This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/5H9xm8sFNjlauRfit6inw9B9qF8.roa
File:                     5H9xm8sFNjlauRfit6inw9B9qF8.roa (raw, json)
Hash identifier:          ST519f8zju4XOEkqrxswQqviHUh35KmFlV/rOg2xuv4=
Subject key identifier:   E4:7F:71:9B:CB:05:36:39:5A:B9:17:E2:B7:A8:A7:C3:D0:7D:A8:5F
Certificate issuer:       /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Certificate serial:       1B21
Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/5H9xm8sFNjlauRfit6inw9B9qF8.roa
Signing time:             Thu 25 Dec 2025 02:28:47 +0000
ROA not before:           Thu 25 Dec 2025 02:28:47 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     37963
IP address blocks:        103.52.80.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6945 (0x1b21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
        Validity
            Not Before: Dec 25 02:28:47 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=E47F719BCB0536395AB917E2B7A8A7C3D07DA85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:db:f4:3b:ed:3a:fa:75:a1:a8:56:be:e3:24:
                    be:93:a3:2d:5e:ba:8e:4f:c3:74:64:8a:c1:01:8e:
                    48:2d:d3:e2:48:56:a4:77:6e:2b:d5:6e:f6:39:a6:
                    4e:31:ac:90:11:8c:b9:60:21:56:3d:b5:98:d1:a7:
                    38:3d:33:45:c0:d5:83:6e:e4:b1:00:dc:60:4c:e2:
                    c2:5f:f9:30:7c:9b:ea:75:e0:a3:01:a4:1d:99:05:
                    e1:43:ab:f2:0e:09:82:b3:a2:5f:9e:7c:bf:2d:4e:
                    a8:d8:eb:84:af:06:72:6d:7f:70:36:16:cd:8b:4a:
                    a8:5a:e7:e9:80:25:4f:aa:14:8c:e5:b8:28:36:81:
                    f0:75:4b:ee:e1:2b:ed:b2:67:0a:c4:d4:d9:ee:4c:
                    53:3a:48:2e:2a:34:db:d5:f5:4a:df:95:2b:0f:93:
                    d4:1b:cc:3d:e0:71:0f:ae:a5:be:f6:c5:fa:0a:f5:
                    f8:59:6a:b7:35:e4:eb:d8:89:55:71:bf:cb:13:18:
                    2b:7e:bf:1f:7f:76:72:1d:b4:94:c6:88:97:ed:46:
                    39:16:9e:46:f8:30:3d:35:82:d7:f7:40:87:52:6e:
                    2d:d3:0d:75:fb:2f:80:fd:ca:27:4c:c9:11:f2:96:
                    dd:30:34:d4:af:d2:45:22:0a:48:72:28:9d:2a:13:
                    9b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7F:71:9B:CB:05:36:39:5A:B9:17:E2:B7:A8:A7:C3:D0:7D:A8:5F
            X509v3 Authority Key Identifier:
                keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/5H9xm8sFNjlauRfit6inw9B9qF8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:92:13:f8:c5:60:f2:53:67:c3:81:c2:7a:83:42:13:95:1f:
         04:b1:4f:2d:1b:e9:02:e3:ec:11:96:30:ea:78:6f:bd:15:c4:
         32:5b:5b:4f:a0:fe:82:13:f3:7f:7a:25:eb:ad:92:b4:5a:ff:
         ba:0e:ab:2b:2f:38:9f:ba:61:a3:5b:6c:d3:1b:6e:1e:75:2c:
         c0:9f:19:81:e7:a8:f9:f1:aa:d0:5a:50:6a:66:84:a5:30:00:
         ba:07:a2:46:9b:d4:9e:50:8f:7f:c0:2e:6a:64:6c:8d:59:a6:
         f3:d5:19:32:66:20:0b:55:79:21:f8:40:82:69:83:c1:5f:0a:
         fa:11:da:c0:2a:9f:e5:a0:5a:3b:53:71:86:10:85:d2:ff:7b:
         72:2c:cb:44:fd:f4:a1:b9:73:1d:6a:48:9b:52:1f:a7:fc:04:
         5c:8d:ef:54:b5:b0:cd:91:25:42:13:32:9e:a0:7b:a3:27:5b:
         63:65:05:19:cb:cf:cc:ee:bd:59:3d:ed:74:ec:bf:e3:cc:05:
         34:5d:ce:7b:66:51:ad:28:58:e6:71:f0:b1:54:f0:b1:04:27:
         53:6c:9b:2b:53:a8:21:4e:23:63:d0:48:06:f9:18:6a:43:09:
         03:e1:f1:3f:ee:72:de:0d:00:de:82:92:26:1d:96:f4:f0:a7:
         2e:60:7b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 06:51:10 2026 by rpki-client