This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/cOAo_djsUcchulLOe4BnPwwaA3s.roa
File:                     cOAo_djsUcchulLOe4BnPwwaA3s.roa (raw, json)
Hash identifier:          nSVkQ2u5R4pG67MqjuPGFdhG+87KVuOMrdmAffAzE0M=
Subject key identifier:   70:E0:28:FD:D8:EC:51:C7:21:BA:52:CE:7B:80:67:3F:0C:1A:03:7B
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       053E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cOAo_djsUcchulLOe4BnPwwaA3s.roa
Signing time:             Wed 14 May 2025 01:38:06 +0000
ROA not before:           Wed 14 May 2025 01:38:06 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        119.16.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: May 14 01:38:06 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=70E028FDD8EC51C721BA52CE7B80673F0C1A037B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:a2:b2:cc:16:af:22:5b:2e:38:51:54:3a:
                    5a:21:e0:a8:63:f7:bc:34:03:00:ac:d9:fb:f2:78:
                    a2:f8:98:f9:99:44:87:01:b0:99:08:4e:ab:84:14:
                    13:11:d1:07:f6:fe:1e:3d:57:62:9d:50:d6:84:78:
                    0d:45:5a:f6:09:36:17:6c:27:06:1e:2c:11:ce:55:
                    ca:c9:97:a0:dc:3f:27:4b:5f:97:65:f6:77:1b:58:
                    f2:81:8d:c8:b4:b2:0c:d4:51:1a:b8:23:9e:0a:0a:
                    73:36:e3:b9:66:fc:b9:cf:5d:8d:e3:a1:29:0d:39:
                    c8:bd:1c:77:f4:87:52:d3:6b:b9:ae:ec:76:7a:d2:
                    97:62:04:49:10:4b:db:e2:12:ef:f4:db:a1:85:a7:
                    d8:2a:a9:60:5c:40:14:e3:93:9f:59:1e:a7:33:46:
                    45:2b:21:be:04:44:d9:0f:ac:d6:4f:a4:6c:a6:8b:
                    52:ca:a0:70:bc:36:44:05:1d:c7:2b:36:ee:12:6c:
                    3e:37:48:e7:db:cf:c2:9d:96:cd:e6:52:6e:c2:92:
                    56:4d:b7:a0:04:81:78:c5:31:3f:60:90:17:ee:c5:
                    ca:7b:72:f7:ed:f5:9e:7e:08:73:69:11:7a:97:a9:
                    14:32:d3:6e:ae:00:08:08:4b:10:0d:32:49:bf:6e:
                    f3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E0:28:FD:D8:EC:51:C7:21:BA:52:CE:7B:80:67:3F:0C:1A:03:7B
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cOAo_djsUcchulLOe4BnPwwaA3s.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:37:6d:12:2a:c0:a8:49:f6:ae:96:6b:0f:b3:4f:a5:48:fe:
         ac:97:cb:21:28:38:76:0e:bb:b2:b2:30:68:fa:f5:b3:04:d9:
         e1:cd:fc:df:aa:ae:b3:e0:fa:9c:b1:a6:14:5d:4c:e8:8f:8b:
         4a:b5:bf:58:f0:52:19:4c:9c:34:46:72:27:e4:14:ea:f8:cb:
         68:b1:6b:f3:5c:59:75:c8:f7:b6:4d:82:22:c1:ad:56:ea:88:
         aa:28:4d:bb:6e:4d:f0:0d:b2:dc:76:67:b1:77:8a:c6:9f:3e:
         f2:6c:11:21:c2:87:ff:d8:76:6b:bd:25:45:b4:65:9f:e8:27:
         49:03:00:15:d5:21:a4:66:b4:a3:9b:53:8f:ec:69:be:d3:af:
         f6:ad:c6:ef:da:0e:dd:d2:03:46:72:90:16:8b:5b:bd:c0:6e:
         8b:cd:8d:ab:8e:72:fa:cb:cc:18:7e:e8:6b:82:65:d2:e8:05:
         d1:07:4f:8a:93:f1:eb:be:05:1a:62:00:48:ae:d0:d6:dc:41:
         d4:49:6a:8b:c0:db:b3:79:dd:5a:67:92:68:27:76:bf:56:92:
         8e:0e:82:f9:8b:71:61:81:58:65:e9:a9:85:f8:af:40:d7:a1:
         9b:8c:10:49:22:77:4a:48:c6:5b:a1:e1:86:71:d0:67:48:11:
         73:b8:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:41:22 2025 by rpki-client