This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/IS69W65f7QrNns1fLvgbuAi90Sw.roa
File:                     IS69W65f7QrNns1fLvgbuAi90Sw.roa (raw, json)
Hash identifier:          9EP0KX64rJJHeKC47krIuu3+kYM7elWazIQ/oWKKmWM=
Subject key identifier:   21:2E:BD:5B:AE:5F:ED:0A:CD:9E:CD:5F:2E:F8:1B:B8:08:BD:D1:2C
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       05AA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IS69W65f7QrNns1fLvgbuAi90Sw.roa
Signing time:             Wed 14 May 2025 15:08:03 +0000
ROA not before:           Wed 14 May 2025 15:08:03 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        119.16.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1450 (0x5aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: May 14 15:08:03 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=212EBD5BAE5FED0ACD9ECD5F2EF81BB808BDD12C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:71:b9:38:e6:24:42:6d:fc:7a:39:37:e9:
                    85:70:e0:9c:a2:6d:e4:77:68:4c:14:98:8e:28:65:
                    7f:35:78:d8:a6:22:6d:90:ab:70:33:f3:58:88:fe:
                    a3:0e:88:06:d0:fb:14:a9:4c:a4:a9:f7:7c:36:9b:
                    be:40:2b:4a:00:a4:76:1d:cd:86:e6:c8:07:44:68:
                    0b:4e:9d:5d:bb:b5:73:df:91:ce:1d:14:ea:2f:8d:
                    e1:5f:36:be:c6:8c:29:85:f6:62:92:67:33:a0:b1:
                    d4:91:61:67:12:fe:db:1a:66:1b:c8:72:76:2f:66:
                    a6:8e:af:4f:83:53:00:ca:15:5a:11:0b:8b:ee:0b:
                    20:51:30:40:52:f9:4f:d2:f9:84:34:64:68:86:c9:
                    58:fd:f4:31:d3:4e:84:91:aa:25:89:a5:97:4c:00:
                    0e:d8:2d:33:cf:6d:c9:21:7b:43:a7:7c:f3:7c:e0:
                    2c:a8:fc:92:e7:5c:81:7d:9d:30:47:f7:c2:79:cd:
                    c7:8e:2d:47:c6:00:66:7d:89:ba:5a:f5:47:58:c5:
                    08:59:df:43:75:2e:23:b7:9d:2b:94:90:3b:ef:9f:
                    77:46:7f:cf:1b:8c:27:05:7d:6e:8e:d5:76:37:de:
                    3a:b5:88:9d:4c:20:ec:12:55:4e:65:1d:41:8a:f6:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2E:BD:5B:AE:5F:ED:0A:CD:9E:CD:5F:2E:F8:1B:B8:08:BD:D1:2C
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IS69W65f7QrNns1fLvgbuAi90Sw.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         05:ee:9d:b5:08:21:ac:9e:92:4c:5e:4d:52:3a:f0:05:b5:7b:
         67:c8:8a:32:7f:23:af:53:75:29:43:ba:9c:d3:af:66:09:dc:
         09:2f:82:6e:64:79:49:e0:b1:84:c7:26:27:4d:e7:8e:ff:27:
         50:1f:a6:1f:0d:a5:9e:4c:b8:30:24:23:53:42:e6:cb:1d:68:
         55:06:5a:e7:e0:72:c7:94:2e:a2:c5:ec:0c:ad:fd:2c:b5:b8:
         30:3f:c8:2b:bb:47:75:a4:aa:ca:1d:1c:ca:6b:d1:83:eb:ac:
         32:a8:25:1f:d5:81:38:30:0c:91:b3:1b:57:2e:f9:75:05:1f:
         0d:64:e8:72:57:00:60:2f:9f:f2:e4:2a:cc:f8:51:cb:36:77:
         f6:fc:e3:48:90:24:5d:e9:d3:01:77:ec:26:d2:3c:9b:1d:19:
         a1:04:67:d1:eb:0e:6e:53:9c:ce:d2:00:ee:8e:a7:4b:86:9d:
         c6:29:ee:4b:0b:63:30:6f:9a:19:f8:4c:ee:21:32:48:94:36:
         48:29:e0:ad:78:7d:65:c3:3e:34:f0:11:fc:40:3f:dd:8d:5c:
         4b:46:bd:fe:a1:bf:4f:32:c5:8a:c0:5f:68:c2:ba:d5:36:8f:
         d4:10:13:f4:d9:e2:ff:f3:4a:7c:12:75:cf:7b:a4:54:09:57:
         f8:4c:1f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:16:15 2025 by rpki-client