This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/m0B12M1Seu9pwdogwTMjvLnM5os.roa
File:                     m0B12M1Seu9pwdogwTMjvLnM5os.roa (raw, json)
Hash identifier:          7m7wNafugS1T7pC9PN3qrHpzEf1+GoXOqbozBMjCI0c=
Subject key identifier:   9B:40:75:D8:CD:52:7A:EF:69:C1:DA:20:C1:33:23:BC:B9:CC:E6:8B
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       0315
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/m0B12M1Seu9pwdogwTMjvLnM5os.roa
Signing time:             Sun 11 May 2025 04:38:21 +0000
ROA not before:           Sun 11 May 2025 04:38:21 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        27.103.0.0/16 maxlen: 16
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: May 11 04:38:21 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=9B4075D8CD527AEF69C1DA20C13323BCB9CCE68B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:00:8d:9b:5c:71:87:a3:72:ca:68:e6:1e:
                    02:9f:d6:8e:65:0a:95:c7:d2:2a:d7:21:d3:1b:04:
                    eb:c8:5a:a6:bb:ba:01:b5:0f:e3:85:cc:23:1c:52:
                    b7:91:70:44:fb:d8:02:ee:60:38:88:af:ab:b0:0d:
                    a6:35:b7:63:67:2d:15:51:ae:98:60:bc:ad:5c:4c:
                    d0:a4:30:28:bd:3f:d8:8f:46:e7:75:54:62:3a:7e:
                    df:96:ff:eb:89:c7:a9:cc:d3:5f:3d:1f:c4:79:3e:
                    92:43:3a:16:d4:98:33:7d:d7:63:58:7c:49:6d:10:
                    e5:ed:46:70:79:c7:41:4e:be:81:bf:15:eb:1c:a7:
                    bf:06:0e:b6:a8:63:72:5e:ba:f0:5b:09:8e:37:bd:
                    d4:43:4f:64:b9:7d:25:27:fd:dc:7a:ee:e5:e8:52:
                    30:67:0f:05:df:fb:db:00:9c:3a:01:73:15:88:ce:
                    3f:27:9a:ec:3d:53:fd:25:4a:38:5d:72:23:f7:4d:
                    56:ce:e2:82:ae:6b:5d:37:1a:1b:36:71:84:d2:ac:
                    69:5a:f0:a2:c9:6a:cd:77:ea:fb:f1:8c:8f:df:b6:
                    14:e1:f2:e3:f8:fa:d5:00:c6:e3:05:cc:a9:ab:be:
                    7f:2b:1c:ef:5a:1e:51:8b:f0:51:83:0f:16:48:6a:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:40:75:D8:CD:52:7A:EF:69:C1:DA:20:C1:33:23:BC:B9:CC:E6:8B
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/m0B12M1Seu9pwdogwTMjvLnM5os.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         18:af:9e:a3:6b:c7:28:45:8c:b8:f8:98:b7:db:ce:d0:8a:b4:
         5a:0b:41:78:d8:44:49:64:10:9e:1b:ef:5a:ad:31:bb:6c:f0:
         c1:ae:43:0e:b4:07:7d:98:95:d6:ba:ea:55:34:2b:eb:54:20:
         d5:f9:9a:48:0c:00:77:a4:29:46:17:ab:ee:24:fa:3b:72:aa:
         42:69:a3:11:12:be:bb:ed:cd:44:18:8f:72:eb:32:3f:56:16:
         83:1b:e9:cf:95:db:bf:34:a8:ec:88:ea:6f:64:3d:e9:d5:c9:
         c4:92:09:16:11:73:09:01:d8:ce:fd:8a:92:6d:25:d1:12:7f:
         47:ac:21:88:a0:c9:42:d7:4c:f0:28:d0:ca:89:20:f0:2b:ce:
         1d:31:d0:e2:be:46:93:b4:d7:fb:2c:35:a7:2c:96:64:0a:c5:
         23:32:0d:e0:f0:c3:b9:59:7b:5b:e4:a9:ec:4c:85:bb:c7:d2:
         1a:d0:7b:3c:97:c5:a5:c5:e0:b4:84:ce:d1:75:55:c7:9e:76:
         01:18:8a:be:99:64:6a:7e:a2:9f:a4:ec:0c:ac:29:0b:32:45:
         d4:f7:d7:cb:76:40:fd:1f:87:18:87:8a:43:73:90:95:a1:77:
         87:91:9d:77:c8:5f:6e:52:28:2d:74:64:39:80:1a:63:c8:fb:
         80:1d:1f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:08:30 2025 by rpki-client