This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1008/ksV90rYgQGWCW_zswnSCo4Hhlas.roa
File:                     ksV90rYgQGWCW_zswnSCo4Hhlas.roa (raw, json)
Hash identifier:          Fx78asKV1L7Hm6uWNysmnMGruYE92gBLrzXEIF5SsAM=
Subject key identifier:   92:C5:7D:D2:B6:20:40:65:82:5B:FC:EC:C2:74:82:A3:81:E1:95:AB
Certificate issuer:       /CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
Certificate serial:       1B0E
Authority key identifier: 0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/ksV90rYgQGWCW_zswnSCo4Hhlas.roa
Signing time:             Mon 22 Dec 2025 07:48:23 +0000
ROA not before:           Mon 22 Dec 2025 07:48:23 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     37963
IP address blocks:        103.41.140.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6926 (0x1b0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C253A719E8A44FC18E105B95AA2348B5DCED595
        Validity
            Not Before: Dec 22 07:48:23 2025 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=92C57DD2B6204065825BFCECC27482A381E195AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:e3:a8:a0:a2:a1:dc:05:29:87:3c:2a:0c:
                    8c:d5:aa:49:2b:97:59:13:62:52:ab:82:46:8a:00:
                    6c:83:ac:32:cb:2b:9e:83:f6:e5:4f:78:63:84:20:
                    c7:88:4f:82:8f:13:e4:91:f6:33:7f:86:fd:74:a4:
                    fc:fe:d7:3e:09:ea:21:a5:a3:e5:09:8b:a1:6b:99:
                    ff:35:03:cd:7e:45:bd:e7:f1:a2:79:66:04:83:65:
                    31:1e:56:33:6e:83:26:e3:a5:cb:4b:47:c6:ef:9c:
                    ef:da:c9:cb:85:bd:37:21:24:41:2b:c7:5e:90:9f:
                    bf:9d:df:06:df:e4:ed:ab:21:b7:a3:22:ac:11:16:
                    5b:5a:57:84:bb:01:b9:6c:46:bb:54:2c:d7:b9:78:
                    7a:ad:2e:40:ea:0a:ba:c7:30:84:80:8e:78:d0:ca:
                    a4:bb:68:be:14:e6:27:8b:50:93:a9:01:cc:4d:99:
                    3f:ae:89:0f:69:b8:d5:5a:5d:6c:c4:d7:e1:44:3e:
                    9a:45:c6:92:b0:ff:96:d1:2b:e5:75:58:54:1d:c6:
                    a2:44:6a:2c:60:a7:88:f3:91:d3:07:41:5d:62:73:
                    bc:12:99:5a:ba:b2:a0:e2:22:90:b3:c1:1f:93:83:
                    41:d7:b9:ce:a0:23:93:4d:67:f1:a3:9f:0e:65:5e:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C5:7D:D2:B6:20:40:65:82:5B:FC:EC:C2:74:82:A3:81:E1:95:AB
            X509v3 Authority Key Identifier:
                keyid:0C:25:3A:71:9E:8A:44:FC:18:E1:05:B9:5A:A2:34:8B:5D:CE:D5:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DCU6cZ6KRPwY4QW5WqI0i13O1ZU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1008/ksV90rYgQGWCW_zswnSCo4Hhlas.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:44:c2:40:93:60:f6:e8:3a:db:51:67:2a:6d:63:15:74:95:
         e7:b5:33:bf:b8:21:fe:48:aa:cf:50:ae:f7:f9:82:80:39:18:
         2c:7e:aa:aa:08:2c:9c:c4:9d:eb:c7:36:7f:87:70:ef:7c:ca:
         05:64:97:28:92:1f:25:62:1a:f6:12:06:98:80:e4:d1:ee:49:
         97:bf:55:5c:ae:92:7e:71:17:a9:0d:0d:81:1a:d7:27:73:83:
         ca:87:e0:2f:28:96:63:4a:78:c0:16:c1:17:ef:59:d7:9c:7f:
         08:35:9b:9e:d0:0f:25:f3:79:a4:86:e4:95:88:ea:9a:8a:7a:
         40:ba:78:88:19:5e:d0:a1:a3:71:c2:5c:05:cb:3d:a2:79:c8:
         66:44:72:f0:8f:5c:a8:ab:c1:36:b0:33:8f:cb:36:8a:1d:6d:
         5b:a1:a1:9a:66:a0:95:99:69:ad:d4:99:1d:0c:3f:58:15:3b:
         ed:2c:d8:98:3d:da:7b:23:7b:f3:0c:83:1f:3f:19:ba:30:fc:
         a2:37:25:fd:ab:e0:83:bd:12:e3:e0:ad:27:a8:15:8d:9a:88:
         37:b0:74:64:ed:a9:71:11:d1:dd:9e:26:25:89:f1:6c:c8:c6:
         76:bc:ca:09:4f:98:70:ba:ca:9c:40:70:50:8d:4a:b3:98:6d:
         d1:42:a4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 06:49:03 2026 by rpki-client