPAwfGF8X2aeIEB4HEnt87/ugl
fI1eo1ZZ9dXCz/jPBnufn3pM3AzgKfoDtFLy7jS+u6iaLyYvwYSzqNMmDCU+n1nb
DpLd2195jnFZaiMDXOw2/kdCD63d6NLUa2ViFmv/j9C+Et7iRErm4a6C8+FC8D09
mLNQwoHxvvJr3pxRmKGMeWvyuwxfR03OlYE3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAkW4bmtAMw39E9O2FM4SzEwI4c4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9Ba1c0Ym10QU13MzlFOU8y
Rk00U3pFd0k0YzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAE7u8o03xR61BT+I/LKJYb6rrs+T3LdOIoZu
c3Sqh62ey4iFmYEWICOxn1V//VXp7t7X/xK5dAtRYcx/7KspKfxRdLIgF5zRl5KM
EDPsHylqSbGhozpviAnt12TSLaUb0frAfRNa4fFhM1pJ3hC/NzyqUCm4dcIok98r
7LgZU4DcODxzJBwdWo6fRpWSixyLSDimfJXTyVKCY4CoIQJ1LQBX8VFRzfmMt1Jw
uBsKcBqtTZeLyL8n+shlx59BCL6xK/qHOXqR2iaOAs3FQbGZjtDlS49F7brVOXWk
v3Qgp6BQrIViDIZPo+arCHDy+Oc18EBXXWbVq8eZG2Hg1zJqmjo=
-----END CERTIFICATE-----
Generated at Sun Dec 21 22:44:51 2025 by rpki-client